Privacy Policy
1. Data Controller
Sercan ESEN, individual developer
app.ayben@gmail.com
https://ayben-iban-app.web.app
This policy explains how your personal data is processed by the Ayben app (“App”). Ayben is not a banking app; it does not transfer money, connect to bank accounts or provide financial services.
2. Data Collected and Purposes of Use
2.1. Data Provided by the User (Stays on the Device)
- IBAN, account holder name, notes: Entered by the user and stored only in the SwiftData database on the device. This data is not sent to our servers or shared with us.
- QR code images: Generated on the device from the user’s IBANs. If saved, they are stored only in the user’s photo album.
2.2. Device Capabilities (With User Permission)
- Camera: Used to read IBAN text with OCR only when the user starts the “Scan with Camera” action (Apple Vision/VisionKit, on-device processing). It is not accessed in the background, and no images or text are shared with us.
- Photo Library: Write permission is requested only when the user wants to save a QR code image.
2.3. Advertising and User Privacy
- Google Mobile Ads (GMA) + User Messaging Platform (UMP): In the free version, 320×50 banner ads may appear on the Home, Detail and Settings screens. Interstitial ads are not shown during the first app session; only successful new records are counted, and an ad may be shown after at least three new records, at most once per session and at least 20 minutes after the previous display. If the ad is not ready, the display is skipped. npa=1 (non-personalized ads) is enabled; this setting disables personalized targeting.
- In the free version, Google SDKs may process the categories in Google’s current privacy disclosures (including coarse location, performance, crash, advertising data, product interaction, device ID and other diagnostics) for ad delivery, security, measurement and diagnostics. Whether this processing counts as tracking or linkage to the user for the App Store privacy label is separately verified against the active configuration and current SDK declarations.
- Privacy choices: When UMP requires it, the user can review their preferences again using the “Privacy choices” action in Settings.
- Reporting inappropriate ads: Users who can receive ads can send a report by email using the “Report inappropriate ad” action in Settings.
- Pro (one-time purchase): When the user purchases a Pro license, no ad requests are sent.
- SKAdNetwork: Apple SKAdNetwork is supported for ad conversion measurement.
2.4. Widgets and Shortcuts
- Home Screen widget (Ayben Pro): A separate projection file is kept in the App Group for the widget. This file contains the account holder, bank and category names, if any, in plain text; for the IBAN, it contains only the masked last four digits. Notes and the full IBAN are not written to the widget file. The small widget can show one record, and the medium widget up to three records, on the Home Screen. Content is marked as
privacySensitive; iOS widget privacy behavior depends on system settings. - Lock Screen widget (Ayben Pro): For this widget, the account name and favorite status are also written to the same projection file. The Lock Screen shows only the account name and the last four digits of the IBAN; it does not show the account holder or the full IBAN. Content is marked as
privacySensitive. - Siri and Shortcuts (Ayben Pro): Record selection lists may show the account holder, bank and category name, if any; category selection lists may show the category name. Shortcuts do not return the full IBAN or copy it directly to the clipboard; they open the selected record or category in Ayben. The full IBAN is written to the clipboard only through the copy action inside the app.
- App lock: When the Face ID / Touch ID lock is enabled, it does not separately lock these name fields in the widget or Shortcuts selection lists. When a Shortcut opens Ayben, the app lock is not bypassed; the app must be unlocked to access record content and copy inside the app.
2.5. Encrypted Backup and Share Menu
- Encrypted backup: If the user chooses, records and categories can be exported to a
.aybenbackupfile encrypted with a password the user sets (PBKDF2-SHA256 and AES-GCM-256). The file is saved only where the user chooses (for example Files, iCloud Drive or AirDrop); it is not sent to us. The password is not stored anywhere; if it is lost, the backup cannot be opened. Restoring happens on the device. - Share menu: When the user chooses “Share → Ayben” in another app, the shared text is examined on the device. Only the IBAN found and the account holder name, if any, are kept in a protected file in the App Group for at most 24 hours, until Ayben is opened and the record form is saved or the user discards the form. The rest of the text is not stored.
2.6. Purchases
- StoreKit 2: The Pro license (
com.ayben.app.pro.lifetime) is offered through Apple StoreKit. Payments are managed by Apple; we do not have access to payment information.
3. Data Sharing
No IBAN records, account holder information or notes are sent to our servers or to the advertising provider; all remain on the user’s device. In the free version, Google SDKs may process advertising and device-related data for ad delivery, security, measurement and diagnostics under their own privacy policies.
4. Data Retention and Deletion
All user data is stored on the device. The user can remove all data from the device at any time by deleting the app. No separate server-side deletion is required. Backup files the user creates remain where the user saved them until the user deletes them.
5. Children’s Privacy
The App is not intended for users under 13 and does not knowingly collect data from children.
6. Changes
This policy may be updated. The current text and last updated date are published on this page.
7. Contact
For questions: app.ayben@gmail.com