Privacy Policy
Last updated: 2026-10-30 — DRAFT, not yet published. Items marked [TO BE VERIFIED] are listed at the end.
Mapinjo is a social travel planning app operated by Ömer Selçok, an individual developer ("we"). On Google Play, Mapinjo appears under the public developer name Ominova Studio — a public-facing brand name of the same individual developer, not a company or separate legal entity. This policy describes what we actually collect and do during the invitation-only beta. We do not show ads, and we never sell your data.
1. What we collect
Account. Your email address and a password (stored only as a secure hash by our authentication provider), your display name, and — optionally — a username, bio, country and profile photo. Registration requires confirming that you are 18 or older (§6).
Content you create. Trips (title, destination, dates), saved places, itineraries, reservations, journal entries with ratings and photos, stories and highlights (including an optional location sticker you place yourself), trip chat messages, comments, likes, saves and follows. Photos you upload are re-encoded and location (GPS/EXIF) metadata is removed before upload.
Beta feedback. When you send feedback from Settings, we receive your category and message together with: app version, platform (iOS/Android), OS version, device model and app language. Never screenshots, never your location, never tokens.
Crash reports. Beta builds send crash and error reports to Sentry (EU data residency). These contain technical stack traces only: we disable personal-data collection, never attach your account identity, and scrub emails, identifiers and URLs before sending.
Usage analytics. Off by default. In the current version, analytics events stay on your device even when enabled and never include personal content. If this ever changes, we will ask you first.
Permissions. Photo library access is requested only when you choose to attach a photo. Mapinjo does not request device location permission.
2. Who can see your content
Everything is private by default. You choose to make your profile or a trip public; stories are visible for 24 hours to the audience your profile settings allow (private profiles: mutual followers only), then stay in your private archive unless you keep them in Highlights. Members of a trip you join can see that trip's shared content; your private notes and private reservation details are visible only to you.
3. Processors, third parties and international transfers
| Service | Purpose | Data location |
|---|---|---|
| Supabase (on AWS) | Database, authentication, file storage, server functions | eu-central-1 (Frankfurt, Germany) |
| Google Maps / Places | Place search text you type and map display | Google infrastructure; see Google's Privacy Policy |
| Sentry | Crash and error reports (as limited above) | EU |
| Expo (EAS) | App build and update delivery | Expo infrastructure |
| Resend | Account confirmation and recovery emails [PENDING CONFIGURATION] | per Resend's documentation |
| Apple TestFlight / Google Play | Beta distribution; their own beta analytics and crash summaries | per Apple/Google |
Because these servers are located outside Türkiye, your data is transferred abroad in the sense of Turkish data-protection law (KVKK Article 9). We rely on [TO BE VERIFIED AFTER LEGAL REVIEW: the KVKK Art. 9 transfer mechanism — explicit consent collected at sign-up, or standard contractual clauses/undertakings notified to the Turkish Data Protection Board].
4. Retention and deletion
You can delete your account in the app: Settings → Privacy → Account & deletion. Deletion is immediate and permanent for your profile, stories, highlights, photos, journal, likes, saves, follows, feedback — and every trip you own, including everything other members added to those trips. Contributions you made to other people's trips (places, plans, reservations, chat messages) remain with those trips without your name. System backups may retain deleted data for up to 7 days before it is gone everywhere; a small number of storage files may survive briefly in a state nobody can access, pending automated cleanup.
Beta data policy. When the beta program ends, your account and content are not automatically migrated or deleted. We will notify you in advance of any material change, migration or shutdown, and your right to delete your account in-app remains available at all times.
5. Your rights
Under the Turkish KVKK (Article 11) and the GDPR you may request access, correction, deletion, restriction, portability, or object to processing. Deletion and correction are available directly in the app; for anything else contact us at privacy@mapinjo.com (mailbox being set up — [PENDING ACTIVATION]: do not rely on it until inbound email is configured and verified).
6. Age requirement
Mapinjo is for adults: you must be 18 or older. Registration requires an explicit confirmation, and we delete accounts we discover to belong to under-18 users.
7. Changes
We will update this policy as the beta evolves and note the date above. Material changes will be announced in the app.
Items pending verification before publication
- Operator identity as stated must match the Apple Developer and Google Play developer account identities (verify before publishing).
- Activate and verify inbound email for privacy@mapinjo.com and support@mapinjo.com (addresses planned; not yet operational).
- Resend configuration and a tested confirmation-email round-trip.
- KVKK Article 9 cross-border transfer mechanism — **requires legal review** (consent at sign-up vs. notified undertakings/SCCs), plus a VERBIS registration-obligation assessment for an individual developer.
- Final hosting URL (see
docs/legal/README.md).