WAYSAY
Privacy Policy
Last updated: October 19, 2026
This page explains what information is processed when you use WaySay, why it is processed and how you can manage it.
In short
- You sign in with your Apple or Google account; your name and email address are used to create your account.
- Your progress, favourites and unlocked packs are stored with your account, so they come back when you change phones.
- We do not collect your location, track you, show ads or sell your data.
- When you create a trip plan, only the preferences you enter for the plan are sent to an AI service; your name and email are never sent.
- You can delete your account and all of its data from inside the app at any time.
1. Scope and contact
This policy covers the WaySay mobile app (iOS), developed by Erkan Giris under the Sweet Day Studios brand, and the WaySay pages on the Sweet Day Studios website. Erkan Giris is the data controller for the processing of personal data.
For privacy questions and data requests: hello@waysay.app.
2. Information we process
Your account
To use WaySay you sign in with Sign in with Apple or with Google. Sign-in runs through Google Firebase Authentication, which gives us your name, email address and a user ID assigned to you. If you choose to hide your email with Sign in with Apple, we only see Apple's relay address. We never see your password.
Your profile and preferences
The avatar you choose, your app language and, optionally, your country of citizenship. We use your citizenship only to show consulate information for the place you are visiting.
Your learning progress
The cities you start and complete, your card progress within categories, the cards you have learned and the phrases you add to favourites. These are stored with your account in Google Firebase (Cloud Firestore), so you can pick up where you left off on another device or after reinstalling.
Your trip plans
When you create a trip plan: the cities, number of days and dates you choose, your interests, who you are travelling with, your event preferences and any custom wishes you add (for example "vegan restaurants"). The plan is generated from these preferences and saved to your account; a copy is also kept on your device so you can open it offline.
Consulate lookup
When you tap "Find Consulate Number", your citizenship country and the destination country or city are processed to find a suitable consulate phone number. The lookup runs only when you tap the button.
Purchases
City and country packs, Lifetime Unlock, Trip Planner and the Premium membership are sold through the Apple App Store and managed with RevenueCat. Your payment card details never reach us. We keep which product you bought and when, your subscription status and a record that verifies the purchase, linked to your account.
Content on your device
City packs you download (phrase cards, cultural tips, emergency information) and the copies of your saved plans are stored only on your device. You can remove them at any time from Profile > Downloads.
Support messages
When you email us, your email address and what you write are used only to answer your request.
3. Information we do not process
- We do not collect your location and we do not track you.
- We do not show ads, do not use the advertising identifier (IDFA) and do not follow you across apps or websites.
- We do not access your contacts, photos, microphone or other content on your device.
- We do not sell your data or share it with anyone for advertising.
4. Why we use information
| Purpose | Information used | Legal basis |
|---|---|---|
| Creating your account and managing your session | Name, email, user ID | Performance of a contract |
| Syncing progress and favourites across your devices | Learning progress, favourites | Performance of a contract |
| Generating and storing your trip plans | Trip preferences | Performance of a contract |
| Showing consulate information | Citizenship country, destination country/city | Performance of a contract |
| Verifying purchases, managing subscriptions and restores | Purchase records | Performance of a contract, legal obligation |
| Answering support requests | Email and message content | Legitimate interest |
| Preventing abuse and keeping the service secure | User ID, technical logs | Legitimate interest |
5. Service providers and sharing
We share information only with the providers below, for the purposes above and under our instructions. Some providers use servers outside Türkiye (for example in the US and the EU); these transfers rely on the providers' standard contractual clauses and security measures.
Google Firebase · Account and database
Sign-in (Firebase Authentication) and storage of account data (Cloud Firestore). Google's privacy policy applies.
Google Gemini · Trip plans and consulate lookup
When you create a trip plan, your plan preferences are sent to this service; when you look up a consulate, your citizenship country and the destination country/city are sent. Your name, email and user ID are never sent. Google's privacy policy applies.
RevenueCat · Purchase management
Verifying purchases and subscriptions, linking them to your account and restoring them. RevenueCat's privacy policy applies.
Apple · Sign-in and payments
Sign in with Apple and App Store payments are handled by Apple. Apple's privacy policy applies.
Google · Sign-in
Sign in with Google is handled by Google. Google's privacy policy applies.
Beyond this, we share information with authorities only when legally required (for example by a court order).
6. Retention
- Your account details, progress, favourites and trip plans are kept while your account is open and deleted when you delete your account.
- Purchase records may be kept for as long as tax and accounting law requires.
- Support emails are kept for up to 12 months after your request is closed.
- Content on your device stays there until you remove it or delete the app.
7. Your rights
Under KVKK (Türkiye) and, where it applies, the GDPR, you have the right to access your data, ask for it to be corrected, deleted or ported, object to its processing and lodge a complaint.
- Deletion: In the app, Profile > Delete Account. Details: Account & Data Deletion.
- Correction: You can change your avatar and language in Profile. Your name and email come from your Apple or Google account.
- Other requests: Write to hello@waysay.app; we reply within 30 days at the latest.
You can complain to the Turkish Personal Data Protection Authority (KVKK) or, if you live in the EU, to your local data protection authority.
8. Children
WaySay is not directed at children and is intended for users aged 13 and over. We do not knowingly collect data from children under 13. If we find such an account we delete it; you can write to us about this.
9. Security
Data is encrypted in transit (HTTPS/TLS) and stored under rules that limit access to your own account. No system is perfect; if we become aware of a security breach, we will inform you and the relevant authorities as the law requires.
10. Website
This website uses Google Analytics only with your permission to understand product visits and store-link clicks. You can change your choice in Cookie settings. See Website privacy & cookies for website-specific information; the app policy above remains separate.
11. Changes
We may update this policy from time to time. The current version is always on this page, and we also announce significant changes in the app.