Privacy Policy

1. Who we are
2. What we collect
3. Camera, microphone and other permissions
4. How we use information
5. Legal bases (Türkiye, EEA, UK)
6. Who we share it with
7. How long we keep it
8. International transfers
9. Security
10. Your rights and choices
11. US state privacy rights
12. Children
13. Changes to this policy
14. Contact us

1. Who we are

This policy explains how Match Medic Sağlık Yazılım ve Bilişim Anonim Şirketi (“Match Medic”, “we”, “us”), a company established in the Republic of Türkiye and the developer of the Lume: Alarm Clock to Wake Up Early app (“Lume” or the “App”) and this website, handles personal information. We are the data controller (veri sorumlusu) for the information described here. Our address is Maslak Mah. AOS 55. Sok. 42 Maslak B Blok Sitesi No:4 İç Kapı: 542 Sarıyer / İstanbul, Türkiye.

This policy covers the App and this website. It does not cover Apple’s App Store or other services we link to, which have their own policies.

2. What we collect

Information you give us

• Account details. If you create an account, your name and email address, or the anonymised relay address Apple provides if you use Sign in with Apple.
• Alarm and mission settings. Alarm times, repeat days, sounds, the mission chosen for each alarm, and mission settings such as difficulty or number of reps.
• Support messages and feature requests you send us, including your contact details and anything you choose to include.

Information created when you use Lume

• Mission results and progress. Whether a mission was completed, how long it took, problems solved or reps counted, your Sunrise Streak, Mornings Crushed count and wake-up times.
• Subscription status. Whether you have an active trial or subscription, the plan and its renewal or expiry date. Apple tells us this; we don’t receive your payment card or billing address.
• Usage and diagnostic data. Which screens and features are used, app version, device model, iOS version, language, time zone, an app instance ID, crash reports and performance data, collected through Google Firebase. Apple also gives us aggregated App Store and app usage statistics through App Store Connect if you have chosen to share analytics with app developers in iOS Settings.
• Marketing attribution. We use AppsFlyer to understand which ads, videos and campaigns lead people to install Lume and start a trial or subscription. AppsFlyer receives device information, IP address, the identifier for vendor (IDFV), install and in-app events such as trial starts and purchases, and, only if you allow tracking in Apple’s App Tracking Transparency prompt, the advertising identifier (IDFA). If you don’t allow tracking, attribution relies on Apple’s privacy-preserving tools (SKAdNetwork / AdAttributionKit) and aggregated data.

What we do not collect

We do not record, store or upload photos, video or audio captured during missions. We do not collect precise location, contacts, health data or your payment card details.

3. Camera, microphone and other permissions

Lume asks for access only when a feature needs it. You can change these permissions at any time in iOS Settings › Lume. If you turn one off, missions that need it won’t be available, but other missions and normal alarms keep working.

4. How we use information

• To run your alarms and missions and to check whether a mission was completed.
• To show your streaks, wake-up history and statistics.
• To create and manage your account, back up your alarms, settings and progress, and restore them on a new device. Data is stored on your iPhone and synced to our servers, hosted on Google Firebase, from time to time.
• To provide your free trial and subscription, and to apply offers (through RevenueCat and Apple).
• To answer support requests and feature requests.
• To fix bugs, keep the App secure and understand which features are used, so we can improve them.
• To measure which marketing brings people to Lume (through AppsFlyer), using the advertising identifier only where you have allowed tracking.
• To comply with legal obligations and enforce our Terms of Use.

We don’t use your information for automated decisions that have legal or similarly significant effects on you.

5. Legal bases (Türkiye, EEA and UK)

We process personal data under Turkey’s Personal Data Protection Law No. 6698 (KVKK) and, for users in the EEA and UK, the GDPR and UK GDPR. We rely on:

• Performance of a contract: running the alarms, missions, account and subscription you asked for.
• Legitimate interests: keeping the App secure, fixing problems, and understanding usage in a way that doesn’t override your rights.
• Consent: camera and microphone access through iOS prompts, tracking for marketing attribution, and optional analytics where required. You can withdraw consent at any time in iOS Settings.
• Legal obligation: keeping records required by tax and consumer law.

