İkimiz — Privacy Policy
Last updated: 22 October 2026
In short
İkimiz is a space for two. What you write belongs to you and your partner. We don't sell your data and we don't share it with anyone for marketing. In the free tier, device information goes to our ad provider only when an ad is requested, and your advertising ID is used only if you agree.
1. Who we are
İkimiz is a mobile app operated by Vahid Gür (sole developer). There is no company behind İkimiz: one individual developer builds and runs it, and is the controller of your personal data under the EU and UK General Data Protection Regulation (GDPR).
Address: Ayanoğlu Mah. Selçuklular Cad. Kardeşler Apt. No:40 Daire:2 Kepez/Antalya, Turkey Email: iletisim@ikimizapp.com
For anything about your data, including exercising your rights, write to iletisim@ikimizapp.com.
2. What we collect
| Data | Why |
|---|---|
| Name (display name) | So your partner recognises you |
| Email address | Creating your account and signing in |
| Date of birth | Star sign card, birthday reminders and the 18+ age check |
| City (optional) | Local suggestions in What Should We Do |
| Relationship dates | Day counter, anniversary and special day reminders |
| Your answers, notes and comments | The core of the app |
| Photos you upload | Memories, notes and the Coffee Cup Reading |
| Device push token | Sending you notifications |
| Purchase information (subscription status, store ID) | Verifying your İkimiz+ subscription |
| Usage events (linked to your account and couple ID) | Understanding which features work |
| Crash and error logs (with your user ID) | Fixing the app |
| Advertising ID (free tier only, and only if you allow it) | Personalised ads |
Usage events and crash logs are linked to your account; they are not anonymous. What you write is never part of them. Details in section 8.
What we don't collect: your location, contacts, gender, sexual orientation, health data, religion or ethnic origin. No feature, including the "bold" question pack, asks for special categories of personal data.
3. Why we use it, and on what legal basis
Under the GDPR every use of personal data needs a legal basis. Ours are:
| Purpose | Legal basis |
|---|---|
| Creating your account, pairing you with your partner, the daily question cycle | Performing our contract with you (Art. 6(1)(b) GDPR) |
| Sending notifications | Performing our contract (Art. 6(1)(b)) |
| Verifying your subscription | Performing our contract (Art. 6(1)(b)) |
| Security, preventing abuse, tracking errors | Our legitimate interest in a safe, working app (Art. 6(1)(f)) |
| Usage analytics (linked to your account; you can turn it off with "Share usage data") | Our legitimate interest in understanding which features help couples (Art. 6(1)(f)) |
| AI-generated readings, suggestions, reports and follow-up questions | Your consent (Art. 6(1)(a)) |
| Personalised ads (free tier only) | Your consent (Art. 6(1)(a)) |
| Keeping purchase records required for accounting | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent, the app asks for each one separately. You can withdraw any consent at any time in Me › Data and privacy › Consent; this doesn't affect what was done before. Consent records are kept with a timestamp. With AI consent off, the Coffee Cup Reading, How Do I Say It, What Should We Do, gift ideas, star signs and the follow-up question don't work; everything else works as usual.
Where we rely on legitimate interest, you can object at any time (see section 11).
4. Who can see your content
- Your partner. Your answers, notes, memories and capsules are shared with the person you're paired with. Answers stay closed to each other until you have both written; our server enforces this.
- You. You can download your own data whenever you like.
- Us. Only when you ask for support, and only as much as needed. Administrator access is logged.
- No one else. Users outside your couple can't see your data. Database rules enforce this and we test them regularly.
5. Where your data is stored and who processes it
Your account and content are stored with Supabase in the European Union (Frankfurt, Germany). We use the following service providers. They process data on our behalf and under contract:
| Recipient | Location | Purpose |
|---|---|---|
| Supabase | EU (Frankfurt) | Database, sign-in, file storage, usage events |
| Google (Gemini) | United States | Generating readings, suggestions, reports and follow-up questions |
| Expo Push | United States | Delivering notifications |
| Apple and Google | United States | In-app purchases and store operations |
| RevenueCat | United States | Verifying subscriptions |
| Google AdMob | United States | Rewarded ads (free tier only) |
| Sentry | EU | Error tracking |
| PostHog (app versions before 1.4.0 only) | EU | Usage analytics |
International transfers. Some of these providers are outside the European Economic Area, and the developer is based in Turkey. Where personal data leaves the EEA, including when we access it from Turkey to answer a support request, we rely on the European Commission's Standard Contractual Clauses, and, where a US recipient is certified, the EU–U.S. Data Privacy Framework. AI features additionally run only with your explicit consent, which names the provider and the country. You can ask us for a copy of the safeguards at iletisim@ikimizapp.com.
6. AI features
The Coffee Cup Reading, How Do I Say It, What Should We Do, gift ideas, star signs, the monthly report story and (with İkimiz+) the follow-up question on the question of the day are generated by AI. The provider is Google (Gemini); the data is processed in the United States.
What is sent to the provider:
- Coffee Cup Reading photos.
- The situation you describe in How Do I Say It.
- The budget, duration, type, weather, mood and city you pick in What Should We Do.
- For star signs, your and your partner's star signs.
- For gift ideas, your partner's display name.
- For the monthly report, the month's numbers and the display name of whoever wrote the longest answer.
- For the follow-up question, the question of the day and both of your opened answers. This needs AI consent from both of you.
Your account email is never added to an AI request.
Rules:
- These features only work with your explicit consent; with consent off they can't be used. Turn it off any time in Me › Data and privacy › Consent.
- What is sent is used only to answer that request. It is not used to train the provider's models.
