myRota – Terms of Use and Privacy Policy
Last Update: 21 July 2026 (account deletion: permanent deletion) Applicable Platforms: myRota mobile applications offered via the Apple App Store (iOS) and Google Play (Android), and related server services Data Controller / Service Provider: Burak Bayram (“myRota”, “we”, “the App”) Contact: burakbayram@outlook.com
This document jointly comprises: (A) the User Agreement (Terms of Use), (B) the Privacy Policy, and (C) a notice under Law No. 6698 on the Protection of Personal Data (KVKK — Türkiye’s Personal Data Protection Law). Downloading the App, creating an account, using it as a guest, or continuing to use the services means that you have read and accepted this document.
A. USER AGREEMENT (TERMS OF USE)
1. Parties, Acceptance, and Scope
1.1. This agreement is entered into between the natural person using the myRota application (“User”, “you”) and Burak Bayram.
1.2. The agreement covers the iOS and Android clients, cloud authentication / database / file storage / server function infrastructure, notification services, and payment integrations.
1.3. Using the App means you accept these terms and the Privacy Policy in advance. If you do not accept them, do not use the App and delete your account.
1.4. myRota may update these terms at any time. The current text is published via in-App links and/or at https://www.burakbayram.com. Reasonable notice will be attempted for material changes; continued use after an update constitutes acceptance of the new terms.
2. Description of the Service and Features
myRota is a digital platform for discovering and organizing travel programs and tracking personal travel content. Services may include the following (features may change, be added, or be removed over time):
| Feature | Description |
|---|---|
| Manual / ready-made routes (programs) | Travel programs presented in a continent, country, city, and pin structure; some are free, some are unlocked with Gezgin Puan (Traveler Points). |
| RotaAI | Personalized route suggestions via artificial intelligence (Google Gemini, etc.). Free daily quota and/or additional use with Gezgin Puan. |
| Collection | Visited countries/cities, cups/mugs, magnets, books, stamps, postcards, currencies/tokens, game cards, Seven Wonders / passport-style visits, and related images and notes. |
| Check-in | Check-in to program activities; contributes to the profile step / level system. |
| Favorites | Favoriting programs. |
| Reviews and ratings | Star ratings and text reviews for programs (subject to moderation). |
| Travelers leaderboard | Public ranking based on steps / level (name and profile image may be visible). |
| Profile | Name, email, profile photo, level, badges, points balance. |
| Country information pages | Content blocks; third-party sourced content such as exchange rates and Spotify / YouTube playlist information. |
| Notifications | Push notifications for announcements, subscriptions, leadership rewards, content / RSS, etc. (subject to permission and preference). |
| Guest use | Limited features (e.g., limited RotaAI); features requiring an account may be locked. |
| Premium subscription | Monthly / yearly subscription with expanded limits (e.g., Collection capacity, RotaAI daily allowances). |
| Gezgin Puan | In-app virtual points; package purchases, welcome bonus, rewards; spendable to unlock routes and for additional RotaAI use. |
The term Content covers routes, “Things to Know Before You Go” pages, banners, reviews, collection data, statistics, and all other data provided through the App.
3. Account, Authentication, and Security
3.1. Account creation methods: email and password, Sign in with Google, and (on iOS) Sign in with Apple. Guest use may not create a registered account; limited use may be provided via a device identifier.
3.2. You are responsible for the accuracy, currency, and confidentiality of your account information. Do not share your password with third parties.
3.3. myRota takes reasonable technical and administrative measures for account security (e.g., application integrity checks, session / security logs, account ban mechanisms). Nevertheless, no system is 100% secure. myRota cannot be held liable for unauthorized access, third-party attacks, or security vulnerabilities caused by the User; mandatory legal obligations are reserved.
3.4. For security, prevention of abuse, and legal obligations; on successful logins and at certain intervals in sessions, IP address, device identifier, device model, operating system version, application version, and client software information may be recorded server-side. Details are in the Privacy Policy.
3.5. myRota reserves the right to suspend, ban, or terminate without prior notice accounts that violate the terms of use, the law, or third-party rights, or that engage in abuse, fraud, spam, manipulation, or create a security risk. For banned accounts, login may be disabled and session refresh rights may be revoked.
4. Account Deletion and Consequences
4.1. An account deletion request may be initiated from within the App (Profile → Settings). For security reasons, re-authentication (password / Google / Apple) may be required.
4.2. Account deletion is permanent and irreversible. myRota deletes personal data associated with your account on the server side. This includes in particular:
- Your account and profile information (name, email, profile image, etc.);
- Collection, check-in, favorites, purchased / unlocked routes, points balance and history, reviews, step / level / badge data;
- Your Travelers leaderboard record, application open statistics, RotaAI usage counters;
- Notification identifiers and notification preferences;
- Your security login / session records (IP / device);
- Your profile and collection images in cloud storage;
- Your authentication (login) record.
