Privacy Policy

Last updated: November 4, 2026

This policy explains what personal data is processed when you use the Haydi mobile app and the company web panel, why it is processed, who it is shared with, and your rights.

1. Haydi and responsibility

Haydi is a tour and group management app that lets tour companies communicate with their guides, operations teams and participants during a tour. Haydi is the data controller for data processed to operate, secure and support the platform. The participant list and tour details are supplied by the tour company, which may also be a controller for those records. You may also send requests about those records to the tour company.

2. Data we process

• Account: for participants, a display name and app preferences (participants do not create an e-mail address or password); for staff, name, e-mail or username, optional phone number, company and role.
• Tour: name, phone, room and pickup details added by the tour company; tour membership, itinerary, meeting and roll-call records.
• Location: your precise location during an active tour when you turn location sharing on; a location you choose to send in a chat.
• Messages and content: messages, announcements, photos, videos and voice messages; guide reviews; report and block records.
• Device and security: notification token, device platform and app version; session and security records, including IP address.

Haydi does not collect data for advertising, analytics or cross-app tracking, and does not sell personal data.

3. Purposes, collection and legal bases

Data is used to match you with the correct tour and role; run itineraries, meetings and roll calls; provide messaging, notification and location features; keep the service secure, prevent abuse and review reported content; provide support; and meet legal obligations.

Data is collected when you or the tour company provide it and automatically while the app is used. Under Article 5(2) of the Turkish Personal Data Protection Law (KVKK), it is processed on the legal bases of entering into and performing a contract, legal obligation, establishing, exercising or protecting a right, and legitimate interests. Location sharing depends on a choice you turn on in the app and can turn off at any time.

4. Location sharing

• Location sharing is optional. You can join a tour without granting location permission or turning sharing on; only the location features will not work.
• When you turn on Share my location with the tour team, the tour's guides and the tour company's operations team can see your location.
• If you also turn on Share my location with other travelers, other participants on the same tour can see your location with your shortened name. This option is off by default. You and anyone you have blocked, or who has blocked you, cannot see each other's location.
• Sharing happens only during an active tour and stops when the tour ends. You can turn it off at any time under Profile > Location sharing; when you do, your current location is removed from the map at once.
• Haydi never asks for “Always” location permission. While sharing is on, it may continue when the app is in the background; your device shows this with a system indicator.
• The lead guide's location is shown to the tour's participants and the operations team during an active tour.
• A location you send in a chat is a one-time share and is visible only to that chat's members.

5. Sharing and service providers

Personal data is shared only as far as the service requires, with:

• The tour company and its authorized staff (guides, operations team), as far as their role requires. Content you report is reviewed by the tour company's authorized staff and by Haydi. Guide reviews are passed to the tour company without your name.
• Other tour participants: only what you share in common chats and, if you choose, your location.
• Service providers: cloud infrastructure, database and authentication (Supabase), notification delivery (Apple, Google Firebase) and map services (Google Maps). These providers process data only to provide the service.
• Competent public authorities: only where required by law.

Some service providers process data on servers outside Türkiye. These transfers are subject to Article 9 of KVKK on transfers abroad.

6. Retention

Data is kept for as long as needed to provide the service and as required by legal obligations.

• Your current location is deleted when the tour ends or is cancelled, when you turn sharing off, or when you leave the tour.
• Location history is deleted automatically after the period set by the tour company (90 days at most).
• When you delete your account, your data is deleted or anonymized as described below. Deleted data may remain in backups for a limited time.

7. Account deletion

You can permanently delete your account in the app: participants under Profile > Account actions, staff under More > Account actions. Deletion ends your access and deletes your account details and location history and, for participants, the messages and media you sent. The participant record created by the tour company and meeting records without location may remain with the company. If you cannot access the app, e-mail support@hayditur.com. See Account Deletion for details.

8. Your rights

Under Article 11 of KVKK, you have the right to learn whether your data is processed; request information; learn the purpose of processing and whether data is used accordingly; know the third parties it is transferred to; request correction of incomplete or inaccurate data and its deletion or destruction; request that these actions be notified to recipients; object to an adverse result based solely on automated analysis; and claim compensation for damage. If the EU General Data Protection Regulation (GDPR) applies to you, you can also exercise your rights under it.

Send requests to support@hayditur.com; additional information may be requested to verify your identity. Requests are handled within the time limits and procedures set by law. You also have the right to complain to the Turkish Personal Data Protection Board.

9. Security

Data is encrypted in transit, and access is limited by role and authorization. If you notice a security issue, report it to support@hayditur.com.

10. Children

Haydi is not a service directed to children. For tours that include minors, parental notice and consent must be arranged together with the tour company.

11. Changes

This policy may be updated. The current version is published on this page with its date; material changes are announced in the app or through another suitable channel.