Privacy Policy — Assay
Assay is built to need almost none of your data. There is no account, no login, and no advertising. Your scientific inputs, saved constructs, rotors and mix recipes stay on your device. This policy explains the little that leaves it — always because you asked it to — and the rights you have.
1. Who is responsible
The data controller is Caglar Bozkurt, a sole trader based in Germany, publisher of Assay. For any privacy question or request, contact caglarbozkurt@outlook.com. Full postal contact is shown on the app's App Store listing under EU trader information.
2. What stays only on your device
Assay processes scientific inputs locally on your device. Saved library items use local app or browser storage. Unsaved drafts are kept while you switch tools in the current session. We do not send this scientific data to our servers:
- Protein and oligo sequences you paste or type;
- Saved constructs (name, sequence, MW, extinction coefficient) saved rotors and named master-mix recipes;
- Every value you enter and every result the calculators produce;
- Your settings and the optional “bench” you select.
You can remove saved library items in Settings. Removing the app or clearing website storage removes its local data, subject to any device backups you manage. We have no server copy of your scientific library. Clipboard copies, screenshots and information you choose to send to support are outside that local library.
3. What can leave your device — and only when you ask
UniProt lookups (optional)
In the protein tool you can choose to fetch a sequence by its UniProt accession
(a public identifier such as P0DTC2). When you do, the app sends only that public
accession to the UniProt database (operated by the UniProt Consortium / EMBL-EBI) to retrieve a
public sequence. Your own pasted or typed sequences are never sent — this call
carries only the public ID you enter, and only when you tap to fetch it.
Optional usage analytics (off by default)
Analytics is disabled unless you turn it on through the usage prompt, in Settings, or through the website footer. If you enable it, the app sends limited usage events (for example, which calculator was opened, a result was copied, or an App Store link was clicked) through Google Analytics (GA4) to help us understand what to improve. It never includes your sequences, reagent names, saved data, or the numbers you enter. As part of delivering analytics, Google may use first-party cookies and pseudonymous client identifiers and process technical data such as an IP-derived region and device/OS type. Google Signals and ad personalization are disabled. You can turn analytics off in Settings or the website footer; this stops future app analytics events.
Website delivery and support
The hosting provider receives ordinary request information, including IP address and requested URL, to deliver the website. If you email support, your email provider and ours process the information you choose to send. Please use non-confidential examples and do not send private sequences.
Purchases
The one-time Assay Pro unlock is processed by Apple through the App Store. Apple handles the payment — we never see or store your card or payment details. The app checks verified transaction entitlements with StoreKit to unlock Pro. Apple may also provide sales reports under its own terms. Purchase checks and restoration need network access; restoring Pro does not sync your saved library.
| Data | When | Who receives it | Purpose |
|---|---|---|---|
| Public UniProt accession (e.g. P0DTC2) | Only when you tap “fetch” | UniProt / EMBL-EBI | Retrieve a public sequence |
| Allowlisted usage events; client identifiers, coarse region & device type | Only if you enable analytics | Google (GA4) | Aggregate product analytics |
| Purchase transaction | When you buy Pro | Apple | Process the one-time purchase |
There is no advertising in Assay — no ad SDK, no advertising identifier (IDFA), no App Tracking Transparency prompt, and no cross-app or cross-site tracking of any kind.
4. Legal bases (EEA/UK — GDPR)
- Consent — for the optional usage analytics, which you switch on yourself and can switch off at any time.
- Performance of a task you request — a UniProt lookup happens only because you initiated it.
- Contract / legitimate interests — Apple processes your purchase to deliver the product you bought and to prevent fraud.
Assay is fully functional with analytics off; you are never required to share data to use it.
5. Third-party services
These providers act as independent controllers under their own policies:
- Apple (App Store purchases) — Apple Privacy Policy.
- Google Analytics (GA4), only if you enable analytics — Google Privacy Policy.
- UniProt Consortium / EMBL-EBI, only when you fetch an accession — EMBL-EBI Privacy Notice.
6. Your choices and rights
Everyone
- Analytics: off by default; toggle it any time in Settings.
- Your saved data: delete constructs, rotors and mix recipes in Settings. Clearing website storage or removing the app also removes local data, subject to your own backups.
- Sequences: pasted sequences stay on device. A UniProt lookup sends the public accession you enter, not a pasted sequence.
EEA / UK (GDPR)
You have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent. Contact us to make a data request. Turning analytics off stops future app events. Deleting the app or clearing browser storage removes local data but does not erase analytics already received by Google or email you sent to support. You may also lodge a complaint with your local data-protection authority.
California / U.S. states
We do not sell or “share” personal information, and we do not use it for cross-context behavioural advertising. There is no advertising identifier to opt out of.
7. International data transfers
If you enable analytics, Google may process data on servers in the United States and other countries under legal transfer mechanisms such as the EU Standard Contractual Clauses. UniProt lookups are served by EMBL-EBI (United Kingdom / EU). Apple processes purchases under its own global terms.
8. Data retention
On-device data stays until you delete it or remove the app. Any analytics data (only if enabled) is retained according to the configured GA4 property retention settings and Google's policies. Contact us for the current retention setting or an applicable deletion request. Turning off analytics does not retroactively delete collected events. Support email is retained as needed to handle your request. We do not maintain a server-side scientific library.
9. Children
Assay is a professional and general-audience tool that is not directed at children under 13, and we do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected by the “Last updated” date above.
11. Contact
Questions or privacy requests? Email caglarbozkurt@outlook.com.
© 2026 Murat Çaglar Bozkurt. All rights reserved.