Skip to content

Privacy Policy & Data Protection Notice

Last updated: February 2, 2026
Quick links: Terms of Service · KVKK Notice · Account & Data Deletion · Contact & Support

1. Introduction and scope

This Privacy Policy & Data Protection Notice explains how Bulurang (“Bulurang”, “we”, “us”) collects, uses, stores, and shares information when you use the Bulurang Android app (the “App”) and related web pages (the “Service”). This Notice is written to be clear and specific for Google Play compliance.

2. Data we collect

We collect the following categories of data:

  • Account and sign-in data: your Firebase Authentication user identifier (UID), your sign-in method, and (if you sign in with Google) basic profile data provided via Google Sign-In through Firebase Authentication (such as name, email, and profile photo, depending on your Google account settings).
  • User content: items you create and save in the App, such as photos you attach, notes, lists, categories, and reminders.
  • Advertising data: data related to ads shown in the App, including the Android Advertising ID (AD_ID) where available, ad impressions and interactions, and typical device/network signals used for ad delivery and fraud prevention (for example IP address, device model, and operating system version).
  • Device/app data and diagnostics: app version, device OS version, language, and basic diagnostic information (for example error states related to sign-in or ad loading).
  • Support communications: the content of messages you send us (for example by email).

3. How we use the data

We use each category of data for the purposes below:

  • Account and sign-in data: to authenticate you, keep your account secure, and provide account support.
  • User content: to provide the App’s core functionality (saving, organizing, and displaying your items, photos, notes, lists, categories, and reminders on your device).
  • Advertising data: to display ads, measure ad performance, limit ad frequency, and detect/prevent ad fraud and abuse (Google AdMob).
  • Device/app data and diagnostics: to operate, troubleshoot, secure, and improve the App.
  • Support communications: to respond to you and resolve requests.

4. Where data is stored (on-device vs cloud)

  • On your device: your saved items (photos, notes, lists, categories, reminders) are stored locally on your device.
  • Google Firebase Authentication: your account sign-in data (UID and sign-in association) is stored and processed by Google Firebase Authentication to enable login.
  • Google AdMob: ad-related data is processed by Google AdMob to show and measure ads.

5. Third-party services we use

We use these Google services as service providers/processors:

  • Google AdMob: displays ads in the App and may process advertising identifiers (AD_ID) and ad measurement data.
  • Google Firebase Authentication: user authentication.
  • Google Sign-In: sign-in method used via Firebase Authentication.

6. Data sharing (and no sale of data)

We do not sell your personal data. We share data only as needed to provide the Service and for legal/security reasons, including:

  • With Google as a service provider: via Firebase Authentication and AdMob as described above.
  • For legal and safety reasons: if required to comply with law or to protect the rights, safety, and security of users and the Service.

7. Advertising and the Android Advertising ID (AD_ID)

Bulurang shows ads using Google AdMob. Where available, AdMob may access the Android Advertising ID (AD_ID) and related signals to deliver and measure ads and to prevent fraud. You can reset or delete your Advertising ID (where supported) and control ad personalization in your Android device settings and Google ad settings.

8. Data retention

  • User content (on-device): kept until you delete it in the App or remove the App’s data.
  • Account data (Firebase Authentication): kept while your account is active and deleted when you use the in-app “Delete Account” feature (subject to limited retention where required for security or legal compliance).
  • Advertising data: retained by Google AdMob according to Google’s policies.
  • Support communications: kept as needed to respond and maintain appropriate records.

9. Security

We use reasonable measures to protect data in our control. However, no method of storage or transmission is 100% secure.

10. Your rights and choices

Depending on your location, you may have rights such as:

  • Access, correction, and deletion of personal data.
  • Objection to certain processing and restriction in some cases.
  • Data portability where applicable.
  • Withdrawing consent where we rely on consent (for example, certain ad personalization where required).

To make a request, contact us at dataprotection@bulurang.com.

11. Users in Türkiye (KVKK / Law No. 6698)

For users in Türkiye, Bulurang acts as the data controller for the processing described in this Notice. We process personal data based on applicable legal grounds under KVKK (including contract necessity, legal obligation, legitimate interests, and explicit consent where required).

Under KVKK Article 11, you may request information, access/correction, deletion under KVKK conditions, and object to certain outcomes of automated processing. You can submit KVKK requests to dataprotection@bulurang.com.

12. Children’s privacy

The App is not intended for children and is not directed to children under 13. We do not knowingly collect personal data from children.

13. Account deletion

You can delete your account in the App using the “Delete Account” feature. This deletes your Firebase Authentication account record. Your on-device content remains on your device until you delete it in the App or uninstall/clear the App’s data. For details, see Account & Data Deletion.

14. Contact

We may send service emails from noreply@bulurang.com. This inbox is not monitored.

15. Changes to this Notice

We may update this Notice. We will update the “Last updated” date when changes are made.