Wickstart Privacy Policy

About this policy

Tiki Studios ("Tiki Studios", "we", "us") is an independent mobile studio brand based in Türkiye. We make mobile apps and games, including Basso, Pipzi, PromptMaster, MaskedTalk, LiftAlong and Wickstart. This Privacy Policy covers all of them, and every app or game we release in the future.

The policy has two parts. The first part, below, applies to all of our products. The second part has one section per product, describing exactly what that product collects, why, and who processes it. If a product section and the general part differ, the product section is the more specific one and applies to that product.

Some products have extra pages that stay on their own websites. For MaskedTalk these are the Child Safety Standards and Account Deletion pages on maskedtalk.live.

Who is responsible

Tiki Studios is the data controller for the personal data described in this policy. For any privacy question or request, contact us at legal@tikistudios.io.

What we collect, in general

What we collect depends on the product. The product sections list the details. Across our products, the categories are:

Data you give us, such as an email address, username, profile details, messages, photos, reviews or journal entries, in products that have accounts or community features.
Data created on your device, such as progress, results, settings and preferences. In several products this data never leaves your device.
Usage and diagnostic data, such as which screens you open, feature events, crash reports and performance data, linked to a random app-instance or installation identifier.
Purchase data, such as which product you bought and your subscription status. Payments are processed by the app store. We never see your card details.
Device or installation identifiers, where described in a product section for functionality, subscriptions, usage or diagnostics.
Advertising identifiers, only in products that show ads or measure our own ad campaigns, and only as described in the product section and in the advertising section below.
Support correspondence, if you email us.

We do not collect precise location in any product. We do not sell personal data.

How and why we use data

We use personal data to:

Provide the product: run your account, sync your content, deliver messages and calls, and unlock what you paid for. The legal basis is performance of our contract with you.
Keep products safe: verify age limits, moderate content, prevent fraud and abuse, and respond to reports. The legal bases are our legitimate interests and, where it applies, legal obligations.
Understand and improve our products: usage analytics, crash reporting and performance monitoring. The legal basis is our legitimate interest in building reliable, useful products. Where a product lets you turn analytics off, the setting is described in its section.
Show ads in products that contain them. The legal basis is your consent where the law requires it, otherwise our legitimate interest.
Measure our own ad campaigns: learn which of our ads lead people to install a product, use it and subscribe, so we know where to advertise. This is not used to show you ads. The legal basis is your consent where the law requires it, otherwise our legitimate interest.
Answer you when you contact support.
Meet legal obligations, such as keeping purchase records or responding to lawful requests.

For users in Türkiye, these purposes and legal bases correspond to Article 5 of the Personal Data Protection Law No. 6698 (KVKK). For users in the European Economic Area, the United Kingdom and Switzerland, they correspond to Article 6 of the GDPR.

Service providers

We use service providers that process data on our behalf, under their own data-processing terms. Not every product uses every provider; each product section names the ones it uses.

Google Firebase (Google LLC / Google Ireland Ltd): analytics, crash reporting, performance monitoring, remote configuration, push notifications and, in some products, authentication.
Google AdMob (Google): advertising, in products that show ads.
RevenueCat, Inc.: subscription and purchase management.
Adjust GmbH (Berlin, Germany): measuring which of our ad campaigns lead to installs and subscriptions, in products whose section says so.
Apple, Google Play, Huawei AppGallery and Samsung Galaxy Store: app distribution and payment processing, under their own privacy policies.
Hetzner Online GmbH: server hosting for products that have a backend. Our servers are in the European Union (Finland).
Slack Technologies: the internal tool our moderation team uses to review safety reports, where a product section says so.

Advertising and tracking

Only products whose section says so show ads. In those products:

If you are in the EEA, the UK or Switzerland, or another region where consent is required, Google's consent form asks for your choices before any ad is requested. You can change your choices later in the app's settings.
On iOS, we ask for permission through App Tracking Transparency before using your device's advertising identifier. If you decline, ads are not personalized.
On Android, you can reset or delete your advertising ID, or opt out of personalized ads, in your device settings.

Paid plans that remove ads do not request ads.

Ad measurement. Some products, including products without ads, use Adjust to learn which of our own ads bring people to them. This measures our campaigns; it does not show you ads or target ads to you individually. Each product section says what is sent, when it starts and how to turn it off. In the EEA, the UK and Switzerland it starts only with your consent. On iOS, the advertising identifier is used for it only if you allow tracking.

International transfers

Some of our service providers, including Google and RevenueCat, process data in the United States and other countries. Where data leaves the EEA, the UK, Switzerland or Türkiye, the transfer relies on the safeguards the law provides, such as the European Commission's Standard Contractual Clauses and the providers' data-processing terms.

