Privacy

TreePal · last updated 31 July 2026

TreePal is a tree your friends hang ornaments on, each of them with a note that stays sealed until 1 January. This page says what that means for your data: what is stored, who else can see it, and how to get rid of it. It describes what the app actually does, not what it might do one day.

Who runs TreePal

TreePal is made and operated by Partner Codes, in Bursa, Türkiye. Partner Codes decides what is collected and why, and is the party to write to about any of it: partnercodessupport@gmail.com.

What is stored

What	Why
Your name	It is shown above your tree and on every ornament you hang on somebody else's.
Your email address	Only if you make an account with one. It is how you sign back in.
Your tree	Its shape, colour and topper, and every ornament on it: which ornament, where it hangs, the note written on it, and the name of whoever left it.
Your invite code	A short code that maps to your account, so a friend's link finds your tree.
Your friends	A record that two accounts are friends, and the invite code that was used.
Likes	Which trees you liked in Discover.
People you blocked	Their account id and the name they had. Only you can read it.
Reports you send	What was reported, why, and a copy of the reported content, so a person can look at it.
Support messages	What you wrote, with your name and email so it can be answered.
Notification tokens	An identifier for this device, so a notification can reach it. Removed when you turn notifications off.
Notification history	The notifications you were sent, so the app can show them again.

Some things never leave your phone: the tree you build before you have an account, your theme and language, and whether you have seen the intro.

What is sealed, and what is not

A note somebody else writes on your tree cannot be read by anybody — including you — until 1 January. The one exception is the note you write to yourself when you first make your tree, which is yours to read straight away. Notes are stored as written: the seal is a rule the app and its server enforce, not encryption, and somebody with access to the database could read one. Do not put anything in a note that would be unsafe to have written down.

Trees in Discover are shown to strangers only if you turn that on, and only their appearance and the positions of their ornaments are sent — never the notes, and never the names of the people who left them.

Who else is involved

• Google Firebase — sign-in, the database the tree lives in, notifications, hosting, and abuse protection. Data is stored in Google's United States region.
• Firebase Analytics and Crashlytics — which screens are used and what crashed, so the app can be fixed and improved.
• Mixpanel — the same kind of usage events, keyed to your account id.
• Google Play — if you arrive from an invite link, the store passes the code you tapped so the app can open on the right tree.

Nothing is sold, and nothing is shared with anybody else. The only people who see what you write are the people you sent it to.

Why it is allowed to be stored

Most of it is here because there is no app without it: a tree with no ornaments on it, or an invite code that maps to nobody, is not a working product. That is the contract between you and TreePal, and it covers your account, your tree, the ornaments and notes on it, your invite code and your friendships.

Two things rest on legitimate interest instead — keeping the app working and keeping it usable. Crash reports and usage events exist so that something broken can be found and fixed. Blocks and reports exist so that somebody being harassed has a way to stop it, and so a person can act on what they are sent.

Notifications are on consent: Android asks before the first one is sent, and turning them off in Settings removes the token for that device.

Getting rid of it

Settings → Delete Account removes your tree and everything on it, your profile, your invite code, your blocklist, your notification history and your friendships, and then the account itself. It cannot be undone. There is also a page for deleting your account from a browser.

Two things deliberately outlive it, because they are not only yours: ornaments and notes you left on other people's trees, which stay on those trees the way a sent message stays with the person you sent it to, and reports you filed, which exist so somebody can act on them. Support messages you sent are kept as email.

How long it is kept

Your account and everything on your tree stay for as long as the account does. There is no expiry: a tree left alone for a year is still there. Deleting the account is what ends it, and that takes effect immediately from Settings, or within 30 days if you ask by email.

The rest has its own clock. Notification tokens go when notifications are turned off or the app is uninstalled. Crash reports are kept by Crashlytics for 90 days. Usage events in Firebase Analytics and Mixpanel are kept for 14 months and then dropped. Reports and support emails are kept while there is any chance somebody still needs to act on them, and no longer than two years.

What you can ask for

Wherever you live, you can ask for a copy of what is held about you, ask for something wrong to be corrected, ask for it all to be deleted, ask for it in a form you can take elsewhere, or object to it being held at all. Most of it you can also just do: your name and your tree are editable in the app, and Delete Account removes the lot without asking anybody.

For anything that needs a person, write to partnercodessupport@gmail.com from the address the account uses. You get an answer within 30 days. If the answer is not good enough, you can complain to a data protection authority — in Türkiye that is the KVKK, and in the EU it is the authority where you live.

Children

TreePal is not made for children, and it is not directed at them.

Asking about any of this

Write to partnercodessupport@gmail.com, or use Settings → Support inside the app.