This is a draft. It describes accurately what the app does with data
today. It has not been reviewed by a lawyer, and it must be before the app is
published. The controller's registered name, address and VERBİS registration
are to be filled in by the publisher.
This document covers processing in Türkiye. If you live in the EU, the Privacy Policy under the GDPR also applies.
The controller is the legal entity named in the app store listing. Contact: the support address published there.
| Category | Data |
|---|---|
| Identity | Name (display name), optional username |
| Contact | Email address |
| Location | Rounded coordinate (~1 km), city and neighbourhood name |
| Transaction security | Device push token, session data |
| Usage | Plans created and joined, group chat messages, assistant conversations, block and report records |
| Visual | Optional profile photo, plan cover image |
| Biometric | Result of the liveness check (passed/failed and a confidence score). The image is not stored. |
| Legal transaction | Which version of these documents you accepted, when, and by which sign-up route |
A special category of personal data is processed: the liveness check at sign-up analyses the image of your face. It is done only with your explicit consent (Article 6/2), the analysis happens in Amazon Web Services' Ireland region, and neither we nor AWS keep the image — what remains is the pass/fail result and a confidence score. Refusing consent is possible and means no account; there is no version of SOSI that skips the check for some people.
Interests come from a closed list (music, food & drink, outdoors, creative, wellness, film & culture) and do not overlap with the special categories.
| Ground | Where |
|---|---|
| Formation/performance of a contract (Art. 5/2-c) | Account, plan participation, chat |
| Legitimate interest (Art. 5/2-f) | Safety, abuse prevention, moderation |
| Explicit consent (Art. 5/1) | Location access, notifications, Premium assistant chat |
| Explicit consent (Article 6/2) | The liveness check — biometric data |
| Legal obligation (Art. 5/2-ç) | Keeping the record that these documents were accepted |
You can withdraw all three consent-based items at any time: location in your device settings, notifications on the Notifications screen in the app, and the assistant by not using it and clearing the conversation.
The liveness consent is the one exception, and it is worth being blunt about: it cannot be withdrawn and keep the account, because passing the check is what having an account means here. Withdrawing it is the same act as deleting the account, which you can do yourself: Settings → Delete account.
| Recipient | Purpose | Country |
|---|---|---|
| Google Ireland Ltd. (Firebase) | Hosting, database, authentication, push | EU (eur3, europe-west3) |
| Anthropic PBC | Generating Premium assistant chat replies | United States |
| Amazon Web Services EMEA SARL | Liveness check | EU (Ireland, eu-west-1) |
Only the message you type in Premium chat is transferred abroad. That transfer must be assessed under Article 9 and tied by the publisher to an appropriate mechanism (an undertaking or explicit consent). The free plan-finding part of the assistant runs entirely on our own servers and makes no transfer at all.
Sent in Premium chat: your message, the recent conversation, your city, your interests, and a short list of plans you are already allowed to see. Your name, email and coordinates are not sent.
Data is collected electronically while you use the app, through what you type yourself and through the permissions your device grants.
By applying to the controller you may
Applications go to the support address and are answered within thirty days.
The right to erasure can be exercised inside the app, without an application: Settings → Delete account. The account and its data are erased at once.
What is kept afterwards is only what another ground requires. Safety reports are kept on the legitimate-interest ground in art. 5/2(f) — an erasure that removed them would turn account deletion into a way to clear a report. Plan records that belong to the other people who were there are kept, with the deleted person's name and photo removed.
Data is kept while your account exists. Deleting the account erases it at once; plans and their messages also matter to the other people who were there, so a past plan record stays with them, with your name and photo removed.
No automatic retention limit is implemented yet.
The liveness check's video is not stored at any point. Only its result and date are kept, for as long as your account exists.
your notification settings
can be written by a client