Busted! Privacy Policy
Effective date: November 6, 2026
Last updated: November 6, 2026
This Privacy Policy explains how the Busted! mobile application ("Busted!", "the app") handles information. The app is provided by Calibre Kahve Anonim Şirketi ("we", "us"), Merkez Mahallesi, Cendere Caddesi No:16-1F, Kağıthane, İstanbul, Türkiye, which is the data controller for the limited personal data described in section 4.
1. The short version
- Your scans stay on your phone. Camera images, photos, Bluetooth and Wi-Fi scan results, checklist answers, results and PDF reports are processed and stored only on your device. We never receive them.
- No account. You don't sign up or log in.
- No ads, no analytics, no tracking. The app contains no advertising, analytics or crash-reporting tools and does not track you across apps or websites.
- Purchases are handled by Apple or Google. Our subscription provider, RevenueCat, receives an anonymous ID and your purchase history so your Premium access works. We never see your payment card details.
2. Information processed on your device only
The app needs certain device features to run its checks. This data is processed locally and is not sent to us or to anyone else.
| Feature | What the app uses it for | Where the data goes |
|---|---|---|
| Camera | To look for lens reflections and infrared lights. Video frames are analysed in memory and discarded. A still image is saved only when the app or you save it as evidence. | Stays on your device. |
| Photos you add | Photos you take or choose for the room checklist. | Stored in the app's private storage on your device. The app saves to your photo library only if you choose to. |
| Bluetooth | To list nearby Bluetooth devices (for example trackers or recorders) and estimate how close they are. | Device names and identifiers stay on your device. |
| Nearby Wi-Fi networks (Android only) | To list nearby Wi-Fi networks whose names or hardware makers suggest a camera. | Stays on your device. |
| Location permission (Android only) | Android requires location permission before any app can scan for nearby Wi-Fi networks and Bluetooth devices. Busted! does not read, store or send your location (GPS). | Not collected. |
| Scan history, results and PDF reports | To show your results, keep your history and create evidence reports. | Stored on your device. A report leaves your device only when you share it yourself (for example by email or messaging). |
| Settings | Your preferences (theme, feedback, calibration). | Stored on your device. |
The app also keeps a short technical log in memory on your device to help it run. This log is never uploaded.
3. Sharing reports
When you tap "Share" on a report or summary, your phone's sharing menu opens and you choose the recipient (for example a host, a platform such as Airbnb, a hotel or the police). That recipient's own privacy policy then applies. We do not receive a copy.
4. Purchases and subscriptions
If you buy a Trip Pass, an Annual subscription or Lifetime access:
- Payments are processed by Apple (App Store) or Google (Google Play) under their terms and privacy policies. We do not receive your name, email address or payment details from them.
- To check whether your Premium access is active, the app uses RevenueCat, Inc. (USA) as our service provider. RevenueCat receives:
- an anonymous app user ID created on your device (not linked to your name or email),
- your purchase history for this app (product, dates, renewal or expiry status) from Apple or Google,
- basic technical information needed to deliver the service, such as app version, platform, device type, country or store region, and the IP address of the request.
We have turned off RevenueCat's automatic collection of device identifiers (such as advertising identifiers) and its optional diagnostics. RevenueCat processes this data on our behalf. See RevenueCat's privacy policy: https://www.revenuecat.com/privacy
Legal basis (KVKK / GDPR): performance of a contract (providing what you bought) and our legitimate interest in preventing fraud.
Retention: purchase records are kept as long as needed to provide your purchases and to meet legal, tax and accounting obligations.
International transfer: RevenueCat processes data in the United States. Where required, transfers are made with appropriate safeguards (such as standard contractual clauses) and in line with Article 9 of the Turkish Personal Data Protection Law No. 6698 (KVKK).
5. What we do not do
- We do not collect your name, email, phone number or precise location.
- We do not sell or rent personal data.
- We do not use your data for advertising or profiling.
- We do not upload your scans, photos or reports to any server.
6. Deleting your data
- In the app: Settings → Delete all data permanently removes your scans, photos, reports and saved calibration from your device (display preferences such as the theme are kept). Your purchases are not affected and can be restored.
- Uninstalling the app also removes its data from your device.
- Purchase data held by RevenueCat: contact us (section 9) and we will ask RevenueCat to delete the records linked to your anonymous ID. You can also manage or cancel subscriptions in your Apple or Google account settings.
7. Security
Data the app stores is kept in its private storage area, which your phone's operating system protects from other apps. Because we don't keep your scan data on our servers, it cannot be exposed in a breach of our systems. Protect your phone with a passcode, since anyone who can unlock it can open the app.
8. Children
Busted! is not directed at children under 16, and we do not knowingly process their personal data.
9. Your rights and contact
Depending on where you live, you may have rights under KVKK (Article 11), the GDPR or other laws. These include asking whether we process your personal data, requesting access, correction or deletion, objecting to processing, and complaining to a supervisory authority (in Türkiye, the Personal Data Protection Authority, KVKK). Because the app keeps almost everything on your device, most of these requests can be met directly in the app (section 6).
Contact: privacy@coffeecalibre.com Postal address: Calibre Kahve Anonim Şirketi, Merkez Mahallesi, Cendere Caddesi No:16-1F, Kağıthane, İstanbul, Türkiye.
10. Changes to this policy
If we change how the app handles data, we will update this policy and its "Last updated" date. If the change is significant, we will also tell you in the app before it takes effect.