Under KVKK these correspond to the conditions in Article 5(2): processing necessary for a contract (c), for a legal obligation (ç), and for our legitimate interests (f), and your explicit consent (Article 5(1)) where that is required.

6. Who we share it with

We don’t sell your personal information and we don’t share it for cross-context behavioural advertising except where you have allowed tracking. We share information only with:

• Apple, which processes App Store purchases and subscriptions, speech recognition, Sign in with Apple if you use it, and App Store Connect statistics.
• Service providers that process data for us under contracts limiting its use to providing services to us:

• Authorities or others when the law requires it, or to protect the rights, safety or property of our users, us or others.
• A buyer or successor if we are involved in a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.

7. How long we keep it

• Account, alarm and progress data: while your account is active. We delete it within 30 days after you delete your account, except backups, which are overwritten within a further 90 days.
• Data stored only on your iPhone: until you delete it or uninstall Lume.
• Support messages: up to 2 years after the conversation ends.
• Analytics and crash data: up to 14 months, or as set by the provider.
• Purchase records: as long as tax and accounting law requires.

8. International transfers

We are based in Türkiye, and our service providers process data in other countries, including the United States and the European Union. For transfers out of Türkiye we rely on the safeguards in Article 9 of KVKK, including standard contracts notified to the Personal Data Protection Authority, or your explicit consent where the law allows. For transfers out of the EEA or UK we rely on the European Commission’s Standard Contractual Clauses, the UK Addendum, or the EU-US Data Privacy Framework where the provider is certified.

9. Security

We use encryption in transit, access controls and providers with recognised security practices to protect your information. No system is completely secure, so we can’t guarantee absolute security. If a breach affects you, we will tell you and the relevant authorities as the law requires.

10. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy;
• correct information that is wrong;
• delete your information;
• object to or restrict certain processing;
• receive your information in a portable format;
• withdraw consent at any time, without affecting earlier processing;
• complain to your data protection authority, such as your local EU authority, the UK Information Commissioner’s Office or Turkey’s Personal Data Protection Authority (KVKK).

If you are in Türkiye, these include your rights under Article 11 of KVKK: to learn whether your data is processed, request information about it, learn the purpose and whether it is used for that purpose, know the third parties in Türkiye or abroad it is transferred to, ask for correction, deletion or destruction and for those parties to be notified, object to a result against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing. Apply to us in writing or by email at the address below; we respond within 30 days.

Delete your account in the App: Settings › Delete Account. This permanently deletes your account and synced data. It does not cancel an App Store subscription; cancel that in iOS Settings › your name › Subscriptions.

For any other request, email support@matchmedic.com. We will reply within 30 days and may need to confirm your identity first.

Tracking: you can allow or refuse tracking when Lume asks, and change it later in iOS Settings › Privacy & Security › Tracking. You can also turn off sharing analytics with app developers in iOS Settings › Privacy & Security › Analytics & Improvements.

11. US state privacy rights

If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect, use and disclose; to request deletion and correction; to opt out of the sale or sharing of personal information and of targeted advertising; and not to be treated differently for using these rights. In the last 12 months we collected the categories described in section 2: identifiers, commercial information (subscription status), internet or device activity, and inferences limited to app usage. We have not sold personal information. If you allow tracking, device identifiers shared with AppsFlyer for ad measurement may count as “sharing” for cross-context behavioural advertising under California law; you can opt out by refusing or turning off tracking in iOS Settings, or by emailing us. To use your rights, email support@matchmedic.com. An authorised agent can make a request for you with your signed permission.

12. Children

Lume is not directed to children under 13 and we do not knowingly collect personal information from them. If you are under the age of digital consent where you live (up to 16 in some EU countries), you may use Lume only with a parent’s or guardian’s permission. If you believe a child has given us personal information, contact us and we will delete it.

13. Changes to this policy

We may update this policy as Lume changes. We will change the date at the top, and if a change is significant we will tell you in the App before it takes effect.

14. Contact us

Match Medic Sağlık Yazılım ve Bilişim Anonim Şirketi
Maslak Mah. AOS 55. Sok. 42 Maslak B Blok Sitesi No:4 İç Kapı: 542 Sarıyer / İstanbul, Türkiye
MERSİS no: 0613207557600001
Email: support@matchmedic.com