Privacy Policy

Optional device notifications

When this service is enabled and you opt in on the Notifications screen, we store your device's Expo push token, operating system, account association and last renewal time. Generic call alerts pass through Expo to Apple APNs or Google FCM. They contain an account/call reference for a fresh access check, but no message text, audio, location or booking details. Tapping an alert never accepts a call automatically.

Device registrations expire seven days after renewal; opening the app with permission can renew them. You can turn them off in Notifications. Signing out removes registration when connected; offline removal can be delayed and generic alerts may arrive until expiry. Another account cannot use them to access your call. Account deletion removes registration. Delivery records are removed after one day and expired device registrations by scheduled cleanup. These periods do not guarantee deletion from provider backups. Delivery depends on device and network settings.

Last updated: 16 October 2026

Yuanly (缘旅) helps travellers discover experiences in Türkiye and send booking requests to the operators that run them. This policy explains what personal data we process, why, and the choices you have. It applies to the Yuanly mobile app, the yuanly.app website and the Yuanly operator and pilot panels.

1. Who we are and how to reach us

Yuanly is responsible for the personal data described here. For any privacy question or request, write to [email protected]. We answer within 30 days.

2. Data we collect

• Account: your name, email address, password (stored only as a one-way hash), preferred language and, if you add it, your phone number. If you sign in with Apple, we receive an Apple user identifier and the email address Apple shares with us (which may be a private relay address).
• Booking requests: the experience, date and time, number of guests, the contact name, phone number, hotel and note you enter, the status of the request and your e-ticket code.
• AI Concierge: your message is used only to produce the answer. We do not store the text of your messages; we keep the language and which experiences were recommended, so we can improve suggestions.
• Notifications: messages about your bookings shown in the app.
• Operators and pilots: business name, contact details, team membership, panel permissions and pilot profile information.
• Technical data: IP address, time of request and app version in short-lived server logs, used for security and troubleshooting.

We do not collect your address book or advertising identifiers, and we do not use third-party analytics or advertising trackers. Microphone, camera, selected profile/post images and booking-related location data are processed only when you choose the relevant feature and grant the required device permission. We do not access your entire gallery. Optional voice and location use is explained below; granting device permission alone does not start sharing.

3. Why we use it

• To create and secure your account and to let you sign in (performance of our agreement with you).
• To send your booking request to the operator, let the operator confirm it and show it in your trips (performance of the agreement).
• To answer your questions through the AI Concierge (performance of the agreement).
• To keep the service secure and prevent abuse (our legitimate interest).
• To meet legal obligations, for example record keeping (legal obligation).

We do not sell your personal data and we do not use it for advertising.

4. Who we share it with

• The operator you book with: your name, contact details, note and booking details, so they can serve you. Operators see only their own customers' bookings.
• Service providers that run Yuanly for us: hosting and database (Railway, servers in Singapore), network and email routing (Cloudflare) and Apple for Sign in with Apple. If an external AI model provider is used, the text of your question is sent to it only to generate the answer.
• Authorities, when required by law.

If you select an enabled social sign-in method, you are directed to the consent screen of Apple, Google, WeChat or Rednote. Yuanly uses the provider's account identifier and shared basic profile information (name/image; email for Apple). Google web sign-in requests only openid profile, not access to your email address, contacts or messages. WeChat/Rednote sign-in does not grant access to private messages or payment accounts. When phone verification is enabled, your number is sent to Twilio Verify to deliver and verify the SMS code. These methods become available after provider approval and configuration; a method shown as disabled does not send your data to that provider.

When voice/video calls are enabled, Agora carries media to the other participant; Yuanly does not automatically record the call. Invitation, participants, selected language, time and call-status metadata are stored to operate and secure the service. Calling and automatic interpretation are separate features; the call screen indicates whether interpretation is active.

5. International transfers

Our servers are located in Singapore, so your data is transferred outside Türkiye, the European Union and the People's Republic of China. We use providers that apply appropriate security measures, and we rely on the transfer mechanisms required by applicable law, including the Turkish Personal Data Protection Law (KVKK), the EU GDPR and China's Personal Information Protection Law (PIPL). Where your consent is required for a transfer, we ask for it.

6. How long we keep it

• Account data: until you delete your account.
• Booking records: after account deletion they are kept in anonymised form (without your name, contact details or notes) so operators can keep their accounting records.
• Server logs: a short period, normally no longer than 30 days.

7. Your rights

You can access, correct and delete your data, object to processing, ask for a copy of your data and withdraw consent at any time. You can edit your profile in the app, download a copy of your data in Me → Download my data, and delete your account in Me → Delete account: your profile and personal data are erased and open bookings are cancelled. For other requests write to [email protected].

Depending on where you live, you also have the rights given by KVKK (Article 11), the GDPR or PIPL, and you may complain to your data protection authority, such as the Turkish Personal Data Protection Authority (KVKK Kurumu).

8. Security

Passwords are stored as one-way hashes; the published service uses HTTPS. Booking communications are restricted to the guest, currently assigned pilot and authorised operator team; administrative actions require separate authorisation. Invitation links for operator and administrator accounts are single-use and expire after 7 days.

9. Children

Yuanly is not intended for children under 16, and we do not knowingly collect their data.

10. Changes

We will update this page when our practices change and show the date of the latest version at the top. Significant changes will also be announced in the app.

Tour messages and optional voice recordings

Text and voice messages in a tour conversation are shared only with the booking's guest, currently assigned pilot and authorised operator team. Recordings are prepared on the device and uploaded only when Send is selected. Voice/video calls are not automatically recorded.

Access to voice messages expires after 7 days; an hourly cleanup removes expired files from the primary database. The sender can remove their audio sooner in the conversation. Text and translations are stored separately; account deletion removes the author's messages and recordings. This period is not a guarantee about the hosting provider's backup retention.

Optional transcription sends the audio to OpenAI; enabling message translation sends text to OpenAI. Listening in an AI voice generates synthetic speech from text, not the other participant's actual voice. These actions start with your choice on the relevant screen. Profile data export includes written messages and recording duration/consent metadata; it does not include the audio file itself in JSON.

Optional live location for a booking

Location sharing is available only between authorised parties of a confirmed booking and starts when you separately select “Share my location”. Only the latest point, accuracy and update time are stored; no route history is kept. Sharing lasts for at most one hour or until the activity ends, and you can stop it at any time. A point older than 90 seconds is not shown to the other party. Stopping removes the share; expired or stale points and points for bookings that are no longer confirmed are removed by a cleanup running every minute. This deletion period is not a guarantee about the hosting provider's backups. A newly assigned booking participant cannot view a previous share. The app does not continuously track your location in the background.

Optional short-turn translation during a call

When available, this feature requires both participants to allow translation separately from joining the call. Segments of up to 6 seconds from the other participant's separate audio track are prepared temporarily in memory and sent to OpenAI for transcription, text translation and synthetic speech. Translation uses the recipient's selected call language. Yuanly does not store these audio segments, transcripts or generated speech in its database or a file archive; the last displayed text and temporary audio are cleared when translation is turned off or the call ends. This is not a deletion guarantee concerning OpenAI's own data processing or retention terms.

Translation permissions and their revision counter form part of call metadata. When either person withdraws consent, new translation requests are denied; pending processing and temporary work on the other device stop through connection/authorization checks. This does not guarantee instant deletion on a remote device. If authorization polling is lost, local processing stops when its authorization expires, within 5 seconds. During AI playback the sending microphone is temporarily silenced to reduce echo. This short-turn mode is not continuous simultaneous interpretation.