PULLBIT Privacy Policy
In short
- You can use PULLBIT without an account. Signing in is optional; if you sign in with your Apple or Google account, we do not store your name or your e-mail address.
- Your downloads and your library stay on your device.
- We do not store the link you provide, and we do not write it to logs or statistics.
- We collect anonymous usage counts to see how the app is working. You can turn this off in Settings.
- If you buy PULLBIT Pro, the store takes the payment (Apple on iPhone, Google Play on Android); your card and payment details never reach us.
- We show no ads. We do not track you across other apps or websites. We do not sell your data.
What data, and where
| Data | Where it lives | Does it reach us | When it is deleted |
|---|---|---|---|
| Media you download, your library, your settings | Your device | No | When you delete it or remove the app |
| The link you provide | Your device (queue and link inbox) | Only during a preview or download request, to be processed | Not stored on the server. On the device, when the task or entry is deleted |
| Anonymous usage counts | Our server | Yes (you can turn it off) | After 400 days |
| The country of your store account (country only; together with usage counts) | Our server | Yes (you can turn it off) | Together with usage counts, after 400 days |
| Random installation ID | Your device; our server, together with usage counts | Yes (you can turn it off) | From the device when you remove the app; from the server after 400 days |
| Account (only if you sign in): the sign-in provider, an irreversible digest of the account number the provider gives us, when the account was created and last used, session records | Our server; the session key in your device's secure storage | Yes (only if you sign in) | Immediately when you delete the account. Otherwise automatically, after 180 days without use |
| Purchase record (only if you buy): transaction number, plan, purchase / expiry / refund time, price and currency, storefront country (iPhone only) | Our server | Yes (only if you buy) | After 10 years |
| IP address | Our server's memory | With every request, as a technical necessity | When the short rate-limit window closes. It is not written to the database or to application logs |
How your link is processed
- Preview. When you provide a link, the app sends it to our server. The server reads the public post from the service where it is published and shows you what it contains. The link is not stored and is not written to logs or statistics. The preview result is kept in the server's memory for at most 60 seconds.
- Download. One of two ways:
- Direct. Your device downloads the file from the server of the service where the content is published. As with any internet connection, that service sees your IP address; its own privacy terms apply there.
- Through our server. When audio and video need to be merged, our server prepares the file. The temporary file is deleted when the download finishes, when it is cancelled, or within 15 minutes at the latest.
PULLBIT opens public posts only. It never asks for or accepts a username, password, cookie or session for any service.
Anonymous usage counts
What is sent: the event name (for example "preview completed", "download completed"), the random installation ID, the platform (iOS / Android), the app build number, the distribution channel and, where applicable: the name of the source (which service), an error code, the content type (video / image) and the number of items. On iOS the app also sends the country of the App Store account the app was downloaded with (the country only, for example "Türkiye"), so that we can see which countries the app is used in.
What is not sent: the link, the domain, the post ID, the title, the account name, the file name, your name, your e-mail, a device ID, your location. The country of the store account is not a location measurement: neither your device's location nor a place derived from your IP address is taken, and no location permission is requested.
The installation ID is a random value the app generates on first launch. It is not matched to an account, a device ID or an advertising ID, and it disappears when you remove the app. Even if you sign in, usage counts are not linked to your account: the installation ID is not sent to the server during sign-in.
To turn it off: Settings › Privacy › "Share usage statistics". Once it is off, no events are sent and any events waiting to be sent are deleted.
The app contains no third-party analytics, advertising or crash-reporting software.
Clipboard
When the app comes to the foreground it only asks the system whether the clipboard probably contains a link; it does not read the content. Clipboard content reaches the app only when you tap the paste button. The clipboard is not monitored in the background.
Permissions
| Permission | What for | When |
|---|---|---|
| Add to Photos (iOS) | Saving a download to Photos | When you choose that action |
| Notifications (Android 13 and later) | Showing the progress of a running download | Once, on the first download |
| Storage (Android 9 and earlier only) | Saving a download to the gallery | When you choose that action |
Camera, microphone, location and contacts permissions are not requested. The notification never contains a post title, an account name or a link, and no marketing notifications are sent.
Account and sign-in
Signing in is optional. The app asks once on first launch and you can skip it with "Skip for now"; preview, download and the library work without signing in. You can sign in later under Settings › Account.
