Privacy Policy

Halfback · Effective October 28, 2026

Halfback (the “app”) is published by Furkan Bağcı, an independent developer based in Türkiye (“we”, “us”). This policy explains what data the app handles, where it goes, and the choices you have.

The short version

• No account. We never ask for your name, email address, phone number or Social Security number.
• Your pay and tax data stays with you. Employers, pay stubs, W-2 amounts and the tax details you enter are stored on your iPhone. If you turn on iCloud sync, they are stored in your private iCloud database. We cannot see them.
• Usage statistics, linked to a random identifier. We collect a small set of app events, such as “paywall viewed”, to improve the app. They are not linked to your name, email or Apple Account, and never include your pay, hours, tax figures or employer names. You can turn them off.
• Purchases go through Apple. We use RevenueCat to check whether you have Pro. We never see your payment details.
• No ads and no tracking. We do not track you across other companies’ apps or websites. We do not sell or share your personal information.

1. Data that stays on your device

The app stores the following on your iPhone:

• Employers: the name as it appears on your W-2, how often they pay you, and the date of your last paycheck if the job ended.
• Pay stubs: pay date, regular rate, overtime hours, overtime pay, a separate premium line if your stub has one, and your answers to the app’s questions about the overtime pay.
• Tax year details: your filing status and, if you enter it, your estimated modified adjusted gross income.
• W-2 amounts: the amount in box 12, code TT, for each employer and year, and whether you confirmed that all your pay stubs are entered.
• App settings, such as which reminders are on.

The app’s widgets read this data on your device. Amounts on them are hidden while your iPhone is locked.

PDF and CSV files you export are created on your device. You choose where to send them through the iOS share sheet. We do not receive a copy.

This data is not sent to us. Deleting the app deletes it from your device.

2. iCloud sync (Pro)

If you use iCloud sync, your app data is stored in the app’s private database in your iCloud account through Apple’s CloudKit. Only you can access it; we cannot. Apple’s privacy policy governs iCloud. You can delete this data at any time in iOS Settings → your name (Apple Account) → iCloud → Manage Account Storage.

3. Usage statistics (PostHog)

We use PostHog to understand how people use the app, for example how many people open the paywall and where purchases fail. PostHog stores this data in the European Union.

What is collected:

• Event names: the paywall being viewed, closed or left with “Continue with Free”; a plan being selected; a purchase starting, completing or failing; “Restore Purchases” being tapped; the reminder permission screen being shown and your answer; a file being exported; “Rate Halfback” or “Tell a Coworker” being tapped.
• Details of those events: where the paywall was opened (onboarding, Settings or a Pro feature), which plan you selected, whether a free trial was included, why a purchase did not complete (for example “cancelled” or an error code), whether a restore found a purchase, and the export format (PDF or CSV).
• Technical details the PostHog library adds to each event: app name, version and build; iOS version; device model and type; screen size; language, region and time zone; whether you are on Wi-Fi or cellular; and the library’s version.
• A random identifier created by the app. It is not linked to your name, email or Apple Account, and a new one is created if you reinstall the app.

What is never collected: pay rates, hours or pay amounts; qualified overtime, deduction estimates, income or W-2 amounts; your filing status; employer names; location; contacts; or the advertising identifier (IDFA).

PostHog receives your IP address as part of the network connection. We have configured PostHog not to look up a location from it and not to store it.

Usage statistics are on by default. You can turn them off at any time in the app’s Settings (“Share usage statistics”). While they are off, the app does not contact PostHog at all.

4. Purchases (Apple and RevenueCat)

Payments are processed by Apple under your Apple Account. We never receive your card or bank details.

We use RevenueCat, Inc. (USA) to confirm purchases and restore Pro on your devices. RevenueCat receives:

• a random app user ID
• purchase details: product, price, currency, dates, App Store transaction IDs and storefront country
• technical data such as app version, device type, iOS version and IP address

RevenueCat’s privacy policy applies to its processing.

5. Data from Apple

If you chose to share analytics with app developers in iOS settings, Apple gives us crash reports and aggregated usage statistics. These do not identify you.

6. Notifications

Reminders are scheduled on your device: on payday evening, to add the pay stub; on January 25, when W-2s arrive; before a free trial ends; and before a yearly subscription renews. They never show an amount. We ask for permission only after you save your first pay stub or turn reminders on, and you can turn each reminder off in the app’s Settings or all of them in iOS Settings. We do not send marketing notifications.

7. Why we use data (legal bases)

• To provide the app and Pro features you purchased (performance of a contract).
• To improve the app and keep it working, using usage statistics and crash reports (our legitimate interest in a reliable, useful app). You can object at any time; see section 3.
• To meet legal obligations, such as tax records for purchases, which Apple handles.

8. Sharing

We share data only with the service providers named above (PostHog and RevenueCat), who process it on our behalf under data processing agreements. We may also disclose data when the law requires it. We do not sell personal information. We do not “share” it for cross-context behavioral advertising, as defined by California law.

9. International transfers

RevenueCat processes data in the United States. Where data moves out of the EU, UK or Turkey, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

10. Retention

• Device and iCloud data: kept until you delete it.
• Usage statistics: kept for the retention period of our PostHog plan, currently one year, then deleted.
• Purchase records: kept by RevenueCat for as long as needed to provide your purchases and meet legal requirements.

11. Your rights

Depending on where you live, you may have the right to:

• access, correct or delete your personal data
• object to or restrict its processing
• receive a portable copy
• complain to a data protection authority, such as your EU/UK supervisory authority or the Turkish KVKK Authority

Because we do not know who you are, we usually cannot link a request to app data. Your pay and tax data is under your control on your device and in iCloud. To make a request, email hello@furkanbagci.com.

12. US state privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Texas or Virginia), you may have the right to confirm whether we process your personal data and to access it, correct it, delete it, get a portable copy, and opt out of the sale of personal data, targeted advertising and certain profiling. We do not sell personal data or use it for targeted advertising or for profiling that produces legal or similarly significant effects. To make a request, email hello@furkanbagci.com. We respond within 45 days. If we decline your request, you can appeal by replying with the subject “Appeal”; we will respond within 60 days, and if we deny your appeal you may contact your state Attorney General. We will not discriminate against you for exercising these rights.

13. Do Not Track

We do not collect personal information about your online activities over time and across third-party websites or apps, and we do not allow other companies to collect it through Halfback. Because we don’t do this kind of tracking, the app does not change its behavior in response to “Do Not Track” signals or similar mechanisms such as Global Privacy Control.

14. Children and age range

Halfback is not directed to children under 13, or under 16 in the EU and UK. If we learn that we collected personal information from a child under 13, we will delete it.

Where the law requires it (for example in Texas), Halfback asks Apple for your age range. The check happens on your device; we do not send the result to PostHog or RevenueCat. If it shows you are under 13, the app turns usage statistics off.

15. Security

Data on your iPhone is protected by iOS data protection and your device passcode. Data in transit to our service providers is encrypted (HTTPS).

16. Changes

If we change this policy, we will update the date above. If the change is significant, we will tell you in the app.

17. Contact

Furkan Bağcı
hello@furkanbagci.com