Privacy Policy
Privacy Policy — Eggo Keto: Keto Diet App (Keto Eggo)
1. Introduction
This Privacy Policy explains how Seyfi Can Zeyrek (trading as Morrowline Apps) (“we”, “us”) processes information in connection with the mobile application Eggo Keto: Keto Diet App (display name Keto Eggo, package eggo_keto_diet) on Android and iOS. Last updated: 2026-07-16.
Related Terms of Use: see the Terms linked in the App (currently https://ketoeggo.morrowline.app/en/terms/) and the release Terms document published with this Policy.
2. Data controller
| Field | Value |
|---|---|
| Legal name | Seyfi Can Zeyrek (natural person) |
| Brand | Morrowline Apps (brand only — not a registered company) |
| Trading as | Seyfi Can Zeyrek (trading as Morrowline Apps) |
| Address | Esenyali Mahallesi 52/75 Sk. Izmir/Türkiye |
| Country | Türkiye |
| Privacy email | sczgamesinfo@gmail.com |
| Support email | sczgamesinfo@gmail.com |
| DPO contact | sczgamesinfo@gmail.com |
| Telephone | +90 555 027 76 81 |
| Website | https://ketoeggo.morrowline.app/ |
3. Scope
This Policy covers the Android and iOS apps identified by bundle/application id com.eggo.keto.diet, including home-screen widgets and App Group data used for widgets (group.com.eggo.keto.diet). It applies to version 1.0.0+3 and later unless replaced.
4. Data we collect
Empty categories are omitted. Categories below match the codebase inventory.
| Category | Examples | Purpose | Location | Retention | Shared with |
|---|---|---|---|---|---|
| Health / diet (local) | Onboarding answers (gender, age, height, weight goals, activity, keto experience, food preferences, display name); nutrition targets; meal plan; daily food, water, and sport logs; widget macro snapshot | Provide meal plans, tracking, widgets | On device | Until uninstall | Not uploaded by the App |
| Account identifier | Firebase anonymous UID (also linked to RevenueCat) | Run the App, subscriptions, push token path | On device + Firebase | Until uninstall / deletion request | Google (Firebase Auth), RevenueCat |
| Device identifier (cloud) | FCM token, platform, updatedAt | Deliver push notifications | Google Firestore (users/{uid}/device_tokens) |
Until refresh / deletion request | Google (FCM, Firestore) |
| Settings / preferences | Measurement units; ad session counters; health-warning and plan-disclaimer acceptance metadata; catalog cache files | App function, ads gating, content | On device | Until uninstall / cache clear | Not shared |
| Consent records | Health warning acceptance; plan disclaimer acceptance; UMP ad consent signals | Compliance and ads consent | On device; Google UMP/AdMob where applicable | Until uninstall / consent reset | Google (where consent applies) |
| Analytics events | Screen views; paywall; ad; recipe; food events | Product analytics | Google Firebase Analytics | Per Google | |
| Crash diagnostics | Stack traces; device/OS; Crashlytics user id | Stability | Google Crashlytics | Per Google | |
| Advertising data | Ad interactions; advertising IDs where allowed | Ad delivery and measurement | Google AdMob | Per Google / consent | |
| Purchase history | App user id; entitlement; store transaction metadata | Validate subscriptions | Apple/Google + RevenueCat | Per store / RevenueCat | Apple, Google, RevenueCat |
| Ephemeral tracking UI | Weight and body measurements entered in tracking screens | Session UI only | Device memory only | Session only (not persisted) | Not shared |
| Config (non-personal) | Catalog/version config in Firestore config/versions |
Content versioning | Google Firestore | Ongoing |
We do not claim that all data stays on your device. Core diet tracking data is stored on your device; limited cloud processing occurs for catalog delivery, push token registration, analytics, crash reporting, advertising, and subscription validation.
5. How we collect
- You provide: onboarding answers, food/water/sport logs, display name, measurement preferences.
- Automatically: anonymous authentication; analytics and crash events; ad events; remote config flags; catalog downloads via Cloud Functions / HTTPS; FCM token registration after notification permission.
- Permissions: Android
INTERNET,BILLING,POST_NOTIFICATIONS; iOS notification usage description; iOS tracking usage description string (ATT SDK not invoked in code — see §8).
6. Why we use data
Provide keto meal planning and tracking; sync recipe/food catalogs; validate Premium subscriptions; show ads on the free tier; measure product usage; fix crashes; send optional reminders; secure backends (App Check).
7. Legal bases
Where GDPR/UK GDPR or KVKK apply: contract (core App features and subscriptions); consent (personalized advertising and certain analytics where required); legitimate interests (security, crash diagnostics, limited analytics where permitted); legal obligation when required. See also §12 regional modules.
8. Sensitive permissions and disclosures
The App does not use Accessibility, Usage Access, overlay, camera, or HealthKit APIs.