4.3. RotaAI routes stored on the device and local cache are attempted to be cleared during deletion. Separately deleting the App or device data helps remove remaining local traces.
4.4. For statistical purposes, only an anonymous deleted-account counter may be incremented. No archive of name, email, or user ID belonging to deleted accounts is retained; no list of “users who deleted their accounts” is created.
4.5. After account deletion:
- Active Premium rights, remaining Gezgin Puan, and access to purchased content are irreversibly lost;
- You may open a new account with the same email (old data is not transferred to the new account);
- No refund, compensation, or restoration may be claimed for loss of subscription, points, content, or data (mandatory consumer / store rules reserved).
4.6. Billing, receipt, and subscription records on the Apple App Store / Google Play / RevenueCat side are subject to the policies of the relevant store / payment intermediary; those records may not be under myRota’s control.
4.7. To cancel store subscriptions, in-App account deletion alone is not sufficient; you must cancel via Apple ID / Google Play subscription management. Otherwise billing may continue.
4.8. If you cannot delete from within the App or need additional support, you may write to burakbayram@outlook.com.
5. Payments, Subscriptions, and Gezgin Puan
5.1. Purchases are processed via the Apple App Store on iOS and Google Play on Android; technical management of subscription and points packages is handled through RevenueCat. Card details are not stored on myRota servers.
5.2. Premium subscriptions (monthly / yearly) and Gezgin Puan packages are store products. Prices, tax, renewal, trial period, cancellation, and refunds are subject to Apple / Google terms and the relevant store policies.
5.3. myRota is not responsible for payment processor outages, incorrect charges, store-related technical issues, or account / device incompatibilities. For refund / cancellation requests, contact the relevant store first.
5.4. Purchased Gezgin Puan, Premium rights, and routes unlocked with points cannot be converted to cash, transferred to another account, or sold. myRota reserves the right to change points pricing, package contents, and the points cost of a feature (e.g., points for additional RotaAI) with or without prior notice.
5.5. Free points such as welcome bonuses and leadership rewards may be clawed back in cases of abuse, error, or system violation.
5.6. In the event of account deletion, ban, or closure for breach of terms; no refund may be claimed from myRota for unused points / subscription period (mandatory legislation and store rules reserved).
6. RotaAI (Artificial Intelligence) Terms of Use
6.1. RotaAI sends requests to Google Gemini or similar models via a server-side secure proxy. Request content typically consists of travel preferences such as country, city, duration, time range, category, and language.
6.2. The accuracy, currency, safety, legal compliance, or completeness of generated routes is not guaranteed. AI outputs are suggestions; verification from official sources before travel is the User’s responsibility.
6.3. Generated RotaAI content is as a rule stored locally on your device (the device’s local / encrypted preferences storage). Deleting the App, changing devices, or clearing local data may result in loss of these routes; myRota is not responsible for such loss.
6.4. Quotas, points spending, and usage counters may be kept on the server. Lifetime / device-based limits may apply for guest users.
6.5. Using RotaAI for illegal, harmful, misleading purposes or in ways that violate third-party rights is prohibited.
7. Content, Disclaimer, and Intellectual Property
7.1. Travel information: Manual routes, country pages, fees, hours, locations, and AI outputs may be outdated, incorrect, or incomplete. The User is obliged to verify information before travel. myRota cannot be held liable for errors or loss of currency in such information, or for direct, indirect, incidental, or consequential damages arising therefrom (mandatory legal liabilities reserved).
7.2. Third-party content: Spotify, YouTube, map applications, exchange-rate providers, etc. are subject to their own terms. myRota is not responsible for outages, errors, or content changes of those services.
7.3. Reviews: Reviews are not mandatory. When you submit a review, you are responsible for its compliance with the law. With respect to published or moderated reviews, you are deemed to grant myRota a worldwide, perpetual, royalty-free, sublicensable, commercially usable license to use, reproduce, modify, publish, and remove. myRota reserves the right not to approve, to hide, or to delete reviews.
7.4. Collection and user content: You represent that you own the rights to photos and text you upload or have obtained the necessary permissions. Unlawful, obscene, hateful content or content that infringes others’ rights is prohibited; upon detection it may be deleted and account sanctions may apply.
7.5. The application software, design, brand, ready-made route content, and other elements belonging to myRota are the intellectual property of Burak Bayram / licensors. Unauthorized copying, reverse engineering (legal exceptions reserved), unauthorized data scraping, or resale is prohibited.
