Privacy policy
This policy explains which personal data MYrehberci processes, why, and which rights you have under the GDPR and the Turkish KVKK.
Controller
The controller is Mesut Yıldız, Yeni Batı, Yenimahalle, Ankara, Türkiye. For privacy questions, write to info@rehberci.com.tr.
Which data we process
We only process what the service needs:
- Account data: e-mail address, password hash, name and language, optional sign-in with Google or Apple, and passkeys.
- Trips: the plans you create, including dates, places, hotels, routes and checklists.
- Your own places and the photos you upload. Location data (EXIF/GPS) is removed from photos.
- Chat messages with the planning assistant, as far as needed to answer you.
- AI processing: for chat and translation we send the trip structure and the text you wrote to Anthropic (Claude API). E-mail address and password are not sent.
- Location queries: place names and coordinates go to our routing and search services (OSRM and Nominatim, based on OpenStreetMap) and to map tile servers.
- E-mails: confirmation, password reset and notification mails are delivered through our mail server and the sending service Mailjet (Mailjet SAS, Paris, France) as our processor. Mailjet receives your e-mail address and the content of the message for this purpose; open and click tracking is disabled.
Legal bases
We process data to perform the contract with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)), to meet legal obligations such as security and accounting (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)), and on the basis of your consent where we ask for it, for example for optional sign-in methods (GDPR Art. 6(1)(a); KVKK Art. 5(1)).
How long we keep data
Sessions expire after 30 days. Generated PDF files are deleted after 24 hours. Backups are kept for 14 days. Account data and trips are kept until you delete your account; after that they are removed from the live system, and backups expire within the 14-day retention period.
Your rights
You can ask for access to your data, a copy of it, correction, deletion, restriction of processing and objection. You can export your data and delete your account on your account page. You may also complain to the supervisory authority (in Turkey: Kişisel Verileri Koruma Kurumu).
Cookies
We use only two strictly necessary cookies: one session cookie that keeps you signed in and one cookie that remembers your chosen language. We use no tracking or advertising cookies and no third-party analytics.
Contact
For questions about this policy or your data, write to info@rehberci.com.tr.