Notifications (Android POST_NOTIFICATIONS / iOS notifications)
| FOR | NOT FOR |
|---|---|
| Optional keto goal reminders via Firebase Cloud Messaging | Reading other apps’ notifications; accessing message content of third-party apps |
If granted, an FCM token may be stored in Firestore under your anonymous UID.
Purchases (Android BILLING)
Used only for Google Play billing through RevenueCat. Payment card data is processed by Apple/Google, not by us.
Internet
Required for Firebase, catalog download, ads, and subscription validation.
iOS tracking description
NSUserTrackingUsageDescription is present. Inventory records att_enabled_ios: false (no App Tracking Transparency request in code). Personalized ads remain subject to Google UMP and platform rules. Use iOS Settings → Privacy to manage tracking preferences.
9. Sharing and processors
We share data with processors only as needed to operate the App:
| Vendor | Services (inventory) | Typical data |
|---|---|---|
| Firebase Core, Analytics, Crashlytics, Auth, Messaging, Firestore, Cloud Functions, App Check, Remote Config, Storage (wired; limited usage), AdMob, UMP | UID, events, crashes, tokens, config, ads, consent | |
| RevenueCat | purchases_flutter | App user id, purchase/entitlement status |
| Apple / Google | App Store / Play Billing | Payment processing under store terms |
We do not sell your personal information for money. Advertising/analytics may involve “sharing” under some US state laws — see California section.
purchases_ui_flutter appears in dependencies but is unused in app code.
10. International transfers
Cloud processors may process data in the United States and other countries. Where required, transfers rely on adequacy decisions and/or Standard Contractual Clauses and vendor data processing terms.
11. Retention
| Data | Retention |
|---|---|
| On-device SharedPreferences / catalog cache / widget snapshot | Until uninstall (or cache clear) |
| Session weight/body measurements | Not persisted; lost when session ends |
| Firestore device tokens | Until token refresh or deletion request |
| Analytics / crash / ads / purchases | Per respective vendor policies |
12. Your rights
EEA / UK (GDPR / UK GDPR)
You may request access, rectification, erasure, restriction, portability, and objection; withdraw consent; and lodge a complaint with your supervisory authority (or the UK ICO). Contact: sczgamesinfo@gmail.com. Phone: +90 555 027 76 81.
Transfers and legal bases: see §7 and §10. We do not use solely automated decision-making with legal or similarly significant effects.
Türkiye (KVKK)
See the separate Turkish aydınlatma text (https://ketoeggo.morrowline.app/en/kvkk/) for md.10 disclosures. KVKK md.11 rights may be exercised via sczgamesinfo@gmail.com. Explicit consent for personalized ads/marketing is collected separately from aydınlatma acknowledgement (no combined single checkbox).
California (CCPA/CPRA)
Categories (12 months): identifiers; internet activity; commercial information (subscription status); health-related diet inputs you enter (primarily on-device; weight UI ephemeral).
Sources: you; device; service providers.
Purposes: App features; analytics; crash reporting; advertising; subscriptions; security.
Sale/Share: We do not sell for money. Ads/analytics may be “sharing” / targeted advertising. Opt out via OS/UMP controls and email sczgamesinfo@gmail.com with subject “Do Not Sell or Share”.
Rights: know, delete, correct, opt-out, limit sensitive PI, non-discrimination. Submit requests to sczgamesinfo@gmail.com.
13. Account and deletion
The App uses Firebase anonymous authentication. An anonymous identifier is created; this is not “no account” and is not “no identifier.”
In-app account deletion is not currently implemented. To request deletion of cloud-associated data (anonymous identifier linkage and device tokens), email sczgamesinfo@gmail.com. Uninstalling the App removes on-device SharedPreferences, catalog cache, and widget data. Store subscriptions must be cancelled in Apple App Store or Google Play settings.
14. Children
The App is intended for users 18 years of age or older. It is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided data, contact us to delete it.
15. Security
We use industry-standard platform security (including Firebase App Check). On-device SharedPreferences are not encrypted with a dedicated SQLCipher/secure-storage layer. No method of transmission or storage is 100% secure.
16. Automated decisions
We do not make solely automated decisions that produce legal or similarly significant effects about you. Nutrition/plan suggestions are informational tools, not automated legal/medical determinations.
17. Changes
We may update this Policy. We will revise the “Last updated” date and may notify you in-App or via the store listing. Continued use after the effective date means you acknowledge the updated Policy where permitted by law.
18. Contact
Seyfi Can Zeyrek (trading as Morrowline Apps)
Esenyali Mahallesi 52/75 Sk. Izmir/Türkiye
Email: sczgamesinfo@gmail.com
Telephone: +90 555 027 76 81
Website: https://ketoeggo.morrowline.app/
In-App Privacy link (current code): https://ketoeggo.morrowline.app/en/privacy/
