Privacy Policy — Assay
Assay is built to need almost none of your data. There is no account, no login, and no advertising. Your sequences, reagents, saved constructs and every calculation stay on your device. This policy explains the little that leaves it — always because you asked it to — and the rights you have.
1. Who is responsible
The data controller is Caglar Bozkurt, a sole trader based in Germany, publisher of Assay. For any privacy question or request, contact caglarbozkurt@outlook.com. Full postal contact is shown on the app's App Store listing under EU trader information.
2. What stays only on your device
Everything you create in Assay is stored locally on your device, in the app's own storage — it is never sent to us or anyone else:
- Protein and oligo sequences you paste or type;
- Saved constructs (name, sequence, MW, extinction coefficient) and saved rotors;
- Every value you enter and every result the calculators produce;
- Your settings and the optional “bench” you select.
This data is removed when you delete a saved item, or when you delete the app. We have no copy of it.
3. What can leave your device — and only when you ask
UniProt lookups (optional)
In the protein tool you can choose to fetch a sequence by its UniProt accession
(a public identifier such as P0DTC2). When you do, the app sends only that public
accession to the UniProt database (operated by the UniProt Consortium / EMBL-EBI) to retrieve a
public sequence. Your own pasted or typed sequences are never sent — this call
carries only the public ID you enter, and only when you tap to fetch it.
Anonymous usage analytics (off by default, opt-in)
Analytics is disabled unless you turn it on during onboarding or in Settings. If you enable it, the app sends anonymous, aggregate usage events (for example, which calculator was opened) through Google Analytics (GA4) to help us understand what to improve. It never includes your sequences, reagent names, saved data, or the numbers you enter. As part of delivering analytics, Google may process limited technical data such as a coarse (IP-derived) region and device/OS type. You can turn analytics off again at any time in Settings.
Purchases
The one-time Assay Pro unlock is processed by Apple through the App Store. Apple handles the payment — we never see or store your card or payment details. Apple provides us only aggregate, non-identifying sales information under its own terms.
| Data | When | Who receives it | Purpose |
|---|---|---|---|
| Public UniProt accession (e.g. P0DTC2) | Only when you tap “fetch” | UniProt / EMBL-EBI | Retrieve a public sequence |
| Anonymous usage events; coarse region & device type | Only if you enable analytics | Google (GA4) | Aggregate product analytics |
| Purchase transaction | When you buy Pro | Apple | Process the one-time purchase |
There is no advertising in Assay — no ad SDK, no advertising identifier (IDFA), no App Tracking Transparency prompt, and no cross-app or cross-site tracking of any kind.
4. Legal bases (EEA/UK — GDPR)
- Consent — for the optional anonymous analytics, which you switch on yourself and can switch off at any time.
- Performance of a task you request — a UniProt lookup happens only because you initiated it.
- Contract / legitimate interests — Apple processes your purchase to deliver the product you bought and to prevent fraud.
Assay is fully functional with analytics off; you are never required to share data to use it.
5. Third-party services
These providers act as independent controllers under their own policies:
- Apple (App Store purchases) — Apple Privacy Policy.
- Google Analytics (GA4), only if you enable analytics — Google Privacy Policy.
- UniProt Consortium / EMBL-EBI, only when you fetch an accession — EMBL-EBI Privacy Notice.
6. Your choices and rights
Everyone
- Analytics: off by default; toggle it any time in Settings.
- Your saved data: delete any construct or rotor in Settings, or delete the app to remove everything.
- Sequences: stay on device unless you explicitly fetch a public accession.
EEA / UK (GDPR)
You have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent. Because we hold no personal data on our own servers and any analytics is anonymous and opt-in, the most direct way to erase your data is to turn analytics off and delete the app. You may also lodge a complaint with your local data-protection authority.
California / U.S. states
We do not sell or “share” personal information, and we do not use it for cross-context behavioural advertising. There is no advertising identifier to opt out of.
7. International data transfers
If you enable analytics, Google may process data on servers in the United States and other countries under legal transfer mechanisms such as the EU Standard Contractual Clauses. UniProt lookups are served by EMBL-EBI (United Kingdom / EU). Apple processes purchases under its own global terms.
8. Data retention
On-device data stays until you delete it or remove the app. Any analytics data (only if enabled) is retained per Google's own retention settings; we keep no separate copy. We hold no user database of our own.
9. Children
Assay is a professional and general-audience tool that is not directed at children under 13, and we do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected by the “Last updated” date above.
11. Contact
Questions or privacy requests? Email caglarbozkurt@outlook.com.
© 2026 Murat Çaglar Bozkurt. All rights reserved.