Privacy Policy
Last updated: 23 August 2026
This text is a translation. The Turkish version is the legally binding one.
1. Data Controller
Nosteva ("we", "the app") is the data controller responsible for processing your personal data under this Privacy Policy. Nosteva is operated jointly by Caner Tunç and Samet Özmen, who act as joint data controllers; you can reach them at support@nosteva.com.
2. Data We Collect
• Account details: email address, Apple/Google identity details (if used) • Location data: GPS position while "Start Trip" is active, the routes you walk, and the streets/cities/countries you visit • Media: photos and videos you capture in the app, and the GPS coordinates where they were taken • Usage data: in-app interactions, error logs • Subscription/payment details: handled through the App Store/Google Play; we never store your card details
3. Why We Process Your Data
• Performance of a contract: to create your account and provide trip tracking and media storage (GDPR Art. 6(1)(b)) • Your explicit consent: for location tracking and notifications (GDPR Art. 6(1)(a), KVKK Art. 5/1) • Legitimate interests: to keep the service secure and prevent fraud (GDPR Art. 6(1)(f))
4. Who We Share Your Data With
Your data is shared only with the processors needed to deliver the service: Supabase (account/database infrastructure), Cloudflare R2 (photo/video storage), RevenueCat (subscription management), Mapbox (map rendering and place search) and Apple/Google (authentication, store payments). Your data is never sold or shared with third parties for advertising. Beyond that, where we believe in good faith it is necessary to comply with a legal obligation, respond to legal process, protect our rights or the safety of our users or third parties, investigate fraud or abuse, or enforce these Terms of Service, we may share your data with law enforcement, regulators, or other third parties.
5. How Long We Keep Your Data
When your subscription ends, your data is retained for 4 months; if you resubscribe within that period, everything is restored. If no subscription is started within 4 months, your videos, photos and map history are permanently deleted. If you have enabled Digital Legacy, this works differently: if you do not open the app for the inactivity and grace periods you set (at most 4 months in total), your journal is handed over to the heirs you chose and closes to you from that moment; this cannot be undone. If your heirs never open the journal within 3 months, the archive is permanently deleted. An heir who does open it may read it free for 3 months from their first access; at the end of that period they must start their own subscription for the archive to be kept. If they do not, they are given a further 30 days to download what they wish to keep (where you permitted downloads), after which the archive is permanently deleted. In addition, if your account is suspended or terminated for breach of the Terms of Service, fraud, or unlawful activity, we may delete your data immediately, regardless of the periods above, or retain it for as long as necessary for legal, fraud-prevention, or dispute-resolution purposes.
6. Security
We apply reasonable technical and organisational measures to protect your data; however, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
7. Aggregated and Anonymised Data
We may use aggregated or anonymised data that cannot reasonably be used to identify you for any legitimate purpose, including analytics, service improvement, and our other business purposes, without restriction.
8. Your Rights
Under the GDPR and KVKK you have the right to access, rectify and erase your data (the "right to be forgotten"), to restrict processing, to data portability and to object. You can exercise these rights under Settings > Account or via support@nosteva.com.
9. International Data Transfers
Your data may be processed in the EU (Supabase) and on global CDN infrastructure (Cloudflare); these transfers are protected by appropriate safeguards.
10. Children’s Privacy
The app is not directed at users under 13, and we do not knowingly collect data from anyone below that age.
11. Changes
When this policy is updated, we will ask for your consent again for material changes (tracked in the app by version number).
12. Contact
For questions: support@nosteva.com