Privacy Policy

Data we collect

• Account details: your email address, first and last name; when you sign in with Apple or Google, that account's identifier (or Apple's relay address if you chose to hide your email). For email sign-up your password is stored only as a one-way hash.
• Location: your device location, only while you use the app and only if you allow it, to show places, events and your guide nearby. We do not track your location in the background. You can pick a city instead.
• Device and notification data: a device identifier created by the app, your push notification token, app version, operating system and language.
• Content you create: your Explore searches, discovery preferences (your onboarding answers), saved places and lists, trip and day plans, places you request an AI analysis for, and your search history.
• Analytics: product events such as screen views and taps on key features, to understand how the app is used (Mixpanel and our own servers). They are not used for advertising, and we do not access the advertising identifier (IDFA).
• Purchases: subscription payments are processed by Apple (App Store) or Google Play. We only receive the subscription status (product, start and end dates, transaction id) through RevenueCat; we never see your card details.

How we use it

• To provide the app: nearby places, your personal guide, trip and day plans, review summaries.
• To verify your subscription and link it to your account.
• To send the notifications you allowed.
• To improve the app, find bugs and prevent abuse (for example excessive requests).
• To meet our legal obligations.

Service providers we share data with

We do not sell your personal data. To run the app we share only what is needed with these providers:

• Apple: Sign in with Apple, App Store payments and iOS notifications.
• Google: Google Sign-In, Android notifications and Google Maps data for place information.
• RevenueCat: subscription management (your in-app user id and purchase status).
• Mixpanel: product analytics.
• Baseten: running the AI models behind review summaries and plans (place reviews and the content of your request are sent; your account identity is not).
• Our hosting provider: the infrastructure our servers and database run on.

How long we keep it

• Account data and your content are kept until you delete your account.
• When you delete your account, your personal data is deleted or anonymised, except records we must keep by law (such as purchase records).
• Data tied to guest (no account) use and analytics events are kept only as long as their purpose needs and are purged regularly.

Your rights and deleting your data

You can delete your account at any time in the app under Account → Delete account. You can also email [email protected] to access, correct or delete your data or to object to its processing (under the GDPR where it applies, and Turkish law no. 6698, KVKK).

Cancelling a subscription is separate from deleting your account: manage and cancel it in your App Store (or Google Play) account settings.

Children

Civar is not directed at children under 13 and we do not knowingly collect their data.

Security

Your data travels over encrypted connections (HTTPS) and is stored on systems with restricted access. No system is perfectly secure, but we take reasonable measures to protect your data.

Changes and contact

When we update this policy we change the date on this page and announce significant changes in the app.

Questions: [email protected]