How long we keep data

On-device data stays on your device until you delete it in the app or delete the app. Your phone's own backups (iCloud or Google backup) may keep a copy under your control.
Account data is kept while your account exists and is deleted after you delete your account, as described in the product section.
Wickstart usage and crash reports follow the periods in the Wickstart section below.
Purchase records are kept as long as needed to restore your purchases and to meet tax and accounting rules.
Support emails are kept only as long as needed to handle your request.

Product sections give specific retention periods where they differ.

Your rights

Depending on where you live, you can ask us to:

tell you whether we process your data and give you a copy;
correct inaccurate data;
delete your data;
restrict or object to certain processing, including processing based on legitimate interests;
give you your data in a portable format;
withdraw consent at any time, without affecting processing that already happened.

For requests concerning information already sent to service providers, contact support@tikistudios.io. Deleting Wickstart or its local data removes the app's local records; it does not erase records already held by service providers or cancel a subscription. We may need your platform, purchase reference or relevant installation identifier to locate provider records and verify your request. Do not send us your password or full payment details. We respond within 30 days, or sooner where the law requires.

You can also complain to a data-protection authority. In Türkiye this is the Personal Data Protection Authority (KVKK Kurumu). In the EEA, it is the authority in the country where you live or work.

California and other US states. We do not sell personal information. We share it for cross-context behavioral advertising only through the ads in products that show ads, and through ad measurement, which reports campaign results to the ad networks we advertise with. You can control both as described above and in each product section. We do not use sensitive personal information to infer characteristics about you. You will not be treated differently for exercising your rights.

Children

Our products are not directed to children under 13. Some products have higher minimum ages: MaskedTalk is for adults 18 and over. Product sections state the minimum age and how it is checked.

If you are a parent or guardian and believe a child has given us personal data, contact legal@tikistudios.io and we will delete it.

Security

We protect data with encryption in transit (HTTPS/TLS), access controls on our servers, and the app sandboxing and storage encryption of your phone's operating system. Data kept only on your device is protected by your device lock. No system is perfectly secure, so we also try to collect as little as we can.

Our website

tikistudios.io does not use cookies, analytics or advertising. Fonts are served from our own server; no third party receives your IP address to deliver them. Links to app stores and other websites are governed by those sites' own policies.

Changes to this policy

When we change this policy, we post the new version here and update the date at the top. If a change is significant, we tell you in the affected product or on this page before it takes effect.

Contact

Tiki Studios, Türkiye · Email: legal@tikistudios.io

Wickstart

Wickstart (formerly First15) helps you give a personal goal fifteen minutes of focused attention. This section covers its App Store and Google Play versions.

The short version

No Wickstart account and no Wickstart cloud sync. Your private tasks, rituals and session history stay on your device.
No ads. Wickstart does not use Apple’s advertising identifier (IDFA) or Google’s advertising ID.
Usage analytics and crash reporting are optional and off by default. You can change the choice together in Settings → Usage & crash reports.
After onboarding, Wickstart requires a Wickstart Pro subscription. Subscriptions are managed by RevenueCat and the store where you bought them.
The Fitil sticker pack and animated Fitil packs included with Pro are delivered from the app itself. Using them sends nothing to Tiki Studios.

Data kept on your device

Your ritual names, task text, categories, chosen guides, schedules, reminder and haptic preferences, completed-session records, check-in answers, optional session notes and next steps are stored in the app's private storage. Wickstart uses them to run your rituals and calculate your progress. Guides are included in the app and work offline. Wickstart does not send your private tasks to an AI service.

App blocking on iOS. If you enable Screen Time, Apple's Family Controls picker lets you select individual apps. Wickstart stores opaque selection tokens on your device and shares the minimum selection and timing data with its own Screen Time extensions. Ritual names and private task text are not included in this shared blocking data. Wickstart cannot read the content of the selected apps.

App blocking on Android. If you choose to enable Wickstart's accessibility service and accept its current in-app disclosure, Wickstart uses app identity and window identity, type and focus to determine which app you are using. It compares that identity with your chosen distractions and shows its own pause screen during your ritual. Android grants a broader window-access capability; Wickstart uses it only for this app-detection purpose. Wickstart does not inspect, analyze, store or send screen text, messages, passwords, browsing content, taps or other apps' content. App/window identity metadata stays in a small temporary on-device memory cache and is discarded when the service stops; it is not sent to us or to analytics. Updated access requires a new affirmative review rather than silently reusing older consent. Blocking is optional, timer-only use works without it, and you can skip, disable the service in Android settings, or uninstall at any time.

Pro expiry kept for blocking. App blocking is part of Pro. So that a renewal that happens while the app is closed does not switch your blocking off, the blocking rules on your device keep the end date of your current Pro period plus a 7-day renewal grace. On iOS this date is stored with the rules Wickstart shares with its own Screen Time extensions; on Android it stays in the app's private storage. When the app sees that Pro has ended, it stops blocking at once. This date stays on your device and is not sent to us.

