Privacy Policy

Last updated:

This policy explains which personal data we process when you use the go2where mobile app, why, who we share it with and what your rights are.

Data we collect

Account details: your email address, your name and the sign-in method you chose (email, Google or Apple). Sign-in runs on Google Firebase Authentication; your password never reaches us.

Content you save: links you share or add, saved places, routes, collections, your ratings, removal reasons and the problem reports you send.

Phone and emergency contact details: if you choose to add them, your phone number and the name and phone number of your emergency contact. Ask that person for permission before adding their details.

Friends: friend requests and route invitations you send and accept. Other users can find you by your name or your exact email address.

Device and security data: Firebase App Check tokens (Apple App Attest/DeviceCheck, Google Play Integrity) that confirm requests come from the genuine go2where app, and server logs for security and debugging (IP address, request time, error codes).

Crash and error reports: when the app crashes or hits an unexpected error, Firebase Crashlytics collects the time, the error message and technical trace, your device model, the operating system and app version, and a random installation identifier. We use these reports only to find and fix problems, and we do not attach your account details to them.

Location data

Map: with your permission, we use your location while the app is open to show places near you.

Nearby Place Alerts: if you turn this on, your location is collected even when the app is closed or not in use and is compared with the places you want to visit only on your device. Your location is not sent to our servers for this feature. You can turn it off in Settings.

Live Route Recording: while recording, your location is collected even when the app is closed. Raw GPS data stays on your device until you finish and choose to save; if you save, the route is uploaded to your account.

Sharing location with friends: shared only with the friend you choose, for the duration (1 or 24 hours) and precision (exact or approximate) you choose. You can stop sharing at any time.

Help requests: if you send a help request during a group route, your last location is shared only for that incident with the group members and the emergency support team.

Calendar

With your permission, we add your route and event plans to your device calendar. Your calendar content is not sent to our servers.

Why we use your data

To create and protect your account, save your places and routes, plan routes, show nearby places and suggestions, run friend and group features, deliver help requests, fix problems, prevent abuse and meet our legal obligations.

We do not show ads, we do not sell your data and we do not track you across other companies’ apps or websites.

Who we share data with

Our service providers: Google Firebase for authentication, App Check and crash reports (Crashlytics), and Google Cloud for server and database hosting. These providers process data on our behalf and their servers may be outside Türkiye.

Sign-in providers: if you sign in with Google or Apple, that company processes data for the sign-in under its own policy.

Map and place providers: maps are shown with Apple Maps or Google Maps. Place names and coordinates may be sent to such providers to complete place details; your account details are not included in these requests.

Other users: only the friends and group members you choose see what you share with them.

Legal requirements: when required by applicable law or binding requests from authorities.

Retention and account deletion

We keep your data while your account is open. You can delete your account in the app from Menu > Profile & Preferences > Delete account. When you request deletion, access to your account is closed immediately and your personal data is deleted or anonymized. Records we must keep for legal reasons are kept only as long as required.

Your rights

Under the Turkish Personal Data Protection Law (KVKK) and other applicable laws, you have the right to access your data, ask for it to be corrected or deleted, object to its processing and lodge a complaint. You can withdraw location, calendar and notification permissions at any time in your device settings.

Children

go2where is not intended for children under 13 and we do not knowingly collect data from them.

Changes and contact

When we update this policy we change the last-updated date and announce material changes in the app.

You can send us questions and requests from Menu > Report a Problem in the app.