What happens when you sign in. The provider you choose (Apple or Google) verifies your identity on its own screen and gives the app a signed identity document. The app passes that document to our server. Our server checks that it is genuine, derives an irreversible digest from the account number inside it, and discards the document.
What we store: which provider you signed in with, the digest of your account number, when the account was created and last used, and session records (a digest of the session key, when the session was opened and last used).
What we do not store: your name, your e-mail address, your photo, the account number itself, or the identity document from the provider. With Apple, name and e-mail are never requested. The document Google provides contains your name and e-mail address; they are discarded together with the document.
On your device: the session key is kept in the device's secure storage (Keychain on iOS; storage encrypted with the system keystore on Android) and cannot be used on another device. iOS may not remove the Keychain entry when the app is removed; if you reinstall the app, that entry is not used and is deleted.
Session lifetime: a session that is not used for 180 days closes on its own.
Signing out: Settings › Account › Sign out closes the session on that device.
Deleting your account: Settings › Account › Delete account. Your account record and your sessions on all devices are deleted from our server immediately and permanently; this cannot be undone. The files you downloaded stay on your device. Even if you never delete it, an account that is not used for 180 days is deleted automatically. Details: deleting your account.
Signing in does not change how the app works and gives no one administrator rights.
Purchases (PULLBIT Pro)
Preview is free; downloading is unlocked by buying PULLBIT Pro. The store you installed the app from takes the payment — Apple on iPhone, Google Play on Android: your card and payment details never reach us.
What reaches us — iPhone. From the transaction record signed by Apple: the transaction number, the plan you bought, the purchase, expiry and (if any) refund time, the price and currency, and the storefront country. The app passes this record to our server; Apple may also notify our server directly of changes such as renewals and refunds.
What reaches us — Android. The app passes the purchase token issued by Google Play and the plan you bought to our server. Our server looks the token up with Google and stores, from Google's answer: the order number, the plan, the purchase, expiry and (if any) refund time, and the amount paid and its currency. We do not store the token itself (a one-way digest of it is kept instead), and we do not store your country.
What for. To verify that the purchase is genuine and to count revenue. Whether PULLBIT Pro is unlocked is decided by the store on your device (the App Store or Google Play), not by our server.
What it is associated with. If you share usage statistics, the record is associated with your random installation ID, so that we can count how many of the people who saw the purchase screen went on to buy. If you turned statistics off, the installation ID is not sent. A purchase is not linked to the account you sign in with.
What we do not store. Your name, your e-mail address, your Apple or Google account, your card details, or the signed record or purchase token itself.
Cancelling and refunds. You manage and cancel a subscription in your App Store account settings on iPhone, or in the Subscriptions section of Google Play on Android. Refund requests are handled by the store (Apple or Google).
Admin sign-in
The app published in the stores has no admin sign-in. It exists only in internal builds used by the developer and is not a feature for users. If anyone other than the developer tries to sign in there, the sign-in is rejected and nothing is stored on our server for that attempt.
Who data is shared with
- Our hosting provider: our server runs on a rented machine in a data centre located in Türkiye. Our own software keeps no request log: your IP address and the request path are not written to disk. The hosting provider may keep connection records on its own network as required by law; those records are not under our control.
- The service where the content is published: in a direct download your device connects to that service's server.
- Apple and Google (purchases): purchases are made through the store you installed the app from (Apple's App Store or Google Play); while they are, the store processes your payment details under its own privacy terms. On Android our server sends the purchase token to Google to verify that the purchase is genuine. Apart from that, we send the store no data about you.
- Apple and Google (sign-in): only if you choose to sign in. Sign-in takes place on the screen of the provider you choose; while it does, the provider processes your account information under its own privacy terms. We send the provider no other data about you.
We share data with no one else.
Your rights
You have the right to request information about, correction of and deletion of your personal data (Article 11 of the Turkish Personal Data Protection Law; the GDPR, depending on where you live). Because PULLBIT does not hold your name or your e-mail address, you exercise most of these directly in the app:
- You can turn off the sending of usage counts in Settings.
- If you signed in, you can permanently delete your account under Settings › Account › Delete account.
- When you remove the app, your downloads, your library, your settings and the installation ID are deleted from the device.
- For questions and requests: bsdigitalapp@gmail.com.
Children
PULLBIT is not directed at anyone under 18 and does not knowingly collect data from them.
Changes
If this policy changes, the new version is published at this address and the effective date is updated.