Privacy Policy
This page explains in plain language what Boşa Gezme! collects, where it goes and how long it is kept. The data controller is Burak Altıntaş. The activity-by-activity breakdown of legal grounds is in the KVKK disclosure notice.
Short summary
- There is no advertising or analytics tracking. No Google Analytics, ad pixel or similar tool is used.
- Your search location is coarsened before storage and deleted after 30 days.
- Visit verification stores no coordinates at all, only your distance to the store.
- A discovery location you save yourself is stored at full precision.
- Your email address is kept even after you delete your account, solely so it can be reopened.
- Only your search text and language go to the AI service; your location and identity do not.
What is collected
What you provide
- Account: email address, a non-public technical account identifier, display name, language preference
- Optional profile: bio, city, profile image
- Optional private profile: relationship status, children’s age ranges, housing status, occupation, age range, interests
- Content: reviews, ratings, comments, images you upload
- Interactions: likes, favourites, follows
- Feedback you send us: your message, and the email address you give for a reply if you give one. It is never published.
What arises from use
- Your search queries and the results shown
- Location (according to the three distinct behaviours above)
- Visitor session identifier, when browsing without signing in
- Session records: hash of the refresh token, client type, device metadata
- Security records: request identifier, error and access logs
On sign-in code requests your IP address is stored only as a hash, never in the clear.
Where information comes from
Most of it comes directly from you. If you choose Google sign-in, your identifier and email arrive through Google Identity Services. Store information (name, address, location) is compiled from the brands' own published store lists and is not your personal data. Records of independent shops that belong to no chain come from the open map OpenStreetMap (© OpenStreetMap contributors, ODbL).
Who it is shared with
| Recipient | What is sent |
|---|---|
| Google Identity Services | Authentication data, if you choose Google sign-in |
| Google (Gmail API) | Your email address and the content of the message sent |
| Cloud storage | Images you upload |
| OpenAI | Your search text and language preference; the explanations you write in reviews (checked before publication) |
These services may operate servers outside Türkiye. Your data is never shared or sold for advertising or marketing purposes.
Retention and deletion
Search records are kept 365 days, search location 30 days, visitor sessions 180 days, email verification codes 30 days, session and visit-verification records 30 days after they expire, and sent-email records 90 days.
Your reviews, comments, favourites and images are kept until you delete them or close your account.
What is deleted, what is anonymised, and why your email address is kept is set out item by item on the account deletion page.
Security
Tokens and notification keys are stored as hashes, never in the clear. Sign-in tokens are short-lived. The browser never connects directly to the application server; every request passes through our own server.
No system is completely secure. Nothing on this page should be read as a promise of absolute security.
Children
This platform is not designed for people under 16. If we learn of an account belonging to someone below that age, we close it.
Your rights
You have the right to access, correct and delete your personal data and to withdraw consent. Write to info@bosagezme.com or follow the route on the KVKK application page.
Changes
When this policy is updated, the version number and date at the top of the page change. Significant changes are announced on the platform.