Reminders are scheduled locally by your operating system and use generic text. If you start a free trial and notifications are already allowed, Wickstart schedules one local reminder two days before the trial ends; it does not ask for notification permission for this. The app excludes its private ritual/history storage from the backups it controls. Device or system behavior outside the app is subject to your device provider's settings.

A share card and a JSON export are created only when you request them. A share card omits your task text unless you explicitly choose to include it. An export contains your private ritual and session data, including saved notes and next steps, so choose where to save or share it. These files leave the device only through the destination you choose; we do not receive them automatically.

Fitil stickers and animated packs

The Fitil sticker pack and the animated Fitil packs are included with Pro. Their artwork is bundled in the app; nothing is downloaded from or sent to Tiki Studios when you use them, and no ritual, task or session data is included.

WhatsApp on Android. When you tap Add to WhatsApp, Wickstart asks WhatsApp to add the pack. WhatsApp then reads the pack's name and sticker images from Wickstart through the app's sticker provider, which only apps holding WhatsApp's sticker permission (com.whatsapp.sticker.READ) can read. Wickstart also asks WhatsApp whether the pack is already added, to show its status. Stickers you have added are kept by WhatsApp under WhatsApp's own privacy policy.
WhatsApp on iOS. When you tap Add to WhatsApp, Wickstart places the pack on your device's pasteboard, limited to this device and set to expire shortly, and opens WhatsApp, which imports it.
iMessage. Wickstart's Messages extension shows the stickers in Messages. To decide whether they are unlocked, it reads only a Pro-status record (whether Pro is active and when it expires) that the app stores in its own App Group on your device.
Animated GIFs. When you share or save an animated Fitil GIF, Wickstart hands the file to your device's system share sheet. Where it goes is your choice.

Data that leaves your device

Optional Firebase Analytics (Google). After you enable Usage & crash reports, Wickstart sends events about screens and onboarding, blocking-permission results, ritual and guide use, fifteen-minute sessions and check-in outcomes, progress views, sharing, settings and purchase flows. Events use predefined categories, public guide IDs, counts, durations and result codes. They never contain your task text, session notes, next steps, ritual names, selected-app identifiers, exported data or free-text error messages. Google processes a random app-instance identifier, app and OS version, device information and approximate geographic information derived from the connection. Wickstart does not enable advertising-related data collection or personalized advertising.

Optional Firebase Crashlytics (Google). With the same choice enabled, Wickstart sends technical crash reports and predefined diagnostic error codes to help us fix failures. Reports include stack traces, device/OS and app version, and a Crashlytics installation identifier. They do not include your private task text, session notes, next steps, ritual names, selected apps or exports. Automatic report uploading stays disabled; Wickstart sends retained reports only while the current choice authorizes it. Turning the choice off stops new optional events and diagnostic submissions. An upload already started cannot be recalled. Reports retained during an opted-out period are discarded rather than sent when you later opt in. Information already received by Google is subject to its retention rules and your rights described above.

RevenueCat. RevenueCat manages subscription status using an anonymous app-user identifier. It receives purchase and transaction information needed to verify access, check free-trial eligibility, restore purchases and prevent duplicate claims, together with technical app and device information. On iOS, its SDK can also send Apple's vendor identifier (IDFV), when available. IDFV is different from the advertising identifier (IDFA). RevenueCat can derive country from the network connection and receive the store's country information. We do not send your task text, session notes, next steps, ritual names, selected apps or session history to RevenueCat. Apple or Google Play processes payments; Wickstart never receives your card details. Subscription checks run independently of the optional Usage & crash reports choice, because the app needs them to open past onboarding.

Support. If you email support@tikistudios.io, we receive the message and any attachments you choose to send. Wickstart does not automatically attach private tasks or diagnostic archives.

Retention of Wickstart provider data

For Wickstart, the following periods apply to the optional reports described above. Google Analytics event-level data retention is set to 2 months and user-level retention to 14 months. New activity resets the user-retention period. These controls do not set the retention period for aggregated reports. Resetting local analytics data does not delete information already received by Google.

Firebase Crashlytics keeps crash traces and associated identifiers for 90 days before starting removal from its live and backup systems. This is not a guarantee that every copy disappears exactly on day 90.

RevenueCat keeps subscription and purchase records to verify access and restore purchases. Local deletion does not erase those records. You can request provider-data deletion through support; deleting a RevenueCat customer does not cancel an App Store or Google Play subscription, and provider deletion may be processed asynchronously.

Deleting and exporting your data

Settings → Export my data (on Android: Export my local data) lets you save your private ritual and session data. Settings → Delete local data removes the app's private ritual/history data and saved app selections, stops its own blocking and reminders, and resets the optional usage choice. It does not cancel a store subscription or delete purchase records held by the store or RevenueCat. Use Manage subscription to cancel a subscription through your store account.

Age

Wickstart is for people aged 13 and over and is not directed to children. It does not make medical or therapeutic claims.