This policy explains what personal data NoviraSoft processes on this website and in the Novira Crypto and NBORSA apps, why we process it and what rights you have. It applies to users worldwide, including the European Economic Area, the United Kingdom and Türkiye. For users in Türkiye, this policy also serves as the information notice under Article 10 of the Personal Data Protection Law No. 6698 (KVKK).
1. Who is responsible
The data controller is NoviraSoft, operated by Fatih Durmaz, an independent software developer based in Çanakkale, Türkiye. For any privacy question or request, contact contact.novirasoft@gmail.com.
2. What this policy covers
This policy covers:
- the website www.novirasoft.com (section 3);
- the Android app Novira Crypto (package com.novira.app);
- the Android app NBORSA (package com.novira.nborsa).
Novira Crypto and NBORSA are separate apps with separate accounts and separate back-end projects. Data from one app is not combined with data from the other.
3. This website
The website has no user accounts, no contact forms, no advertising and no analytics. It does not set cookies and does not use tracking technologies. Fonts and images are served from our own domain.
The website is delivered through Cloudflare. To deliver pages and protect the site against abuse, Cloudflare processes technical connection data such as IP address, browser type, requested page and time of request. We do not use this data to identify you. If you email us, we process your email address and the content of your message to reply.
The analysis overview pages load a list of current analyses from our own server. This request contains no personal data beyond the technical connection data described above.
4. Data processed in the apps
The table below lists the categories of personal data processed by both apps unless marked otherwise.
| Category | Examples | Why we use it |
|---|---|---|
| Account | Email address, name and account ID provided by Google Sign-In. Accounts created with earlier app versions may use an email address and password instead. | Create and secure your account |
| Account status | Plan (Free, Premium or trial), trial and subscription dates, account creation date, your confirmation that you are 18 or over, deletion requests, restrictions applied to the account | Provide the right plan and enforce our Terms |
| Purchases | Google Play purchase token, product, status and expiry date. We do not receive your payment card details. | Verify and manage subscriptions |
| Device | An app-generated device identifier, device model, operating system and app version | Apply the one-device rule, prevent misuse of trials, keep the service secure |
| Security signals | Integrity checks of the device and app (for example rooted device, emulator or modified app) | Protect accounts and the service against tampering and fraud |
| Notifications | Push notification token and your notification preferences | Send the notifications you have enabled |
| App usage | Watchlist, practice-arena virtual portfolio, language and display preferences, daily usage counters (for example AI questions or rewarded ads used) | Provide app features and apply plan limits |
| Optional contact details | Contact details you choose to provide in the app, such as a phone number for optional notification channels, where this option is offered | Contact you through the channel you selected |
| Diagnostics and statistics | Crash reports, performance data and app usage statistics, where these tools are enabled | Fix errors and understand which features are used |
| AI assistant | The questions you ask and the market context needed to answer them | Generate answers (see section 6) |
| Support | Messages, feedback and AI-answer reports you send, and your email address | Respond to you and improve the apps |
| Advertising (Free plan, when enabled) | Advertising ID, approximate location derived from IP address, device information and ad interactions, processed by Google AdMob | Show ads in the Free plan (see section 7) |
We do not collect precise location, contacts, photos, files, or financial account credentials. The apps never connect to exchange or brokerage accounts.
5. App-specific details
NOVIRANovira Crypto
Market data is obtained from Binance public market data. No personal data is sent to Binance. Analyses are general and are not based on your personal data.
NBORSANBORSA
US equity market data is obtained from a market data provider; no personal data is sent to it. NBORSA has its own account system: an account created in NBORSA is separate from a Novira account, even if you use the same email address.
6. AI assistant
The AI assistant answers questions about the market data shown in the app. When you use it, your question and the relevant market context are sent to Google's Gemini API to generate an answer. We do not store the content of your conversations on our servers.
Google processes this data under its own terms. Under the service level we currently use, Google may use submitted content and answers to provide and improve its products, and human reviewers may read them. Please do not enter personal or sensitive information in the assistant. We will update this section when the service level changes.
The assistant may not be available in every country. If you report an answer, the reported text, the language and your account ID are stored so that we can review it.
7. Advertising
Advertising may be shown to users on the Free plan. Ads are provided by Google AdMob, which may use the advertising ID and similar data to show and measure ads. Where required by law, including in the EEA, the UK and Switzerland, we ask for your consent before personalised ads are shown, and you can change your choice at any time in the app. You can also reset or delete your advertising ID in your Android settings. Premium users do not see ads.
8. Legal bases
Under the EU/UK GDPR and the Turkish Personal Data Protection Law No. 6698 (KVKK), we rely on:
- Performance of a contract — to create your account and provide the apps and your subscription;
- Legitimate interests — to keep the service secure, prevent fraud and misuse, and improve reliability, balanced against your rights;
- Consent — for push notifications and personalised advertising, which you can withdraw at any time;
- Legal obligations — where we are required to keep or disclose information by law.
9. Service providers
We use the following providers, which process data on our behalf or as independent controllers under their own terms:
- Google — Firebase Authentication, Cloud Firestore, Google Cloud, Firebase Cloud Messaging, Gemini API, AdMob, Google Play (billing) and, where enabled, Firebase diagnostics and analytics tools;
- Cloudflare — website hosting and network delivery of app data;
- Talsec — freeRASP app security checks.
We do not sell personal data and do not share it with third parties for their own marketing.
10. International transfers
Our providers may process data in countries outside Türkiye and the EEA, including the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions, and on the transfer mechanisms provided for under KVKK.
11. How long we keep data
- Account data is kept while your account is active and deleted within 30 days after you delete your account or ask us to delete it, unless we must keep certain information to comply with the law or to establish or defend legal claims.
- Daily usage counters are kept only as long as needed to apply daily limits.
- Support messages are kept for up to 24 months after the matter is closed.
- Purchase records are held by Google Play under its own retention rules.
12. Your rights
Depending on where you live, you have the right to access your data, correct it, have it deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. Under Article 11 of KVKK you also have the right to learn whether your data is processed, request information about it, learn the purpose of processing and the third parties to whom it is transferred, and request compensation for damage arising from unlawful processing.
To exercise your rights, email contact.novirasoft@gmail.com from the address linked to your account. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority, or in Türkiye with the Personal Data Protection Authority (KVKK).
To delete your account, see our Account & Data Deletion page.
13. Age requirement
The apps are intended only for users aged 18 or over. We do not knowingly collect data from anyone under 18. If we learn that we have, we delete it.
14. Security
Data is transmitted over encrypted connections. Access to databases is restricted by access rules so that users can only read their own account data, and administrative access is limited. No method of transmission or storage is completely secure, but we work to protect your data and review our safeguards regularly.
15. Automated decisions
Analyses are produced from market data and are the same for every user; they are not based on your personal data. Automated security checks may restrict trials or access from a device that appears to be misused. If you believe this was a mistake, contact us and a person will review it.
16. Changes
We may update this policy. The date at the top shows the latest version. If changes are significant, we will inform you in the apps before they take effect.
17. Contact
NoviraSoft · Fatih Durmaz · Çanakkale, Türkiye · contact.novirasoft@gmail.com