Privacy Policy · Sistr

Last Updated: 2026/10/25

1. Introduction

Sistr is an app provided by Tunahan Aktay (“we”, “us”, or “our”), who is committed to protecting your privacy. This Privacy Policy applies to Sistr and its various versions and is part of our Terms of Use. This policy explains what data the app processes, why, and your choices. Before your first story is written, the app asks for your permission and names the AI providers involved; if you decline, nothing is sent. Your stories, settings and progress stay on your device. Sistr shows no ads and does not track you across other companies’ apps or websites.

None of the data collected by this app is linked to your identity: the app has no accounts and never asks for your email address. The first name you may enter stays on your device and goes only into your story requests. If you contact support, we receive only what you choose to send.

2. Who We Are

Sistr is developed and operated by Tunahan Aktay, who is responsible for the processing described in this policy. Contact: tunahanaktay.apps@gmail.com.

3. Data We Collect

We collect the following categories of data, none of which is linked to your identity:

User Content

Other User Content: Used for App Functionality

Your name and story settings (stored on the device)

During setup, you can enter a first name, your date of birth, the seasons of life you are in, your interests and a reminder time. These choices are stored only on your device, and you can change them in Settings. The date of birth itself never leaves your device; the app works out your age from it.

Story requests (sent to our AI providers)

When you ask for a story, the app sends a description of it to our AI providers: the Holy Path story or the situation you picked, the story length and language, whether to apply it to life today, your age in years, the seasons of life you chose, and your first name if you entered one, so the story can speak to you by name.

• Story text and illustrations: OpenRouter, Inc. receives the request and passes it to Google’s AI models, which write the story and draw three illustrations for it. The illustration requests carry only a scene description taken from the story.
• Narration: ElevenLabs receives the text of each page, which can include your first name, together with the narrator voice and language you chose. When narration is unavailable, your iPhone’s own voice reads the story on the device.

All of these requests pass through AIProxy, a secure relay that protects our service keys and blocks abuse. It does not store the content of the requests.

Stories (stored on the device)

The stories, illustrations and narration the app creates are saved only on your device, in your library. Devotionals, affirmations and verses are part of the app and are not personalized by AI. We do not keep copies of your stories on our servers.

Identifiers

Device ID: Used for App Functionality, and Analytics

A device identifier is collected to keep AI requests secure and to prevent abuse. Firebase and Mixpanel assign a random identifier for analytics, and RevenueCat assigns one to manage purchases. These identifiers are random and not linked to your name, email address or account. The app never accesses your device’s advertising identifier.

Location

Coarse Location: Used for Analytics

Firebase Analytics and Mixpanel estimate your approximate country and city from your IP address. We do not request or collect your precise location.

Purchases

Purchase History: Used for App Functionality, and Analytics

If you make in-app purchases, transaction data is processed by Apple and RevenueCat to manage your subscription. This data is used to provide access to premium features and to analyze purchasing trends in aggregate. We do not receive your payment card details. RevenueCat also receives Apple’s install attribution token, which tells us whether the app was found through an Apple Search Ads campaign; Apple provides it without identifying you. RevenueCat also sends subscription events, such as purchases, renewals and cancellations, to Mixpanel under the same random identifier.

Usage Data

Product Interaction: Used for Analytics

We collect data about how you interact with the app (e.g., screens viewed, features used) through Firebase Analytics and Mixpanel. This helps us understand how the app is used and identify areas for improvement.

Diagnostics

Crash Data: Used for App Functionality

Crash reports are collected through Firebase Crashlytics to help us identify and fix issues that affect app stability.

Other Diagnostic Data: Used for App Functionality, and Analytics

Additional diagnostic information (e.g., error logs) may be collected to monitor app health and improve reliability.

Support

If you contact us, we receive the email address, message and any attachments you choose to send. A support email prepared by the app includes app and device details, your language and a support ID that lets us find your purchase, to help us investigate your request; you can review and remove them before sending.

Other Data

Other Data Types: Used for App Functionality, and Analytics

Your IP address is used to keep AI requests secure, to prevent abuse, and by AIProxy to measure usage limits.

4. AI Stories and Narration

Stories are written and illustrated by Google’s AI models and read aloud by ElevenLabs. Only what a story needs is sent: the details listed in User Content above, never your date of birth, your interests, your reminder settings or your library. Requests for text and illustrations run with zero data retention: Google does not store them or use them to train models, and they are discarded once the story is returned.

