Privacy Policy

Effective: August 27, 2026

Vernum ("we", "us", "our") is a mobile app and website (vernum.app) operated by Seçil Nur Akgün, an individual developer based in Türkiye. Vernum lets you rent a temporary phone number to receive SMS verification codes. This policy explains what information we collect, how we use it, who we share it with, and how to delete it.

1. Information We Collect
- Account information: the email address you sign up with, and the date your account was created.
- Number rental data: the country and service you select, the phone number assigned to you, and the SMS messages/verification codes delivered to that number while it is rented to you.
- Balance and transaction history: your coin balance and the history of numbers you have rented.
- Referral data: your referral code and, if you signed up with someone's code, the link between the two accounts.
- Device token: if you allow notifications, a Firebase Cloud Messaging token used to deliver "code received" alerts.
- Anti-abuse data: when you create an account on the website, a Cloudflare Turnstile token is used to confirm you are not a bot. Cloudflare receives technical signals from your browser for this check.

We do not ask for your real name, your own phone number, your address, or any payment card details. We do not access the SMS messages on your device; the codes you see in the app are the ones delivered to the rented number on our servers.

2. How We Use Information
- To operate your account and process number rentals.
- To deliver verification codes to you inside the app.
- To send you a push notification when a code arrives, if notifications are enabled.
- To apply the automatic coin refund when a rented number receives no code.
- To prevent fraud and abuse of the service.
- To maintain and improve the reliability of the service.

We do not use your data for advertising, and we do not profile you.

3. Third Parties We Share Data With
- Wholesale number providers: to assign you a number, we forward only the country and the service you selected to the upstream provider that supplies that number. We never send them your email address, your account identity or any other personal data about you, and the providers we work with may change over time.
- Firebase (Google): authentication, database (Cloud Firestore), backend functions (Cloud Functions) and push notifications (Cloud Messaging) run on Google's Firebase platform, under Google's own data processing terms.
- Cloudflare: Turnstile bot protection on the website sign-up form.
- Google Play: if you buy coins through the app in the future, the purchase is processed by Google Play. We receive only the confirmation of the purchase, never your payment details.

We do not sell your personal information to anyone. We disclose data to authorities only where we are legally required to.

4. Where Data Is Stored
Data is stored on Google's Firebase infrastructure. Servers may be located outside Türkiye, including in the United States and the European Union. All traffic between the app and our servers is encrypted in transit.

5. Data Retention & Deletion
Rented numbers are released when the rental window ends. The verification code and order record stay in your order history until you delete your account.

You can permanently delete your account, balance and full rental history at any time:
- in the app: Profile > Delete account;
- on the website: vernum.app/account.html > Settings > Danger zone > Delete account;
- or by emailing destek@vernum.app from your registered address if you cannot sign in.

Instructions and details are at https://vernum.app/delete-account.html — account deletions requested by email are completed within 30 days.

Any remaining coin balance is forfeited on deletion and cannot be restored. After deletion we keep only the minimal records we are legally required to retain (accounting/tax records and records needed for fraud prevention and security); these are kept separately from your account and are not used to contact you.

6. Your Rights
You can access, correct or delete your data. Under Turkish law (KVKK) and, where it applies, the GDPR, you may also ask us what we hold about you, ask us to restrict or object to processing, and lodge a complaint with your data protection authority. Write to destek@vernum.app and we will respond within 30 days.

7. Children
Vernum is not directed at children. The service is intended for users aged 18 and over, and we do not knowingly collect information from children.

8. Security
We rely on Firebase's infrastructure and access-controlled database rules so that your orders and codes are visible only to your own account. Passwords are handled by Firebase Authentication and are never stored by us in readable form.

9. Changes to This Policy
If this policy changes, the updated version will be posted here and inside the app, with a new effective date.

10. Contact
Seçil Nur Akgün — destek@vernum.app