Privacy Policy

ZEEKY

PRIVACY POLICY

Last Updated: May 1, 2026

1. Introduction

As Riza Turkmen ('Developer'), we are committed to protecting your privacy while you use the Zeeky application ('App'). This Privacy Policy explains what personal data we collect, how we use it, and how we protect it.

This policy is prepared to fulfill our obligations under the Turkish Personal Data Protection Law (KVKK No. 6698) and the European Union General Data Protection Regulation (GDPR).

2. Data We Collect

2.1 Account Information

Full name
Email address
Password (stored encrypted)
Registration date

2.2 Profile Information (Optional)

Date of birth and age
Gender
Weight and height
Occupation and education
Interests and hobbies
Short and long-term goals
Financial goals (monthly budget, savings target)

2.3 Activity Data

Daily activity records (sports, social, food & drink, entertainment, travel, etc.)
Activity durations and quantities
Activity locations (only when permission is granted)
Chat history (conversations with the AI)
Voice message transcriptions (when microphone feature is used, processed on-device only)

2.4 Financial Data

Income and expense records
Spending categories
Recurring transaction information

2.5 Entertainment & Viewing Data

Movies and TV shows watched (title, genre, director, year, IMDb rating)
This data is used to provide personalized movie and show recommendations
Movie information is enriched via the OpenAI GPT-4o-mini model

2.6 Health Data (Apple HealthKit)

The following data is processed only with your explicit permission:

Daily step count
Walking distance
Active calories
Sleep duration
Heart rate

HealthKit data is used solely to personalize coaching services and is not shared with third parties.

2.7 Location Data

Location data is only collected during activity logging and only when you explicitly grant permission. Location is not continuously tracked. Nominatim (OpenStreetMap) is used anonymously for location name resolution.

2.8 Voice Data (Microphone)

When using the voice message feature, your voice is transcribed on your device using Apple's SFSpeechRecognizer API. Your audio recording is not transmitted to our servers; only the transcription text is processed. Microphone permission can be revoked at any time.

2.9 Notification Data

OneSignal is used to deliver push notifications. Notification identifiers and device tokens are stored on OneSignal servers. Personalized notification messages are generated via OpenAI.

2.10 Technical Data

Device type and operating system
App usage statistics
Error reports

3. How We Use Your Data

To provide personalized AI life coaching
To generate weekly summaries and suggestions
To provide movie and TV show recommendations based on viewing history
To enable activity and financial tracking features
To send daily motivation and weekly summary notifications
To improve app performance
To resolve technical issues
To fulfill legal obligations

4. Third-Party Services

4.1 Supabase

Supabase is used for database and authentication infrastructure. Supabase is SOC 2 Type II certified. Your data is stored on European (Frankfurt) servers. Privacy policy: supabase.com/privacy

4.2 OpenAI

OpenAI's GPT-4o and GPT-4o-mini models are used for AI coaching, suggestions, and movie information enrichment. Chat messages and activity data are sent to OpenAI. Privacy policy: privacy.openai.com

4.3 Apple HealthKit

Health data is received through Apple's HealthKit framework only with your permission and is not shared with third parties.

4.4 Apple SFSpeechRecognizer

Apple's built-in speech recognition API is used for the voice message feature. Audio processing occurs entirely on-device; no audio data is transmitted to our servers.

4.5 Apple App Store / Google Play

Premium subscription payments are processed through Apple App Store and Google Play infrastructure. Payment information is not stored by the Developer.

4.6 OneSignal

OneSignal is used for push notification delivery. Privacy policy: onesignal.com/privacy

4.7 Nominatim / OpenStreetMap

Nominatim (OpenStreetMap) is used anonymously for location name resolution.

4.8 RevenueCat

RevenueCat is used for subscription management. Privacy policy: revenuecat.com/privacy

5. Data Security

All data is transmitted over HTTPS/TLS encrypted connections
Passwords are hashed using bcrypt
Database access is protected by Row Level Security (RLS)
Voice data is not transmitted to servers; processed on-device
Regular security updates are applied

No system is 100% secure. In the event of a security breach, you will be notified within the legally required timeframe.

6. Data Retention

Account information: Until account deletion
Activity records: Until account deletion
Chat history: 90 days (older records are automatically deleted)
Financial data: Until account deletion
Health data: Until account deletion
Movie/TV viewing history: Until account deletion
Notification history: 90 days
Error logs: 30 days

7. Your Rights

Under KVKK and GDPR, you have the following rights:

Right of access: You may request the data held about you
Right to rectification: You may request correction of inaccurate data
Right to erasure: You may request deletion of your data
Right to restriction: You may request restriction of data processing
Right to data portability: You may request your data in a structured format
Right to object: You may object to data processing

To exercise your rights, email privacy@zeeky.app. Requests will be responded to within 30 days.

8. Children's Privacy

Zeeky is not intended for children under 13. If we become aware that we have collected data from a child under 13, we will delete it immediately. Users under 18 must obtain parental consent.

9. Local Storage

Zeeky uses local storage on your device for session management and app preferences. This data is stored only on your device and is not shared with third parties.

10. International Data Transfers

Your data may be transferred to the United States via the OpenAI API. This transfer is carried out under appropriate safeguards pursuant to Article 46 of the GDPR. Notification data may also be transferred to the US via OneSignal.

11. Policy Changes

This Privacy Policy may be updated from time to time. Significant changes will be announced via in-app notifications or email. The updated policy will take effect from the date it is published in the App.

12. Contact & Complaints

Email: privacy@zeeky.app
Data Controller: Riza Turkmen
Website: zeeky.app

For KVKK complaints: kvkk.gov.tr. For GDPR complaints, contact your local EU data protection authority.