This Privacy Policy explains how Catch Yazılım Limited Şirketi ("Company", "we") collects, uses, shares, and protects your personal data when you use the HeartUp mobile application ("Application").
Catch Yazılım Limited Şirketi
Maslak Mah. Büyükdere Cad. Uso Center No: 245/27, Sarıyer/İstanbul
Contact: heartup@catchmobiletech.com
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing core app features (pulse measurement, reports) | Performance of a contract, Art. 6(1)(b) |
| Processing health data (sensitive data) | Explicit consent, Art. 9(2)(a) |
| Analytics and error tracking | Legitimate interest, Art. 6(1)(f) |
| Marketing communications | Consent, Art. 6(1)(a) |
| Compliance with legal obligations | Legal obligation, Art. 6(1)(c) |
HeartUp uses your phone's camera and flash to measure your heart rate. The image data obtained during this measurement is processed instantaneously for pulse calculation; the raw camera footage is not stored on your device and is not transmitted to our servers. The calculated pulse, HRV, and stress metrics are processed only to be displayed on your own device and, if you choose, optionally written to HealthKit. This data is not used for marketing, advertising, or profiling purposes and is not shared with third parties.
If you grant permission, the HeartUp app can sync your pulse data with HealthKit. Data read from or written to HealthKit is processed only within the permissions you specify in your device settings and is not used for advertising or marketing purposes.
SDK-based tools (e.g. Firebase, analytics providers) are used for performance analytics and crash reporting. You can disable tracking permissions from your device settings.
Your data may be shared with cloud infrastructure providers (e.g. AWS, Firebase), payment processors (Apple, Google), customer support systems, and, where legally required, competent authorities. Your data is never sold.
Your data may be transferred to servers located outside Türkiye or the European Economic Area; in such cases, appropriate safeguards such as Standard Contractual Clauses are applied.
You have the right to access, rectify, and request deletion of your data, to object to processing, to withdraw your consent, and to data portability. For requests, contact: heartup@catchmobiletech.com
SSL/TLS encryption, access restrictions, data minimization, and regular security audits are applied.
The Application is not directed at users under the age of 13; we do not knowingly collect data from this age group.
This policy may be updated periodically. Material changes will be communicated in-app or via email.
Catch Yazılım Limited Şirketi
Maslak Mah. Büyükdere Cad. Uso Center No: 245/27, Sarıyer/İstanbul
Email: heartup@catchmobiletech.com