CUSTOMSAI – PRIVACY POLICY

Last Updated: 16 January 2026

This Privacy Policy explains how Lebasoft ("we") processes personal data in connection with the CustomsAI mobile application ("App") and the lebasoft.net website ("Website").

App name shown to users: CustomsAI / "CustomsAI – Gümrük Asistanı"

Package/Application ID: com.lebasoft.gumrukmuhafizi (technical identifier)

CustomsAI provides informational guidance about customs rules and travel allowances. It is not a government service and rules may change.

1) Controller & Contact

Controller: Lebasoft (independent developer / brand)

Location: Ankara, Türkiye

Contact: [email protected]

2) No Accounts / No Authentication / No Cloud Sync

The App does not support account creation, login/authentication, or cloud synchronization. Therefore, there is no in-app "account deletion" feature.

3) Standard vs Premium

The App may offer Standard and Premium features. Premium access depends on your in-app purchase/subscription status. We do not receive or store payment card details; purchases are handled by the relevant app store infrastructure.

4) Data Categories

A) User Inputs

Text you submit (questions, selected country, travel scenario details).

Product photos you capture/upload for "Visual Analysis".

Please avoid including sensitive information (IDs, addresses, receipts, etc.).

B) On-Device (Local) Storage

Your queries/analysis history is stored locally on your device (not synced to our servers).

C) Firebase Analytics & Crashlytics

We use Firebase Analytics and Firebase Crashlytics for usage metrics and crash/performance diagnostics.

D) Ads (Google AdMob)

We use Google AdMob. The Google Mobile Ads SDK may collect IP address, interaction data, diagnostics, and device/account identifiers (including Android Advertising ID) for advertising, analytics, and fraud prevention.

Android Advertising ID can be reset/limited by users and can be restricted by developer configuration.

E) Subscriptions (RevenueCat)

We use RevenueCat to manage subscription status. By default, the RevenueCat SDK can generate anonymous App User IDs used to identify customers in RevenueCat's system.

RevenueCat describes itself as a processor when handling end-user personal data and notes developers should disclose relevant usage in their privacy policy.

5) Purposes

Service delivery, AI responses, diagnostics and improvements (including closed beta), ad delivery/measurement, subscription management, legal compliance, and abuse prevention.

6) AI Processing (Gemini / Vertex AI via Firebase)

Your text/images may be transmitted to and processed on Google infrastructure to generate responses. Google documents training restrictions and limited retention/logging scenarios for abuse monitoring depending on configuration and terms.

7) International Transfers

Due to Google/Firebase infrastructure, AdMob, and RevenueCat, data may be processed outside Türkiye. KVKK's cross-border transfer framework is described by the Turkish DPA.

8) Retention

Local history remains on-device until you clear app data or uninstall. Analytics/crash and subscription-related data are retained per provider settings/policies and operational needs.

9) Your Rights (KVKK / GDPR)

Under KVKK, data subjects have rights including access, correction, deletion, objection, etc.

Contact: [email protected]

10) Security, Children, Website Cookies, Changes

Reasonable measures are used; not 100% secure. Not intended for children under 13 (or higher where required). Website may use limited cookies/local storage for basic functionality; you can manage cookies in browser settings. We may update this Policy and publish the latest version on the Website.