Privacy Policy

Who we are

The Parcelvy app is published on the App Store and Google Play by OMMETRICS BİLGİ TEKNOLOJİLERİ PAZARLAMA ANONİM ŞİRKETİ (“Parcelvy”, “we”, “us”). TODO: confirm this company is the data controller; add its registered address and registration number

Privacy questions: info@parcelvy.com. TODO: data protection contact (and EU/UK representative, if required)

This policy covers the Parcelvy app and this website, parcelvy.com.

In short

• No account: the app signs you in anonymously. We never ask for your name, email address or phone number.
• We use the tracking numbers you add to follow your parcels through our tracking-data provider.
• Screenshots and text you add are sent to Anthropic (Claude) for processing and are not stored by Parcelvy.
• Parcelvy never reads your SMS messages and never looks up parcels by phone number.
• We use Firebase Analytics, Mixpanel and Adjust to understand how the app is used and to measure marketing. On iPhone, the advertising identifier is used only if you allow it in Apple's tracking prompt.
• You can delete your data at any time in the app under Settings → Delete my data.
• This website sets no cookies and uses no analytics or trackers.

What we collect and why

• Anonymous account. When you first open the app, Firebase Authentication creates an anonymous user ID. It keeps your parcels, settings and subscription status together.
• Parcels you add. The tracking number, the carrier, the name you give the parcel and whether it is archived. We need these to track the parcel for you.
• Tracking updates. The status and event history the carrier publishes for your tracking number, such as dates, status texts and city- or country-level locations.
• Device and settings. A push notification token, the platform (iOS or Android), the app version, the app language, your time zone and your notification preferences, so we can notify you in your language.
• Subscription status. Whether your subscription is active, which plan it is and when it ends, as reported by Apple or Google through Adapty. We never see your payment card details.
• Usage and measurement. App events such as finishing onboarding, adding a parcel or seeing the subscription screen, with the app language, device language and region, plan type, app version and a rough count of active parcels. Tracking numbers, pasted text, carrier event texts and addresses are never part of analytics events.
• Advertising identifier. On iPhone, Adjust and Firebase Analytics use Apple's advertising identifier (IDFA) only if you allow tracking in the App Tracking Transparency prompt. TODO: describe use of the Android advertising ID, if any
• Support emails. If you email us, we receive your email address and your message and use them to answer you.

Screenshots, text and translation

When you add a screenshot, an order email or other text so Parcelvy can find a tracking number in it, that text or image is sent to Anthropic (Claude) for processing. It is processed in memory to return the tracking numbers it contains and is not stored by Parcelvy. Each number found is checked against carrier number formats before it is used.

Carrier status texts are sent to Anthropic (Claude) to translate them into your language. Translations are cached on our servers by text, without your user ID, so the same carrier text is not translated twice.

TODO: Anthropic's retention period for API inputs under our agreement

Who processes data for us

• Google (Firebase): anonymous sign-in, database, server functions, push notifications, Firebase Analytics, App Check and Remote Config. Our database is hosted in the EU (Firestore multi-region eur3) and our server functions run in the europe-west1 region (Belgium).
• TrackingMore: our tracking-data provider. It receives tracking numbers and carriers to fetch status updates. TODO: TrackingMore's company country and data location, from its privacy policy
• Anthropic (Claude): finds tracking numbers in screenshots and text, and translates carrier texts.
• Adapty: runs subscriptions and the subscription screens. It receives your anonymous user ID, your purchase status and the IDs used by Mixpanel, Firebase Analytics and Adjust.
• Adjust: measures which marketing led to an install and to subscription events.
• Mixpanel: product analytics. Mixpanel stores our data in the United States.
• Apple and Google: process your payment and subscription under their own terms.
• Cloudflare: hosts this website and forwards emails sent to info@parcelvy.com. TODO: where forwarded support emails are stored

International transfers

Some processors store data outside the European Economic Area, for example Mixpanel in the United States. TODO: transfer safeguards (for example Standard Contractual Clauses) and, if Turkish law (KVKK) applies, the basis for cross-border transfers

Legal bases

We process data to provide the service you subscribe to, to keep it secure and prevent abuse, and to measure and improve the app. We use the advertising identifier for measurement only with your permission. TODO: legal basis for each purpose, confirmed by counsel

How long we keep data

• Parcels stay in your account until you delete them or delete your data. TODO: retention period for archived parcels (an automatic 90-day clean-up is planned but not built yet)
• When nobody follows a tracking number any more, tracking stops and the shared record of that number no longer refers to you. TODO: how long shared tracking records are kept
• Screenshots and text you add for import are not stored.
• TODO: retention periods at Firebase Analytics, Mixpanel and Adjust
• TODO: retention periods for support emails and server logs

Your choices and rights

• Delete your data at any time in the app under Settings → Delete my data. Delete your data explains exactly what this removes and what it does not remove yet.
• Turn notifications on or off in the app's Settings or in your phone's settings.
• On iPhone, change the tracking permission at any time in Settings → Privacy & Security → Tracking.

Depending on where you live, you may have the right to access, correct or delete your data, to restrict or object to its processing, to receive it in a portable format, and to complain to a data protection authority. To use these rights, email info@parcelvy.com. Because the app has no accounts, we may need information from you to find your data. TODO: how requests are verified, the response time, and the competent supervisory authority

Children

Parcelvy is meant for adults (18+). It is not directed at children, and we do not knowingly collect data from children.

Security

Our servers accept requests only from genuine copies of the app (Firebase App Check). Credentials are kept in a secret manager, never in the app. Our logs do not contain full tracking numbers, pasted text or images.

This website

parcelvy.com sets no cookies and uses no analytics, advertising or tracking tools. Cloudflare, our host, processes technical data such as IP addresses to deliver pages and protect the site. TODO: Cloudflare log retention

Changes to this policy

When this policy changes, we update this page and the date at the top.

Contact

Email info@parcelvy.com.