Tackit — Privacy Policy
Last updated: 3 November 2026 · Terms of Use
This is a translation of the Turkish original. If the two versions differ, the Turkish version prevails.
This policy explains what information the Tackit app (developed by 7Towers; formerly called "Notlarım"; the Android app and the web version at tackitapp.com) collects, how it uses it and how you can delete it. The app has no ads; your information is not sold and is not shared with anyone for advertising.
1. Information we collect
- Account information: your name and email address. Your password is stored in encrypted form by the sign-in service (Google Firebase Authentication); we cannot see it.
- Sign in with Google: the name and email address of your Google account are received; your Google password never reaches us.
- What you write: your notes (including the images in them), tags, colors, reminders and important days. If you create or join a group, the group's name and the names of its members.
- People and places: the name, phone number, address, area, map link, coordinates and note of the people and places you save. Only you can see them. When you save a person, remember you are saving their details; don't add information you don't need.
- Location: your phone's location is read once, only when you tap "Use my current location", and is saved to that entry as coordinates. When you tap "I parked here", the location is also read once and saved as a parking entry with its date and time; only you can see your parking history, and it is kept until you delete it (one by one or with "Delete parking history"). Location is never collected in the background, no other location history is kept, and it is not used for advertising. When you paste a short map link (e.g. maps.app.goo.gl), our server passes it to Google or Yandex to find the address it opens; it is not stored separately for this.
- Shared lists: if you share a note with "Send as a list", the list's title, its items and who checked what are stored together with the people you chose.
- Shared notes: if you share a note as a shared note, the note's title and content (including images), the people you chose and the last person who edited it are stored. The people you chose can see and edit the note.
- Blocking and reports: the list of people you have blocked and the date you accepted the terms are stored. If you report content, a copy of the title and content of the reported shared note or list is sent to the administrator for review, together with the names of both parties.
- Notification address: in the Android app, your phone's notification address (Firebase Cloud Messaging) is stored so you can be notified about lists sent to you; it is deleted when you sign out.
- Usage information: when you last opened the app, device type (Android / web), app version, number of sessions and number of notes; also, for each day, how long you kept the app open, how many times you saved and how much space your account uses (MB). Daily usage information is deleted after 40 days. This is used to improve the service and to prevent abuse. In addition, each time you open the app, sign in or sign out, the time of the event, the device type and the app version are recorded. These records are deleted automatically after 90 days. Whether the app is currently open, and when you last opened and closed it (sent it to the background), is also recorded. This is a single record that is replaced each time, is visible only to the administrator, and is deleted automatically if it is not updated for 90 days.
- Connection logs (Turkish Law No. 5651): each time you open the app, your IP address, the time and the device type are recorded. These logs are kept only because the law requires it, are stored for 1 year and are then deleted automatically. They are shared only at the request of the competent authorities.
- App verification: so that only the genuine Tackit app and website can connect to the cloud services, Google's verification services are used: Google Play Integrity in the Android app and Google reCAPTCHA on the website. These services send technical information about the device and browser to Google; the content of your notes is not sent. For reCAPTCHA, Google's Privacy Policy and Terms of Service apply.
- What stays only on your device: your fingerprint / face unlock preference (biometric data never leaves your device), reminder notifications, and a local copy of your notes for offline use.
2. How we use information
- To sync your notes between your devices and show them to you.
- To show the content you share (e.g. shared days in a group) to the people you choose; in later versions, to send the recipient a notification for lists you send.
- To protect your account and to detect errors and abuse.
If your use puts excessive load on the system, your account may be warned, temporarily blocked from writing or suspended; your data is not deleted.
The app's administrator can see only account and usage information (name, email, sign-up and last active dates, device, version, counts). The content of your notes and important days is not shown in the admin panel. Technically, the owner of the Firebase project can access the stored data from Google's admin console. This access is used only to fix errors, to review reported abuse or when required by law.
3. Where information is stored
Data is stored on Google's Firebase services (Firebase Authentication and Cloud Firestore, Google LLC) and is encrypted in transit. Google's privacy principles: firebase.google.com/support/privacy. No data is transferred to any third party other than this service provider; the only exception is an AI assistant you connect yourself (see section 8).
4. Deleting your account and data
From the app: Settings → account section → Delete my account. After you enter your password and type "DELETE" to confirm, your notes, trash, important days, the shared lists you sent, your profile and your sign-in account are deleted immediately and permanently. If you are in a group, you are removed from it; the group's shared days remain with the other members.
If you cannot open the app: send an email saying "delete my account" from your registered email address to mrlocohome@gmail.com; your account and all your data will be deleted within 30 days at the latest and you will be informed.
5. Retention period
Your information is kept until you delete your account. Notes you move to the trash are deleted automatically after 30 days. When an account is deleted, its data is deleted immediately.
6. Your rights (KVKK)
Under Article 11 of Turkish Personal Data Protection Law No. 6698 (KVKK), you have rights such as learning whether your data is processed and asking for it to be corrected or deleted. You can download your notes at any time with Settings → "Export notes". For requests: mrlocohome@gmail.com.
7. Children
The app is not intended for children under 13 and does not knowingly collect information from them.
8. AI assistant connection
If you want, you can connect your Tackit account to an AI assistant you use (e.g. Claude, ChatGPT, Gemini). A connection is made only when you sign in and tap "Allow".
- What is shared: at your request, the assistant can search, read, add and edit your notes, important days, people and places, and move notes to the trash and restore them. Notes you mark as "hidden" are not shown to the assistant. The assistant cannot permanently delete anything, share anything with anyone, or access your account settings or other users' data.
- The assistant's company: the information the assistant reads goes to the company that provides it (e.g. Anthropic, OpenAI, Google) and is subject to that company's privacy policy. You decide which assistant to connect.
- What we store: the connection's name, the address it connects to, when it was made and last used, daily usage counts, and only an irreversible digest of the access keys (the keys themselves are not stored). Changes made by the assistant are written to the version history so a note's earlier state can be restored.
- Removing: you can remove a connection at any time in Settings → "Connected AI apps"; the assistant loses access immediately. Connections unused for 60 days are deleted automatically. If you delete your account, connections stop working immediately and are deleted automatically.
9. Changes
If this policy changes, the current version is published on this page and the date at the top is updated.