EMDR Mobile – Privacy Policy

Last updated: 16 October 2026

This Privacy Policy explains how data belonging to users of the EMDR Mobile and EMDR Mobile Pro applications (the "App"), developed by GMY Bilişim Sanayi ve Ticaret Ltd. Şti. ("the Company", "we"), is collected, used and protected.

🔹 1. Data We Collect

1.1. Account and Authentication Data

The following information may be collected so that you can sign in to EMDR Mobile:

• Email address
• Password (stored in an irreversibly encrypted format)
• User ID (generated automatically by Firebase)

This data is stored in the Firebase Authentication infrastructure.

1.2. Subscription Data (RevenueCat)

Subscription transactions in the App are handled by the third-party service provider RevenueCat. The data processed by RevenueCat is:

• Subscription type (monthly / annual)
• Subscription start and renewal dates
• Active or inactive subscription status
• Product IDs
• Platform information (iOS / Android)

Payments are processed by the App Store and Google Play. The App never has access to your card details.

1.3. Usage and Technical Data

Anonymous technical data may be collected in order to improve app performance and maintain security:

• Device model
• Operating system version
• App version
• Sign-in and launch times
• Error logs
• Performance measurements

This information is not used to identify individuals.

🔹 2. Purposes of Processing

The data collected is used for the following purposes:

• Creating user accounts and authenticating users
• Verifying subscriptions (RevenueCat)
• Operating the session features within EMDR Mobile
• Improving the user experience
• Strengthening application security
• Complying with legal obligations

🔹 3. Data Storage

• Account data is stored securely by Firebase.
• Subscription data is held by RevenueCat.
• All data transfers take place over HTTPS.
• Passwords are hashed irreversibly.

No therapy session content, audio or client personal data is stored on our servers.

🔹 4. Data Sharing

Your data is not sold and is not shared with third parties for commercial purposes. Sharing may occur only in the following circumstances:

• Legal obligations
• Requests from courts and official authorities
• Service providers required for the App to function:
  • Google Firebase
  • RevenueCat
  • Apple App Store / Google Play Store

🔹 5. Children's Privacy

EMDR Mobile is intended only for users aged 18 and over. We do not knowingly collect data from children.

🔹 6. Your Rights

Users have the following rights:

• Access their account information
• Update their information
• Request deletion of their account
• Object to the processing of their data
• Exercise their rights under the GDPR and the Turkish KVKK

To delete your account and data, see the Data Deletion page.

🔹 7. Security

EMDR Mobile stores all data on secure servers. Our third-party service providers (Firebase and RevenueCat) apply internationally recognised security protocols.

Website Analytics (emdrmobile.com)

The emdrmobile.com website uses Cloudflare Web Analytics to understand, in aggregate, how the site is visited. It is cookie-free: it does not use cookies or any other client-side storage, and it does not fingerprint visitors. The service records aggregate page-view data only: the page path, the referring page, country, browser, operating system and device type, and page load performance. This data is collected by a small script loaded from static.cloudflareinsights.com. No personal profile is built from it and it is not used to identify you.

The data is processed by Cloudflare, Inc. as our processor. See Cloudflare's Privacy Policy.

The EMDR Mobile mobile and desktop apps do not use this analytics service or any other analytics service.

🔹 8. Changes to This Policy

This Privacy Policy may be updated from time to time. Updates will be announced within the App or on this page.

🔹 9. Contact