- We don't store what you send (such as the situation you describe). The generated reading, follow-up question and report story are stored in your account; we also keep a technical log (number of requests, latency, model name).
- Photos you upload for a reading are deleted after 24 hours.
- Every AI output carries the line "Made with AI · for fun", and you can send it to us with "Report".
- Readings and suggestions are for fun. They are not medical, legal or financial advice.
- AI outputs have no legal or similarly significant effect on you; we make no automated decisions about you in the sense of Art. 22 GDPR.
7. Ads
If you have İkimiz+, no ads are shown and the ad SDK isn't loaded.
In the free tier there are currently only rewarded ads that you start yourself. In-page (banner) ads may be added later; if that happens, there will be no ads in the question of the day or in notes, and this policy will be updated. Interstitial ads are built but switched off. Ad personalisation needs your separate consent: on iOS the system tracking prompt (ATT) appears first, and in Europe Google's consent form is shown. Without consent, ads are requested without personalisation.
8. Usage data and error logs
To understand which screens and features are used, we record events: event name, screen name, platform, app version, relationship stage, free or İkimiz+ status and a range for your days together. These records are linked to your account and couple ID, kept on our own server (Supabase, EU) for 90 days and then deleted. They are not sent to any third-party analytics company and never contain what you write. App versions before 1.4.0 send these events to PostHog (EU); updating the app stops this.
Crash and error logs go to Sentry: error message, stack trace, screen name, app version and user ID.
If you turn off Me › Data and privacy › Share usage data, no usage events are sent and error logs go without your user ID.
9. Cookies and similar technologies
The mobile app doesn't use cookies. On your device we only store your session key (in secure storage), your preferences and a queue of content that couldn't be sent yet. Our website uses only strictly necessary technical cookies. Details: Cookies and SDKs.
10. How long we keep data
| Data | How long |
|---|---|
| Account and profile | Until you delete your account |
| Answers, memories, capsules | Until you delete your account |
| Notes | Leave the home screen after 24 hours, stay in Notes |
| Reading photos | Deleted after 24 hours |
| Readings, follow-up questions, report stories | Until you delete your account |
| AI inputs (the situation you describe, etc.) | Not stored |
| AI request logs | Technical figures only (number of requests, latency, model name) |
| Data export file | Deleted after 24 hours |
| Invite code | Valid for 30 days |
| Shared data after a couple is ended | 30 days, then deleted |
| After you ask to delete your account | 7-day waiting period, then permanent deletion; removal from backups can take up to 30 days |
| Usage events | 90 days, then deleted automatically |
| Error logs | Sentry's standard retention period |
| Purchase records required for accounting | Statutory retention period, no longer linked to your identity |
11. Your rights
Under the GDPR you have the right to:
- access your data and get a copy (Art. 15),
- have inaccurate data corrected (Art. 16),
- have your data erased (Art. 17),
- restrict processing (Art. 18),
- data portability: receive your data in a machine-readable format (Art. 20),
- object to processing based on our legitimate interest (Art. 21),
- withdraw consent at any time, without affecting earlier processing (Art. 7(3)),
- complain to a supervisory authority, in particular in the EU country where you live or work (Art. 77). As we have no establishment in the EU, you can contact your local data protection authority directly.
You can use most of these rights in the app, in one tap:
- Download your data: Me › Data and privacy › Download my data
- Correct your data: Me › Profile
- Withdraw consent: Me › Data and privacy › Consent (AI, personalised ads, usage data)
- Delete your account: Me › Data and privacy › Delete account (7-day waiting period; you can cancel during that time)
For anything else, write to iletisim@ikimizapp.com from your account's email address. We reply within one month at the latest.
12. Deleting your data
In the app: Me › Data and privacy › Delete account. There is a 7-day waiting period in case you change your mind. After that, your account and your data are deleted for good; removal from system backups can take up to 30 days. If a couple is ended, shared data is kept for 30 days so both of you can download it, then deleted. The file created when you download your data is deleted after 24 hours. More on the account deletion page.
13. Security
All connections are encrypted with TLS. Data is stored encrypted in the database. Every table has row-level access rules; only the two members of a couple can reach that couple's data. Photos are only reachable through signed links that expire. Server keys stay on the server and are never built into the app. An optional app lock and screenshot protection are available.
14. Age
İkimiz is not meant for anyone under 18. We ask for your date of birth when you sign up; if you aren't 18 yet, you can't create an account. The "bold" pack asks for a separate 18+ confirmation.
15. California residents (CCPA/CPRA)
If you live in California, the California Consumer Privacy Act, as amended by the CPRA, gives you additional rights.
- Categories we collect: identifiers (name, email, user ID, push token, advertising ID if you allow it), the content you create, purchase information, and internet or app activity (usage events, error logs). Sections 2 to 8 describe the sources, purposes and recipients. We don't collect precise location or other sensitive personal information as defined in the CCPA.
- No sale. We do not sell your personal information and have not done so in the past 12 months.
- Sharing for advertising. Personalised ads in the free tier are used only with your consent. You can opt out at any time by turning off personalised ads in Me › Data and privacy › Consent; ads are then requested without personalisation. With İkimiz+ there are no ads at all.
- Your rights: to know what personal information we collect, use and disclose; to get a copy; to have it deleted; to have it corrected; and to opt out of sharing for cross-context behavioural advertising. We won't treat you differently for using these rights.
- How to use them: most work in the app (see section 11). Otherwise, email iletisim@ikimizapp.com from your account's email address so we can verify the request. An authorised agent can make a request on your behalf with your written permission. We respond within 45 days.
16. Changes
If we update this policy, we'll let you know in the app and change the date at the top.