VVE Privacy Policy

Version 2026-11-03. VVE (Veni Vidi Edi) is a mobile app that lets you record the places you go as verified visits. This policy explains which personal data we process and why, who we share it with, how long we keep it and what your rights are. For users in Türkiye the KVKK Information Notice also applies.

Data controller

Ahmethan Donat · Contact: [email protected]

Data we process

• Account: name, email, username, language, home city; for email sign-up a one-way hash of your password (argon2id); for Google or Apple sign-in the account identifier and email provided by that service.
• EDI content: photos, place, visit date, overall and criteria ratings, your public review, your private note that only you can see, your visibility choice.
• Verification data: the photo's capture time and EXIF data (location, device make and model), the device location and its accuracy at the moment of an in-app capture, and a one-time current location if you choose to share it. These are used only to verify that a visit really happened and to prevent fraud.
• Map and archive: which districts, provinces and countries you have explored, your trips, places you want to go and your stats.
• Usage events: counts such as app opens, which kind of screen was opened and the number of search results. Your search text, your location and the places you look at are not part of these events. We use no third-party analytics or advertising tools.
• Technical data: device platform, operating system and app version, session information, a randomly generated device identifier, content you report and users you block.
• Notifications: if you allow notifications, your device's notification token; used only to send EDI result notifications and deleted when you sign out. You can turn notifications off in Settings → Notifications. Your IP address is not stored; only a one-way hash is kept briefly to limit abuse.

Why we process it

• To provide the service: creating your account, storing your EDIs, building your map and trips (performance of a contract).
• Visit verification and security: preventing fake visits, abuse and spam (legitimate interest).
• Discovery and recommendations: showing places nearby, popular places and places that suit you; computing place ratings from verified visits only.
• Improving the product: aggregate usage counts that do not target individuals.
• Legal obligations and handling rights requests.

We do not sell your data, use it for advertising or send marketing emails.

Who can see it

• Your public EDIs: the review, rating, metadata-free copies of your photos, your name, username and verification badge (Verified · Partly verified · Saved) are visible to other users. You can make an EDI private at any time.
• Your private notes, your photos' location and EXIF data and verification scores are never shown to anyone else.
• Our service providers process only what is needed to run the service: Cloudflare (photo storage and network), Resend (sending email), Google and Apple (only if you sign in with them; if you allow notifications, they are delivered through Apple Push Notification service or Google Firebase Cloud Messaging — their content is limited to the place name and the area that opened up). Map tiles are loaded from OpenFreeMap; your device connects to their servers to do so.

Where it is stored

Our server is located in the United States; photos are stored on Cloudflare's global storage infrastructure. This means your data is transferred outside Türkiye and the European Economic Area. Transfers happen only for the purposes above and under our providers' security measures.

How long we keep it

• Original photos and raw location / EXIF data: at most 90 days; after that they are deleted and metadata-free copies remain.
• If you delete your account: it is closed immediately and your data is permanently deleted within 30 days. Usage events remain for counting, unlinked from you.
• Data export file: 7 days. Server logs: 14 days. Database backups: at most 6 months.

Your rights

• See and download your data: Settings → Download my data (the link is sent to your email).
• Correct it: you can edit your profile and EDIs.
• Delete it: single EDIs, or your whole account via Settings → Delete account.
• Change visibility, object to processing and request restriction of processing.
• For requests, write to [email protected]; we reply within 30 days. In Türkiye you can complain to the Personal Data Protection Board, in the EU to the data protection authority of your country.

Location and permissions

Your location is read only when you take an action: taking an EDI, looking for places nearby and tapping "Go to my location" on the map. There is no background location tracking. The app works without camera, photo or location permission; only the verification level may be lower.

Website and beta list

venividiedi.app does not use cookies. We count page views only as page path, language and referring domain; your IP address, device and identity are not part of that record. Map images load from OpenFreeMap, so your browser connects to their servers.

If you join the beta list we keep your email, language choice and the version you agreed to, with your explicit consent and only to send a beta invitation. The record is kept for at most 12 months; you can withdraw consent at any time by writing to [email protected].

Samples of your public EDIs may appear on the website without sign-in: your shortened name ("Ece Y."), avatar, place, district, rating, review, and the month or a rounded time. Your full name, username, private note and location never appear. Make an EDI private if you don't want it shown.

Children

VVE is not designed for anyone under 16.

Changes

If we change this policy we update its version date and announce significant changes in the app.