Privacy Policy
Effective date and last update: 20 September 2026
This policy covers niyetsen.com and the Niyetsen iOS/Android apps (package com.niyetsenai / com.niyetsen.app). No login is required to read it. Controller: Şahin Çelebi. Requests: ai@niyetsen.com. Written for Google Play Data Safety, the App Store, KVKK, GDPR/UK GDPR and CCPA.
Google Play Console URLs
Paste these public links. They do not require sign-in.
Privacy: https://niyetsen.com/privacy.html
Account deletion: https://niyetsen.com/account-deletion.html
Turkish: https://niyetsen.com/gizlilik.html
Turkish deletion: https://niyetsen.com/hesap-silme
1. Data we process
- Account: name, email, Apple/Google identifiers, Supabase user id.
- Profile: date of birth, zodiac, timezone, language, optional gender for address only (“kadın” / “erkek” / “belirtmek istemiyorum”).
- Content: chat, plans, tasks, mystic guide.
- Photos: in-app camera only for task proof or fortune. No gallery access. No biometrics or face identification.
- Gameplay: points, streak, category progress, excuses, optional nickname league (alias only).
- Subscription: plan status and store transaction ids. No card numbers on Niyetsen servers.
- Technical logs: session, security, crash. Website early-access form only if you submit it.
We do not collect precise location, do not use an advertising id, do not sell data, and do not share it for cross-context ads.
2. Google Play Data Safety (aligned)
| Play category | Collected? | Purpose |
|---|---|---|
| Location | No | — |
| Personal info (name, email, user IDs) | Yes | App functionality, account |
| Financial info | Purchase history via Google Play / RevenueCat only | App functionality; we never store card numbers |
| Photos and videos | Yes — proof / fortune photos | App functionality |
| Messages / in-app chat | Yes | App functionality (AI guide) |
| App activity | Yes | App functionality, optional analytics if configured |
| Device or other IDs | Limited technical ids | Security / crash diagnostics |
| Advertising ID | No | — |
| Health and fitness | Not requested | Free-text chat is not a health service |
| Contacts / calendar | Calendar only if you add a task | App functionality |
Data is encrypted in transit. Photos stay on private storage. We do not sell personal information. Optional analytics (PostHog/Sentry) run only if configured; they are not required to use the app.
3. Purposes and legal bases
- Account, tasks, points: contract (KVKK 5/2-c; GDPR 6/1-b).
- AI chat, plans, fortune, proof photos: consent (KVKK 5/1 / 6; GDPR 6/1-a / 9).
- Security and debugging: legitimate interests (GDPR 6/1-f).
- Store billing records: legal obligation (GDPR 6/1-c).
4. Recipients
Google Gemini (replies; we do not train our own model on your data), Supabase, Railway, Apple / Google Play / RevenueCat (they control payments), Unsplash (plan images only), FormSubmit if you send a web form, PostHog/Sentry if configured, authorities if required. Transfers may leave the EEA under GDPR Arts. 44–49.
5. Retention
- Account: membership + up to 3 years after a deletion request.
- Chat, plans, fortune: + up to 1 year after deletion.
- Proof photos: up to 1 year or until account deletion.
- Points / league alias: + up to 2 years.
- Invoices: as tax law requires (often up to 10 years, usually at the store).
- Security logs: up to 6 months.
6. Your rights
KVKK Art. 11; GDPR / UK GDPR Arts. 15–21; CCPA know/delete/correct. Email ai@niyetsen.com (subject “Privacy Request”). Reply within 30 days. Complaints: KVKK Board, CNIL, BfDI, ICO as applicable. We do not sell California personal information.
7. Fortune, children, permissions
Tarot, coffee, palm and horoscope are entertainment — not medical, legal or financial advice. The service is 18+ only. Under-18 data is deleted if discovered. Camera is used only when you take a proof or fortune photo. Notifications are optional. Location is not requested.
8. Account deletion
In the app: Profile → Delete my account. Or the public page account-deletion.html (no login). Deletion is free. Web requests complete within 30 days after we can verify the email.