7.6. myRota reserves the right to change, limit, or remove User programs, purchased content access, or user content with or without notice for legal obligation, security, technical maintenance, or service integrity. In such cases, no fee refund or compensation may be claimed (mandatory legislation reserved).
8. Acceptable Use
Users may not:
- Use the service for illegal purposes;
- Open an account on behalf of another person or impersonate someone;
- Attempt to bypass automated bots, unauthorized data scraping tools, or security / integrity / quota systems;
- Access other users’ data without authorization;
- Spread malware or overload the service;
- Engage in fake purchases, points / subscription manipulation, or refund abuse.
9. Limitation of Liability
9.1. The App is provided “as is” and “as available”. No express or implied warranty is given regarding merchantability, fitness for a particular purpose, or uninterrupted / error-free operation.
9.2. To the maximum extent permitted by mandatory consumer legislation; myRota’s total liability is limited to the amount the User directly paid to myRota in the twelve (12) months preceding the event (net of store commissions). Liability is not accepted for indirect, incidental damages, lost profits, data loss, travel cancellation, and similar harms.
9.3. These limitations do not apply in cases of intent, gross negligence, or circumstances that cannot legally be limited.
10. Indemnification
The User agrees to indemnify myRota, to the extent of their fault, for claims, penalties, and reasonable defense costs directed at myRota by third parties or competent authorities arising from the User’s content, use, or breach of this agreement.
11. Governing Law
This agreement is governed by the laws of the Republic of Türkiye.
12. Miscellaneous Provisions
12.1. Invalidity of one provision of the agreement does not affect the others. 12.2. Failure by myRota to exercise a right does not constitute a waiver. 12.3. The User may not assign their account or rights arising from this agreement to a third party. 12.4. This document constitutes the entire agreement between the parties (mandatory legal rights reserved).
B. PRIVACY POLICY
1. Scope
This policy relates to personal data processed through the myRota iOS and Android applications, related servers, and support channels. Apple, Google, RevenueCat, Google Gemini, and other third parties’ own privacy policies also apply separately.
2. Categories of Data We Collect
2.1. Identity and account
- First / last name (or display name), email
- User ID, sign-in method (email, Google, Apple)
- Profile photo links (while the account is active, older links may be retained temporarily; removed upon account deletion)
- Account creation date, account type (standard / premium / admin), subscription type and expiry information
- After account deletion: personal identity / contact archive is not retained; only an anonymous deleted-account counter may be incremented
2.2. Usage and content data
- Favorite programs, purchased / unlocked programs
- Check-in records (activity, city, time information; a snapshot of username/email may be included)
- Reviews and ratings
- Collection data and images (countries, cities, cups/mugs, magnets, books, stamps, postcards, currencies/tokens, game cards, Seven Wonders visits, notes, dates)
- Profile steps, level, badges; name / photo / steps for the leaderboard
- Gezgin Puan balance, purchase and spending history
- RotaAI usage quota / counters (server); generated routes (on device)
- Application open statistics (open count, day information, last open; may be associated with email and name)
- “Rate us” status
- Notification preferences and notification identifiers (platform, language, application version)
2.3. Security and technical data
- IP address (server-side, in login and session security records)
- Device identifier (a persistent identifier generated in the device’s secure storage), device model, operating system version, application version, client software information
- Last login time, last login IP address, last device identifier, last platform (iOS/Android), last session time
- Account ban information (whether banned, reason, time)
- Application integrity / device verification signals
- Application usage metrics that analytics services may automatically collect (at device / session level; advertising identifiers are not intentionally used)
- Device information you choose to share in feedback emails
2.4. Payment data
- Sensitive payment information such as card numbers is not stored by myRota.
- Apple / Google / RevenueCat process data such as transaction ID, product ID, subscription status, and a payment account identifier matched to the user ID; premium / points status is reflected to the server via automatic sync.
2.5. Data we do not collect / do not request
- Device GPS / location permission is not used (“location” in check-in is user input / content text).
- Advertising identifiers are not intentionally collected; advertising ID permission is not used on Android.
- Contacts / address book are not collected.
- A separate crash-reporting software is not used (system / infrastructure logs reserved).
3. Purposes of Processing
Data is processed for the following purposes: 1. Account creation, authentication, session management 2. Provision of the service (routes, collection, check-in, reviews, ranking, notifications) 3. Operation of the Premium and Gezgin Puan economy, fraud prevention 4. RotaAI generation and quota management 5. Information security, prevention of abuse, account banning, provision of information to legal authorities (including IP and device security records) 6. Measuring / improving application performance and usage 7. Support, feedback, and mandatory notices 8. Fulfilment of legal obligations
4. Legal Bases (KVKK Art. 5)
Processing may be based on establishment/performance of a contract, legitimate interest (security, service improvement, prevention of abuse — provided fundamental rights and freedoms are not harmed), explicit consent (e.g., optional notifications / camera-gallery), and legal obligation.
