Last updated: 08.08.2026
This Privacy Policy ("Policy") explains how Gezgo App ("Gezgo", "we", "us") collects, uses, shares and protects your personal data in connection with the Gezgo mobile application (the "App"). By using the App, you accept the practices described in this Policy.
This Policy is an integral part of our Terms of Use.
1. Data Controller
The data controller responsible for processing your personal data is Gezgo App. Contact details are provided at the end of this Policy.
2. Data We Collect
Depending on how you use the App, we collect the following categories of data:
- Account information: If you choose to create an account, information such as your name and email address is shared with us through Sign in with Apple or Sign in with Google. You may also use the App as a guest without creating an account.
- App content: The trip plans and routes you create, favorite places, countries you have visited (both derived from completed trips and added as "self-reported"), the links you import and the free-text notes you share.
- Location data: With your permission, your device's location while in use, to determine trip start/end points. Location is used only to operate the relevant feature.
- Purchase and credit information: If you buy a Gezgo Pro subscription or a credit pack, your subscription status and transaction identifiers are processed through our subscription infrastructure (RevenueCat). We also keep your credit balance and a record of your credit movements (which action spent how many credits and when). We do not see or store your card or payment details; payment is processed directly by Apple.
- Device, connection and usage data: For the operation and security of the App, technical information such as device type, operating system version, language/region setting, IP address and basic usage/error logs may be processed. The IP address is also used to operate the request limits that prevent abuse.
We do not intend to collect special categories of personal data (such as health or beliefs). Please do not enter such information into free-text fields.
3. For What Purposes and On What Legal Basis We Use Data
We process your data for the following purposes:
- Providing the Service: To deliver features such as route planning, AI route generation, favorites, visited countries and the map/globe visualization (legal basis: performance of a contract).
- Synchronization: To tie your content to your account and keep it up to date across your devices (performance of a contract).
- Subscription and credit management: To verify your Gezgo Pro entitlements, operate your credit balance and attribute your purchases to your account (performance of a contract).
- Improvement and security: To keep the App stable, secure and protected against abuse, and to operate credit/quota/limit mechanisms (legitimate interest).
- Communication and notifications: To send update and information notifications if you have allowed them (consent / legitimate interest).
- Legal obligations: To comply with applicable law (legal obligation).
4. Artificial Intelligence (AI) and Server-Side Processing
- For AI route generation, the city you select and your preferences (such as interests and number of days) are sent to our servers and to an AI model provider to generate day-by-day trip suggestions.
- Your exact location coordinates are not sent to the AI model provider. Suggestions are validated and ordered on your device using map services.
- To reduce generation cost and speed things up, normalized route responses (without coordinates) may be temporarily cached on our servers.
- When you import a social media link (e.g. Instagram/TikTok) or text, the relevant content is processed through our servers to extract place information. When place information cannot be extracted from the link's caption, the video file at that link itself (including image and audio) is uploaded to the AI model provider for analysis. Data relating to people who appear or are heard in the video is therefore also processed; please do not import content for which you do not want this. The uploaded file is not retained on our servers once processing is complete.
- Place results extracted from imported links are temporarily cached, keyed on a digest of the link and not associated with your identity, to avoid processing the same link again.
5. Third-Party Services and Data Sharing
We do not sell your data. To provide the Service, we share data with, or use, the following third-party providers only to the extent necessary:
- Apple: App Store, Sign in with Apple, WeatherKit (weather), Apple Maps / MapKit.
- Google: Sign in with Google and/or Google Maps routing.
- RevenueCat: management of subscription and purchase status.
- OpenRouter: the gateway through which AI model requests are routed; requests are forwarded from there to the model provider (currently Google Gemini).
- Pexels: city imagery.
- GeoNames: city and geographic location data.
- Cloudflare: the routing, caching and attack-protection layer that sits in front of our traffic; connection data relating to your requests (including your IP address) therefore passes through this service.
- External navigation apps: Apple Maps, Google Maps or Yandex Navi, only for directions you initiate.
- Gezgo servers (
api.gezgo.app): route generation, trip sync, blog/discover content and configuration.
These third parties have their own privacy policies. In addition, we may share data with competent authorities where legally required to comply with a legal obligation or to protect our rights.
6. Location and Permissions
- We request your location only while in use and only to operate the relevant feature. You can change or turn off the location permission from your device settings at any time.
- We may request your permission to send notifications; you can turn notifications off from your device settings.
- Weather forecasts are obtained for the city where a dated trip takes place.
7. Data Retention
We retain your personal data for as long as necessary for the purposes described in this Policy and for the period required by applicable law. When you delete your account, the trip plans, favorites, visited countries, import records, credit balance and credit movement records tied to your account are deleted.
Exception — purchase and transaction records: Notification records received from our subscription infrastructure (RevenueCat) in relation to in-app purchases are retained after account deletion for our financial and legal obligations and for the resolution of potential disputes and refund requests. These records contain purchase identifiers and your account identifier; they do not contain your payment instrument details. They are deleted or anonymized at the end of the retention period prescribed by law.
Temporary cache records (route responses, import results) expire automatically after a set period.
8. Security
We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss or misuse (e.g. encryption in transit, access controls). Please note that no method is 100% secure; you are responsible for protecting your login credentials for the security of your account.
9. Your Rights
Under applicable data protection law (e.g. the Turkish KVKK and/or the GDPR), you may have the following rights:
- To request access to the personal data processed;
- To request the rectification of inaccurate or incomplete data;
- To request the erasure of your data (the "right to be forgotten");
- To request the restriction of, or to object to, processing;
- To request the portability of your data;
- To withdraw consent you have given (withdrawal does not affect the lawfulness of prior processing).
To exercise these rights, you can contact us through the channel at the end of this Policy. We conclude your requests free of charge within 30 days at the latest; where the process entails an additional cost, the fee in the tariff prescribed by law may be charged. You also have the right to lodge a complaint with the competent data protection authority (in Türkiye, the Personal Data Protection Authority).
10. Deleting Your Account and Data
You may request deletion of your account and associated data directly from within the App ("Delete Account"). You may also request deletion through the contact channel above. For the scope of deletion and the transaction records that continue to be retained, see §7. When you delete your account, your unused credits are also irreversibly deleted.
11. Children's Privacy
The App is not directed to persons under the age of 13 (or the minimum age applicable in your country), and we do not knowingly collect personal data from children under that age. If we become aware that such data has been collected, we will delete it within a reasonable period.
12. International Data Transfers
Our servers are hosted in Germany; your data is processed and stored there. The third-party providers we use (Apple, Google, RevenueCat, OpenRouter, Cloudflare, Pexels and AI model providers) may also have servers in other countries, including the United States. In that case, your data may be transferred abroad within the framework of the safeguards required by applicable law (under the KVKK, your explicit consent or an undertaking/standard contract; under the GDPR, standard contractual clauses or an adequacy decision).
13. Changes to This Policy
We may update this Policy from time to time. For significant changes we will try to provide reasonable notice. Your continued use of the App after a change means you accept the updated Policy.
14. Contact
For questions about this Policy or your personal data, and for requests:
- Email: gezgoapp@gmail.com
- Web: https://gezgo.app