Privacy Policy
This Privacy Policy explains how RoofStacks ("we", "us") collects, uses and shares information when you use the ÉTALON mobile application for iOS and Android (the "App") and this website. It also explains the choices and rights you have.
We designed ÉTALON so that you can use every feature without creating an account. If you do not sign in, your profiles, sizes and conversions stay on your device.
1. Who we are
The App is published by RoofStacks, which is the data controller for the personal data described in this policy, including for the purposes of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where it applies, the EU General Data Protection Regulation ("GDPR"). You can reach us at apps@roofstacks.com.
2. Information we collect
Information you enter in the App
- Profiles: a profile name, its relation to you (for example partner or family), women's or men's sizing and a fit preference.
- Body measurements (optional): height, bust, waist, hips, inseam, foot length and foot width, if you choose to add them.
- Sizes and conversions: the houses, categories and sizes you enter, the results of your conversions and the conversions you save.
- Settings: for example your preferred unit and how results are saved.
This information is stored on your device. It leaves your device only if you sign in (see below).
Account information (only if you sign in)
Signing in is optional and is used to back up your data and keep it in sync across your devices. You can sign in with Apple (iOS), Google, or a passwordless link sent to your email address. We receive:
- a unique account identifier, the sign-in method you used, and your email address (with Sign in with Apple this may be a private relay address);
- your name, if your Apple or Google account shares it;
- a copy of the profiles, measurements, sizes, conversions and settings described above, and a record of each signed-in device (its platform and the profile active on it).
We never receive your Apple or Google password.
Purchases
Payments for ÉTALON Privé are processed by Apple (App Store) or Google (Google Play). We do not receive your card or payment details. We receive the purchase status, product, purchase and renewal dates and an anonymous app user identifier, through our purchase provider RevenueCat, so that we can unlock Privé on your devices.
Usage and diagnostic information
- App usage: the screens you view and actions such as completing a conversion, saving a result or choosing a house, together with an app instance identifier, device model, operating system version, app version, language and approximate country (derived from your IP address).
- Crash and performance data: when the App crashes or misbehaves we receive a crash report with technical details about the device and app state.
We use this information in aggregate to understand how the App is used and to fix problems. We do not use it to identify you.
This website
The public pages of this website do not use cookies or analytics. Our hosting provider records standard server logs (such as IP address, browser type and time of request) to operate and secure the service.
3. How we use your information
| Purpose | Information | Legal basis |
|---|---|---|
| Providing size conversions, profiles and size memory | Information you enter | Performance of our contract with you |
| Backing up and syncing your data across devices | Account information | Performance of contract; your request to sign in |
| Unlocking and restoring ÉTALON Privé | Purchase information | Performance of contract |
| Showing update notices and keeping the App working | App version, platform | Legitimate interest |
| Understanding usage and improving the App | Usage data | Your consent; without it, only anonymous totals (section 4) |
| Fixing crashes and errors | Crash and performance data | Legitimate interest |
| Measuring which campaigns bring people to ÉTALON | Usage data, advertising identifier (section 4) | Your consent |
| Answering your requests and complying with law | Information you send us | Legal obligation; legitimate interest |
We do not sell your personal data. We do not show ads in the App, and we never use your body measurements for marketing.
4. Analytics and campaign measurement
ÉTALON shows no ads. With your permission, we measure how the App is used and which advertising campaigns (for example on Google) bring people to ÉTALON. We ask for this on a separate screen, Help us improve ÉTALON, with equal "Allow" and "Don't allow" choices.
- Until you allow: the App sends usage events without identifiers, so we only see totals and never you. Campaign results are reported only in aggregate (on iOS through Apple's SKAdNetwork).
- If you allow: usage events may include an app instance identifier and, on Android, the Advertising ID, and the events listed in our campaign reports (first open, account created, first conversion, membership screen viewed and purchases) are shared with Google Ads to measure campaigns. We never allow ads personalisation.
- iOS: after you allow, Apple's App Tracking Transparency prompt asks whether your advertising identifier may be used. You can change this at any time in your iPhone's settings.
- Change it any time: in the App under Account › Privacy & permissions. Withdrawing stops identified measurement from then on.
Learn more in How Google uses information from sites or apps that use its services.
5. Service providers
We share information only with providers that process it on our behalf to run the App:
| Provider | Purpose |
|---|---|
| Google Firebase (Authentication, Cloud Firestore, Hosting) | Sign-in, account backup and sync, this website |
| Google Analytics for Firebase | App usage statistics (with your consent) |
| Firebase Crashlytics | Crash reports |
| RevenueCat | Purchase validation and membership status |
| Apple and Google | Sign in with Apple / Google, payments, app distribution |
| Google Ads | Campaign measurement (with your consent) |
| Firebase Remote Config | App settings that can change without an update |
We may also disclose information if required by law, to protect our rights or users' safety, or as part of a merger or acquisition, in which case this policy will continue to apply.
6. International transfers
Our service providers may store and process information on servers outside Türkiye, including in the European Union and the United States. Where personal data is transferred abroad, we rely on the safeguards provided by law, such as standard contractual clauses, and, where KVKK requires it, your explicit consent.
7. Retention and deletion
- On your device: data you enter stays until you delete it or remove the App.
- Your account: kept for as long as you have an account. You can delete it at any time in the App under Account › Privacy & permissions › Delete account (Veri talebisteps). This permanently deletes your account and the data synced to it from our servers, and for Sign in with Apple revokes the App's access to your Apple ID.
- Usage and crash data: kept for up to 14 months for analytics and 90 days for crash reports, then deleted or aggregated.
- Purchase records: kept as long as required by tax and consumer law.
You can also ask us to delete your data by writing to apps@roofstacks.com from the email address on your account.
8. Your rights
Depending on where you live, including under Article 11 of KVKK and the GDPR, you have the right to:
- learn whether we process your personal data and request information about it;
- access a copy of your data, and receive it in a portable format;
- have inaccurate data corrected and have your data deleted;
- object to or restrict processing, and withdraw consent at any time without affecting earlier processing;
- learn the third parties to which your data has been transferred, in Türkiye or abroad;
- object to a result against you arising solely from automated processing, and claim compensation for damage caused by unlawful processing;
- lodge a complaint with a supervisory authority, such as the Turkish Personal Data Protection Authority (KVKK) or your local data protection authority.
To use these rights, contact us at apps@roofstacks.com. We will answer within 30 days.
9. Children
ÉTALON is for people aged 16 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it. A profile you create for a family member is information you enter and remains under your control.
10. Security
Data is encrypted in transit. Account data is stored with Google Cloud, where it is encrypted at rest, and access rules ensure each signed-in user can read and write only their own account. No method of transmission or storage is completely secure, but we work to protect your information.
11. Changes to this policy
We may update this policy from time to time. We will change the date at the top of this page and, for significant changes, tell you in the App.
12. Contact
RoofStacks
Email: apps@roofstacks.com