5. RotaAI and Third-Party Artificial Intelligence
5.1. RotaAI requests are forwarded to Google via the server. As a rule, name/email are not sent in the prompt; travel preferences are processed.
5.2. Google’s AI / cloud service terms apply separately. Generated content is stored on your device; quota records are kept on the server.
6. Retention Periods
| Data | Period (summary) |
|---|---|
| Active account profile and service data | For as long as the account is active |
| Personal data after account deletion | Permanently deleted (no archive of name, email, or user ID) |
| Anonymous deleted-account counter | May be retained for statistics (does not identify a person) |
| Security login / session records (IP, device) | Approximately 18 months while the account is active; related records are also deleted upon account deletion |
| Application open statistics | While the account is active; deleted upon account deletion |
| Store / payment intermediary records | Subject to the relevant provider’s policy (may be outside myRota’s control) |
| Local RotaAI routes | On device; attempted to be cleared upon account deletion / App or data deletion |
| Notification identifiers | While the account is active; deleted upon account deletion / sign-out |
Periods may be extended or shortened based on legitimate interest and legal obligations.
7. Sharing and Transfer
Personal data may be shared / transferred with the following categories:
| Recipient | Purpose |
|---|---|
| Google Firebase / Google Cloud (authentication, database, file storage, server functions, notifications, integrity checks, analytics) | Hosting, identity, data, notifications, security |
| Google Gemini | RotaAI generation |
| Sign in with Google | Social sign-in |
| Apple | Sign in with Apple, Apple notification service, App Store payments |
| Google Play | Android payments, Play integrity verification |
| RevenueCat | Subscription / in-app purchase management |
| Spotify / YouTube / exchange-rate services (via server) | Content enrichment |
| Other users | Approved reviews; name/photo/steps on the leaderboard; publicly visible profile images |
| Competent public authorities | Court order, legal obligation |
| Professional advisors | Legal / accounting (under confidentiality obligations) |
Some servers may operate in the Europe region; Google / Apple may use global infrastructure. Relevant protective measures are attempted for transfers.
No advertising network is used. Data is not sold.
8. Cookies and Similar Technologies
Classic web cookies are not used in the mobile App. Secure storage on the device, local preferences, local cache, and software identifiers may be used.
9. Permissions
| Permission | Platform | Purpose |
|---|---|---|
| Camera / Photo gallery | iOS (and Android photo picker when needed) | Collection / profile images |
| Notifications | iOS & Android | Push notifications |
| Internet | Both | Service communication |
| Location (GPS) | None | — |
| Advertising ID | Not used | — |
If you do not grant permission, the related feature may not work; basic browsing may still be possible.
10. Data Security
- Encrypted connection in transit, server-side access rules, application integrity checks
- Sensitive keys not embedded in the App (AI / Spotify etc. routed via server)
- Restriction of admin access
- Practices such as not writing raw IP to operational logs in production for security records
100% security is not guaranteed. In case of a breach, notices required by legislation are made.
11. Account Deletion and Data Subject Requests
11.1. In-App account deletion permanently deletes your account and personal data held by myRota (see User Agreement Art. 4). Only an anonymous deleted-account counter may be retained. Records at store / payment providers are subject to their own policies.
11.2. For your rights under KVKK (access to information, rectification, erasure/destruction, objection, complaint, etc.), you may apply to burakbayram@outlook.com. Identity verification may be required.
12. Policy Changes
This policy may be updated. The effective date is stated above. For material changes, notice via in-App or email / store notes will be attempted.
C. KVKK NOTICE SUMMARY
Data controller: Burak Bayram — burakbayram@outlook.com
Main data processed: Identity, contact, account, usage, user content, transaction security (IP, device), payment status (store-sourced), notification identifiers.
Purposes: Service provision, contract performance, security / prevention of abuse, legal obligation, improvement.
Collection method: Electronically; directly from you, from your device and your use of the service; from payment providers.
Transfer: Recipients in Section B.7; domestic / foreign service providers.
Your rights: KVKK Art. 11 — right to apply; complaint to the Authority.
Special note on security records: IP and device information on logins and sessions may be retained for approximately 18 months while the account is active, for information security, account protection, banning, and legal requests. When the account is deleted, these records belonging to you are also deleted. The IP is not sent by the client; it is determined by the server.
D. CONTACT
For agreement, privacy, or KVKK requests: burakbayram@outlook.com
*myRota © Burak Bayram. All rights reserved.*