5. How We Process Your Story Requests

• Temporary processing: A story request is sent through AIProxy to OpenRouter, Inc., whose Google AI models write the story and draw its illustrations, and the story’s text is sent to ElevenLabs to be read aloud.
• No storage: Once the story is returned to your device, our AI providers discard the request. We do not store story requests or stories on our own servers.
• No biometric analysis: The app does not extract or analyze facial features for identification or profiling purposes. No biometric identifiers are created, inferred, or retained.
• No human review: All processing is handled by automated AI models. No person views your story requests or stories, unless you choose to send one to us when asking for support.

6. Legal Bases

We process story requests with your consent, given in the app before your first story; analytics and crash data on our legitimate interest in keeping the app working and improving it; security data, such as your IP address, on our legitimate interest in preventing abuse; purchase data to provide your subscription; and support emails on our legitimate interest in answering you.

7. Third-Party Services

We use the following third-party services:

• AIProxy: Secure AI service routing. Uses a random, stable device identifier and your IP address for security and to measure usage limits. It does not store the content of requests; it keeps the IP address, request metadata and error responses for 30 days.
• Apple In-App Purchases: Secure transaction handling.
• ElevenLabs: Reads each story aloud in the narrator voice you choose. Receives the text of the story and processes it under its own privacy policy.
• Firebase Analytics: Usage analytics. Collects device identifiers, product interaction data, and approximate location derived from your IP address.
• Firebase Crashlytics: Crash reporting and diagnostics. Collects crash data and diagnostic information.
• Firebase Remote Config: Delivers app settings, such as update and maintenance notices; receives a Firebase installation ID and IP address to do so.
• Google: Runs the AI models that write the stories and draw their illustrations. Requests are processed with zero data retention and are not used for training.
• Mixpanel, Inc.: Product analytics. Collects app interactions, a random identifier, and approximate location derived from your IP address.
• OpenRouter, Inc.: AI-powered story writing and illustration. Passes each story request to the AI models and does not store, retain, or reuse it.
• RevenueCat: Subscription and purchase management. Collects device identifiers and purchase history to manage entitlements, and Apple’s install attribution token for Apple Search Ads. Forwards subscription events to Mixpanel.

These services process data only to the extent required for their core functions. None of the data collected is linked to your personal identity.

8. Data Retention

• Your name, settings and stories: Never stored on any server. Your name, date of birth, seasons of life, interests, progress and the stories the app creates are saved only on your device until you delete them or delete the app.
• Story requests: Not retained by us or by Google. ElevenLabs processes story text under its own privacy policy.
• Analytics and diagnostics: Analytics events and diagnostics are kept by Firebase, Mixpanel and Crashlytics under random identifiers for as long as their retention settings allow, and are then deleted.
• Purchase information: Managed by Apple and RevenueCat under their respective privacy and retention policies.
• Support emails: Kept as long as needed to handle your request and meet applicable legal obligations.
• No user data is linked to personal identity.

9. Data Security

All data transmission between your device, our services and third-party providers is encrypted. We apply appropriate technical and organizational measures to protect your data. While no system can guarantee complete security, we continuously work to safeguard your information.

10. Children’s Privacy

Sistr is not intended for children under 13, or under the minimum age of digital consent in your country if higher. We do not knowingly collect personal data from children. If you believe a child has shared personal data with us, contact us at tunahanaktay.apps@gmail.com and we will help delete it.

11. International Transfers

Our providers process data in the United States and other countries. Where EU or UK law requires it, these transfers rely on the providers’ data protection terms, such as the EU Standard Contractual Clauses.

12. Your Rights

Depending on where you live, including Turkey, the EU, the UK and California, you can ask to access, correct, delete or receive a portable copy of your personal data, object to or restrict its processing, withdraw consent at any time, and complain to your local data protection authority. Because we do not link analytics identifiers to your name or email address, we may be unable to find records that belong to you; email us and we will help as far as we can. You can delete your name, stories and progress with Delete my data in Settings or by deleting the app. We do not sell your personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted here with a revised “Last Updated” date. If a change is significant, we will announce it in the app or on this page before it takes effect, and ask for consent again where the law requires it.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: tunahanaktay.apps@gmail.com