Privacy Policy

Last updated: April 22, 2026

What I Collect

When you sign up I collect: your name, email address, password (hashed), timezone (read from your browser), preferred language, preferred currency, and notification preferences. I also store the date you accepted these terms. If you sign in with Google, I additionally collect your Google account ID and your public profile picture URL.

Why I Collect It

To create your account, send reminders, and help you stick to your saving schedule.

Emails

You’ll receive login-related and optional reminder emails. You can turn off reminders anytime in your profile.

Cookies

Only essential cookies for login and session handling.

Third Parties

I rely on a few external services to run Akluma:

• Postmark: receives your name and email address to deliver login and reminder emails. Postmark retains delivery logs (recipient, subject, delivery status) for around 45 days per their own policy.

• Google Sign-In: if you sign in with Google, Google shares your name, email, profile photo URL, and Google account ID with Akluma. Akluma does not send any data back to Google.

• Fly.io: hosts the database and application servers in Paris, France. All your data lives here. Encrypted database backups are retained for 5 days.

• Google Search Console: receives anonymized aggregate traffic data from search engines. No personal data.

Children

This site is not meant for children under 13. I do not knowingly collect personal data from children under 13. If you're a parent and believe your child signed up, contact me and I will delete the account.

Data Storage and Retention

Your data is hosted on Fly.io servers in Paris, France. I keep your data while your account is active. When you delete your account, all personal data is permanently removed from the live database immediately. Encrypted database backups are rotated within 5 days. Email delivery logs at Postmark are purged within 45 days. After that, no trace of your data remains.

Security

Passwords are hashed using bcrypt and never stored in plain text. Not even I can read them. The site is HTTPS-secured using Let's Encrypt certificates.

Account Deletion

You can delete your account and all your data at any time:

• In-app: click your name in the top-right corner, then Profile, scroll to the bottom, click DELETE ACCOUNT, and type DELETE to confirm.

• If you can't access your account: email contact@akluma.com from the email address tied to your account and I will delete it within 30 days.

Deletion is immediate from the live database. See 'Data Storage and Retention' above for the timeline on encrypted backups and provider logs.

Your Rights

You can view, edit, or delete your personal data through your profile (see 'Account Deletion' above). To request a copy of your data, email contact@akluma.com.

If you live in the EU or UK, you have additional rights under GDPR: access, rectification, erasure, restriction, portability, and objection. Email me to exercise any of these.

Changes

If the policy changes, I’ll notify you by email.

Contact

Email me at contact@akluma.com or reach out on LinkedIn to Ubeydullah Keleş .