Privacy Policy

The platform is operated by Yusuf Muhammad YAHYA ("YMY"), Bulgurlu Mah. Karlidere Cad. No: 46C Daire: 10, Üsküdar, İstanbul, Türkiye.

For any privacy question or to exercise your rights, contact ymyahyaa@gmail.com.

Account data: your name and email address (via email/password or Google sign-in). Passwords are handled by Firebase Authentication and are never stored by us.

Guide onboarding data: first/last name, email, phone number, country and city, a short bio, specialties and pricing, and — for identity verification — a copy of a government identity document (e.g. passport) that you upload.

Booking data: your name, email, number of guests, the amount, and any free-text you provide (purpose of visit, experience notes, special requests).

Messages: the content of chats you send to guides or to support.

Contact form: your name, email, and message.

Technical data: standard server/log and device data, and — only where enabled — analytics data (see “Cookies & analytics”).

To verify guides, we collect a government identity document. This is sensitive data and is treated as such.

Retention and access: [OWNER MUST PROVIDE: ID-document retention period, who may view it, and when it is deleted]. We are working to ensure these documents are stored with restricted, authenticated access rather than public links.

To provide the service (create your account, list guides, process bookings, enable messaging): performance of a contract.

To verify guide identity and keep the marketplace safe: our legitimate interests and, where applicable, legal obligation.

To process payments: performance of a contract (via Stripe).

Legal-basis mapping should be confirmed with counsel for your jurisdiction: [OWNER MUST PROVIDE: confirmed lawful-basis mapping].

Firebase / Google Cloud — authentication, database, and file storage (data hosted on Google infrastructure).

Cloudinary — image and document hosting (including uploaded identity documents).

Stripe — payment processing. We share your email and booking details necessary to take payment. Card details are entered directly with Stripe; we never see or store them.

Zendesk — the “Live Chat” support widget, if you use it.

Google Analytics — only if analytics is enabled and you have consented (see “Cookies & analytics”).

Google Fonts and image providers (e.g. Unsplash) — serving fonts/images may transfer your IP address to those providers.

Note: platform administrators can access booking records and, for support and safety, message content. See our Cookies Policy for the trackers involved.

Several providers above are based in the United States, so your data may be transferred internationally.

The transfer mechanism (e.g. Standard Contractual Clauses / adequacy) must be confirmed with counsel: [OWNER MUST PROVIDE: cross-border transfer mechanism].

Retention periods per data category (accounts, bookings, messages, identity documents, contact messages, applications): [OWNER MUST PROVIDE: retention schedule per data category].

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your data, and to object to certain processing.

To exercise them, contact ymyahyaa@gmail.com. A self-service data export/deletion feature is not yet available; requests are handled manually.

We use strictly-necessary cookies to keep you signed in. Non-essential cookies/trackers (analytics, the chat widget) load only after you consent via our cookie banner. See the Cookies Policy for the full list.

Questions or complaints: ymyahyaa@gmail.com. You may also have the right to complain to your local data-protection authority.