Privacy and Protection of Personal Data
What data we process and why, how long we keep it, and what your rights are.
Last updated: 15 October 2026
This is a translation for convenience. In case of any discrepancy, the Turkish text prevails.
Data controller
This notice has been prepared under Turkish Law No. 6698 on the Protection of Personal Data (KVKK).
- Legal name:
- Formore Dijital
- Address:
- Aydınlı Mahallesi No: 12H, Tuzla / İstanbul
- E-mail:
- iletisim@ayvalikapp.com
What we process
When you visit the website:
| Data | Why |
|---|---|
| Language preference (cookie) | To show the site in the language you chose |
| Your cookie choice (browser storage) | To remember your consent decision |
| Visit statistics (Google Analytics — only if you consent) | To measure which pages get attention |
We use Google Analytics to measure visits, and this tool sets cookies in your browser. It runs only if you explicitly consent: if you choose "Decline" on the banner shown on your first visit, no measurement files are downloaded to your browser and no data reaches Google. Declining does not limit the site in any way.
If you consent, your visit data is processed by Google Ireland Limited and may be transferred to countries where Google's servers are located. Ad personalisation is disabled for this measurement; your data is not used for advertising.
You can withdraw your consent at any time: clearing the site data in your browser is enough — the banner reappears and your new choice applies.
You can use the app as a guest without creating an account. In that case your favourites and search history are stored only on your own phone and are not sent to us.
If you choose to create an account:
| Data | Why |
|---|---|
| E-mail address | To create your account and let you sign in |
| Name and profile photo (provided by Google/Apple at sign-in). If you choose to hide your e-mail with Sign in with Apple, we receive an Apple relay address instead of your real one. | To display your profile |
| Your favourites and trip plans | So they are not lost when you change device |
| Reviews you write | To publish them in the app |
| Subscription/purchase status | To unlock paid features |
Your payment details never reach us. Purchases are made through the App Store or Google Play; we neither see nor store your card details. We only receive whether your subscription is active.
When you ask Zeytin AI (the AI assistant in the app) a question: your question is sent to Google's Gemini API, i.e. to servers abroad, so that an answer can be generated.
On the free tier of the Gemini API, Google may use submitted questions and answers to improve its products, and Google's human reviewers may read this content. Please do not include personal or sensitive information such as health, identity or contact details in Zeytin AI.
Zeytin AI questions and answers are also stored in our own database to prevent abuse and improve the service. The records are linked not to your account but to the identifier the app generates for this installation.
When you submit a business application: business name, category, address, phone, e-mail and your message — to assess your application and get back to you.
When you e-mail us: your message and contact details — to answer your request.
How long we keep it
- Account data: for as long as your account is open. When you delete your account, your data is deleted; consent and complaint records are kept for legal proof, with their link to the account removed. If you signed in with Apple, your Apple sign-in token is also revoked with Apple.
- Zeytin AI chats: you can delete all chats from this device yourself with the "Clear chats" button on the Zeytin AI screen in the app. If you delete your account from the app, that device's chats are deleted too. You can also write to us to have them deleted. Chats are deleted automatically 30 days after the last message; the daily question-quota counter is kept for 90 days.
- Purchase records: for the period required by tax legislation.
- Business applications: for as long as your listing stays published.
- Support correspondence: for a reasonable period after your request is closed.
Who we share it with
We do not sell your data and do not transfer it to third parties for marketing. To run the service we work with these data processors:
- Supabase — database and authentication (servers in Frankfurt, Germany)
- Vercel — hosting of the website and server endpoints
- Google — Zeytin AI answers (Gemini API), Sign in with Google and, only if you consent, visit measurement (Google Analytics)
- Apple — Sign in with Apple
- Expo — delivery of app notifications to your device
- Hostinger — sending account e-mails such as sign-in links
- App Store and Google Play — purchases (your payment details do not reach us)
These providers' servers are located abroad, so your data is transferred abroad.
Your rights
Under Article 11 of the KVKK you have the right to learn whether your data is processed, to request information, to ask for correction or deletion, to object to processing, and to claim compensation if you suffer damage.
You can send your requests to iletisim@ayvalikapp.com; we conclude them within 30 days at the latest.
In the app you can delete your account yourself. To request a copy of your data, just write to us.
Children
The app and the site are not designed to target people under 18; we do not knowingly collect personal data from children.
Changes
When we make changes we update the date above. If a change is significant we also announce it in the app.