Last updated
October 1, 2026
Data Controller and Contact
NSA Teknoloji San. ve Tic. A.Ş. (“NSA Teknoloji”, “we”) is responsible for processing your personal data. Address: Barış Mahallesi Koşu Yolu Caddesi Arge ve İnovasyon Binası No:26/48 Gebze / Kocaeli.
For privacy and data requests: info@nsasoft.com.tr
Data We Collect and Process
Account information
When you sign in with Google or Apple, we receive your name, e-mail address, a profile picture link (Google) and the unique account ID given by the provider. The e-mail from Apple may be a private relay address. For Apple sign-in we also store a refresh token issued by Apple so that we can revoke the account link later. Warbly has no username or password system of its own.
Your content in the app
The tasks, subtasks, notes, tags, dates, recurrence rules and tracker values you enter (for example measurements such as weight that you define yourself) are stored on our server and tied to your account. This is how your tasks appear when you sign in with the same account on another device. Each user’s data is kept separate from others. Whether to write sensitive information such as health details into your tasks is up to you; we only process it because you entered it.
Voice recordings
When you give a voice command, your microphone recording is sent to OpenAI’s Whisper service to be converted to text. The audio file is deleted from our server right after transcription; recordings are not stored or written to logs. The temporary recording file created on your device may remain in the app cache and is removed when you uninstall the app or clear its data.
Command text and context
The text transcribed from your voice or typed by you is sent to Google Gemini and/or Groq AI services to understand what you want to do. To produce a correct result, the request also includes as context the titles, subtasks, dates and recurrence rules of up to 20 of your existing tasks, plus the current date and time zone. Your notes, tags, name and e-mail are not sent to these services.
Stored on your device
Your session key is kept in the device’s secure storage (Keychain/Keystore). Settings such as theme, color and notification preferences, and the “History” list showing your last 20 actions, are stored only on your device and are not sent to our server. Reminders are scheduled on your device as local notifications; remote (push) notifications are not used.
Technical data
Sessions are kept on the server only as a hash; a session is valid for 90 days and is extended as you use it. To prevent abuse, the number of requests is limited; for this purpose your IP address is processed temporarily in server memory, while our hosting and network infrastructure may keep standard access records. Our server only has technical logs for troubleshooting; your speech text and recordings are not written to logs. In a rare error, output generated by the AI (which may contain a task title) may end up in an error log.
What we do not collect
Warbly contains no third-party SDKs for advertising, analytics or tracking. Your location, contacts, photos and payment details are not collected.
App Permissions
Warbly only asks for the permissions it needs to work:
Microphone
To record audio for voice commands. Used only when you press the record button.
Notifications
To show task reminders.
Exact alarms (Android)
So that reminders fire exactly on time.
Run after device restart (Android)
To re-schedule reminders after the phone restarts.
Foreground service and audio settings (Android)
To keep working without interruption while recording and playing audio.
Internet
To sign in and sync tasks with the server.
Retention and International Transfers
Your account and in-app content are kept on our servers until you delete your account. Tasks in the trash are not deleted automatically; they are kept until you delete them permanently or delete your account.
When you delete your account, your data is deleted from the server immediately and disappears from our regular backups within 30 days at the latest. Details: https://www.nsasoft.com.tr/en/legal/warbly-account-deletion
Providers such as OpenAI, Google and Groq are based in the United States; when you use the voice and AI features, your speech and command text are transferred abroad while being processed.
Data Security
Communication between the app and our servers is encrypted with HTTPS (TLS). Your session keys are stored on the server only as a hash and on your device in secure storage.
Each user’s data is kept separate from other users; one user cannot access another user’s data. Company staff can access your data only in cases of necessary technical support and maintenance. Request rate limiting is applied on the server.
No method is one hundred percent secure, but we take reasonable technical and organizational measures to protect your data.
Your Rights
Under Article 11 of the Turkish Law No. 6698 on the Protection of Personal Data (KVKK), you have the right to learn whether your data is processed, request information if it is, learn the purpose of processing and whether it is used accordingly, know the third parties it is transferred to in Türkiye or abroad, request correction if it is incomplete or inaccurate, and request its deletion or destruction under the conditions set by law.
You can delete your account and data from within the app. Steps: https://www.nsasoft.com.tr/en/legal/warbly-account-deletion
For other requests, write to info@nsasoft.com.tr; we respond within 30 days at the latest.
Children’s Privacy
Warbly is not directed at children under 13 and we do not knowingly collect personal data from that age group. If you notice that a child under 13 has given us data, write to info@nsasoft.com.tr and we will delete the account.
Changes to This Policy
We may update this policy from time to time. For significant changes we change the “Last updated” date at the top of the page. The current text is always published at https://www.nsasoft.com.tr/en/legal/warbly-privacy