Privacy Policy

Last updated: October 21, 2026

This Privacy Policy explains how the personal data of users of the Kafile Turizm application (the "App") is collected, used, stored and protected. The App is provided by Kafiletur Turizm Hizmetleri Limited Şirketi ("Kafile Turizm", TÜRSAB 6349) for the guests who join its tours and for the guides and staff working on those tours. The data controller for your personal data is Kafiletur Turizm Hizmetleri Limited Şirketi. By using the App, you are deemed to have accepted this policy.

This is an English translation provided for convenience. In case of any discrepancy, the Turkish version prevails.

1. Data We Collect

Our App collects data in the following categories:

  • Account Information: First name, last name, email address, profile photo and other information entered when creating an account.
  • Location Data: Real-time GPS location while a tour is active and the user has granted permission. Location is shared only during the tour, while the tour map is open (see Section 3).
  • Audio Data: An audio stream is transmitted while you are connected to the live audio guiding channel. Audio is not recorded on our servers; it is used only for real-time transmission.
  • Messages and Communication Data: Text messages and media files shared in the group chat.
  • Gallery and Photos: Photos that users upload to the tour.
  • Device Information: Operating system version, device model and app version, collected for debugging and compatibility purposes.
  • Usage Data: In-app interactions, pages opened and feature usage statistics.

2. How We Use Data

The data we collect is used only for the following purposes:

  • Providing tour guiding and group management services
  • Operating live audio and location sharing features
  • Enabling communication between group members
  • Operating the SOS emergency alert system
  • Ensuring app security and stability
  • Responding to user support requests
  • Producing anonymous statistics to improve service quality

Your data is never shared with or sold to third parties for advertising purposes.

3. Location Data

Location data is shared only while you are participating in an active tour and the tour map is open. If you move the app to the background while the map is open, sharing continues; during this time a blue indicator appears at the top of the screen on iOS and a persistent notification on Android. Location sharing stops when you leave the map, when the tour ends or when you close the app. If you deny the location permission, the app continues to work, but map and location-based features are disabled.

Location is used only to show group members on the map during an active tour and to send your location to your guide when you press SOS. It is never used for marketing, analytics or third-party sharing.

4. Third-Party Services

Our App uses the following third-party services:

  • Google Firebase: For authentication, database, file storage and push notifications. Firebase Privacy Policy: firebase.google.com/support/privacy
  • Google Maps: For map display and location services. Google Privacy Policy: policies.google.com/privacy
  • LiveKit: For real-time audio transmission. LiveKit Privacy Policy: livekit.io/privacy
  • Metered: For relaying the audio stream (TURN) on networks where a direct connection cannot be established. Audio content is not recorded.
  • Anthropic (Claude): For AI features (generating place descriptions, importing a tour program from a PDF). When you use these features, only the relevant content (the place name/details or the PDF you upload) is sent to Anthropic. The PDF file is not stored on our servers; only the program items you confirm in the preview are saved to your tour. Anthropic Privacy Policy: www.anthropic.com/legal/privacy

These services may process data under their own privacy policies. We recommend reviewing them.

5. Data Security

We take the following technical and administrative measures to protect your personal data:

  • All data transmission is encrypted with HTTPS/TLS.
  • Through Firebase security rules, only authorized users can access your data.
  • Audio streams are not recorded on our servers; they are discarded after real-time transmission.
  • Passwords are never stored in plain text.
  • Security vulnerabilities are patched as soon as possible once identified.

6. Data Retention

Your data is kept as long as your account is active. When you delete your account, your personal data is permanently deleted from our systems within 30 days. Where legal obligations require it, data may be kept for the period permitted by the relevant legislation.

7. Children's Privacy

Our App is not directed at anyone under 18, and we do not knowingly collect data from this age group through the App. No accounts are created for travellers under 18 in a group; matters concerning them are handled through their parents or guardians. If you are a parent or guardian and become aware that someone under 18 has entered data into the App, please contact us and we will delete it immediately.

8. Your Rights

Under the Turkish Personal Data Protection Law No. 6698 (KVKK), you have the right to:

  • Learn whether your personal data is being processed
  • Request information about your processed data
  • Learn the purpose of processing and whether data is used in line with that purpose
  • Know the third parties to whom data is transferred, in Turkey or abroad
  • Request correction of incomplete or inaccurate data
  • Request deletion or destruction of your data
  • Request that third parties to whom data was transferred be notified of these actions
  • Object to outcomes against you arising from analysis solely by automated systems
  • Claim compensation for damages arising from unlawful processing

To exercise your rights, contact us at kafiletravell@gmail.com.

9. Permissions

Our App requests the following permissions:

  • Location (Precise): To show group locations on the tour map and attach your location to an SOS alert. If the app is moved to the background while the map is open, sharing continues (blue indicator on iOS, persistent notification on Android); location is not collected in the background when the map is closed
  • Microphone: For the live audio guiding feature
  • Camera: To take photos and upload them to the gallery
  • Storage / Photo Library: To select and download photos from the gallery
  • Notifications: For tour announcements and SOS alerts
  • Internet: For all network-based features to work

All permissions are optional. If you do not grant a permission, only the related feature is disabled.

10. Cookies and Local Storage

The mobile app does not use cookies. Only your device's local storage (SharedPreferences) is used to store your preferences and session information. This data never leaves your device.

11. Management Panel and Web Pages

The management panel is available only to Kafile Turizm staff (managers and guides). Sign-in to the panel uses Firebase Authentication; the session is kept in your browser's local storage.

The web pages on this domain (the tour join link and legal texts) do not use advertising or analytics cookies.

12. Changes to This Policy

We may update this privacy policy from time to time. We will show a notice in the app for significant changes. You can always find the current policy on this page. Continuing to use the app after a change means you accept the updated policy.

13. Contact

For questions about our privacy policy or the processing of your personal data:

We will respond to your request within 30 days.

14. Data Controller Contact Details

  • Data controller: Kafiletur Turizm Hizmetleri Limited Şirketi (Kafile Turizm, TÜRSAB 6349)
  • Address: Akıncılar Mah. Kozan Cd. No: 213/Z01, Yüreğir / Adana, Türkiye
  • Email: kafiletravell@gmail.com
  • Phone / WhatsApp: +90 501 540 09 66
  • App: Kafile Turizm – Settings > Support & Contact