Tutma: Tuvalet Bul! Privacy Policy
Last updated: 5 September 2026 Data controller: Exludio, Çankaya, Ayşe Mayda Sk. No: 6, 35280 Konak/İzmir, Türkiye, destek@tutma.app
Tutma is provided by the sole proprietorship of Kayra Demirkan, trading under the commercial name Exludio.
This is an English translation of the Turkish original (Gizlilik Politikası), provided for convenience. In the event of a discrepancy between the two texts, the Turkish version prevails.
This policy explains which data we process when you use the Tutma: Tuvalet Bul! ("Tutma") mobile application (the "App").
1. Which data we process
1.1 When you use the App without an account
| Data | Why | Retention |
|---|---|---|
| Anonymous device identifier (randomly generated) | Preventing abuse/spam, rate limiting | Until you delete the App |
| Approximate location (in order to display the map) | Showing the toilets around you | Not stored, processed only at the moment of the request |
| Basic usage statistics (screen views, crash records) | Error detection and product improvement | 90 days |
1.2 When you create an account
| Data | Why | Retention |
|---|---|---|
| E-mail address | Account identity, important notifications | Until the account is deleted |
| Name (if Google/Apple provides it) | Visibility of contributions | Until the account is deleted |
| Google / Apple user identifier | Signing you in | Until the account is deleted |
When you sign in with Google or Apple we do not see and do not store your password. With Sign in with Apple you can use the "Hide My Email" option.
1.3 When you contribute
| Data | Why | Retention |
|---|---|---|
| Precise location (when adding/rating a toilet) | Verifying that the record was really made at that point | Indefinitely, attached to the contribution (publicly available data) |
| The photograph you upload | Showing the condition of the toilet | Until the record is deleted |
| The ratings and tags you give | The core function of the App | Indefinitely (in anonymised form) |
About photographs: The EXIF data (location, device information, date) is permanently deleted from the photograph you upload on our servers. Photographs are reviewed automatically before they are published; if a person, a face, personal information or inappropriate content is detected, they are not published.
2. What we do NOT process
- We do not track you. The location you provide while browsing the map is used only for that particular request, is not linked to your account and is not stored. We do not take location in the background; we do not know where you are while the App is closed.
- The only exception to this is the contributions you make yourself: when you rate a place or add one, the location of that point is stored in your contribution record in order to verify that the contribution was really made there. In other words, what we store is not your browsing history but the location of the contributions you deliberately made.
- We do not access your contacts, your gallery (apart from the single frame you take), your messages or your search history.
- We do not collect health data and we do not draw health inferences from your toilet searching behaviour.
- We do not sell your data.
3. With whom we share your data
Only with the service providers needed in order to run the service:
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Server, database and photograph hosting | Germany / Finland (EU) |
| Cloudflare, Inc. | Content delivery, attack protection, domain name management | Global |
| Anthropic PBC | Photograph content moderation (automated) | USA |
| Google LLC / Apple Inc. | Sign-in, crash reporting, notifications | Global |
| RevenueCat, Inc. | Subscription management | USA |
Your photographs are not kept in a storage service abroad; they are stored only on the hosting server above. During content moderation a copy of the image is transmitted to the moderation provider and is not used for model training.
Transfers abroad are based on the standard contract announced by the Kişisel Verileri Koruma Kurulu (the Turkish Personal Data Protection Board); for details see section 4.2 of the Information Notice under the Turkish KVKK. Where there is a legal obligation (a court decision etc.) data may be shared with the competent authorities.
4. Your rights
You may request the following:
- A copy of the data we hold about you
- Correction of incorrect data
- Deletion of your account and of your data
- An appeal against a contribution that was rejected automatically (including photograph moderation)
Account deletion: You can delete your account inside the App via
Settings → My Account → Delete My Account
("Ayarlar → Hesabım → Hesabımı Sil") or on the page
https://tutma.app/hesap-sil. The deletion is completed within 30 days. The
toilet listings and ratings you added as public contributions remain on the map
with their link to you severed (anonymised).
For your requests: destek@tutma.app
5. Security
Your data is encrypted with TLS during transmission. Only the application server can access the database, which is not directly exposed to the internet. Access rights are limited and are reviewed regularly. Nevertheless, we remind you that no transmission over the internet is 100% secure.
6. Children
The App is not directed at children under 13 years of age and we do not knowingly collect data from this age group.
Users between 13 and 18 years of age may use the App only with the knowledge and consent of their parent or legal guardian. The parent or legal guardian may write to destek@tutma.app to request the deletion of the child's data and the closure of the account.
7. Changes
We may update this policy. In the case of significant changes, information is given inside the App. The effective date is stated above.
8. Contact
Exludio Çankaya, Ayşe Mayda Sk. No: 6 35280 Konak/İzmir, Türkiye E-mail: destek@tutma.app