Privacy Policy

Last updated: 30 September 2026 · Version 1.1 (draft; legal review before release)

1. In short

Yolda is an iOS app for describing your ideal self and turning it into goals and small daily steps. There is no account, no analytics and no advertising SDK. Your data lives on your device and, if enabled, in your own iCloud. Only when you tap an AI feature is the data that feature needs sent through our server to Anthropic (USA) to generate a reply. Our server stores no content.

2. Controller

Tomris Bilge Bilgiç
Güvenlik Caddesi Defne Sokak No: 18 Daire: 3, Çankaya / Ankara, Türkiye
Requests: contact form

3. Data you enter

Your greeting name, chosen life areas, your "dream day" description and how you describe yourself today, the resulting profile (summary, identity statement, traits, values), goals and their measures (start/target values, levels), milestones, habits, one-time steps, completion records, the daily step plan, notes, tracked numbers (e.g. weight, savings) and your Transformation Journal are written to a database on your device. The "Ask my ideal self" conversation is never stored; it disappears when you close the screen. The developer has no access to this data; nothing leaves the device except for AI features.

4. iCloud sync

If iCloud is enabled, data syncs to the private CloudKit database tied to your Apple Account, which even Apple does not expose to the developer. Sync is governed by Apple's privacy policy: apple.com/legal/privacy. You can turn iCloud off in iOS Settings.

5. AI features (optional)

When: only when you tap an AI feature ("Build my profile", "Give me ideas", "Plan it with AI", "Connect to my goals" in the journal, "Ask my ideal self", "Review this week", "Make it smaller") and after you have given explicit consent in the app. You can withdraw consent any time in Profile › Settings; goals, steps, the journal and progress all work without AI.

What is sent (only for the feature used): for the profile, your chosen areas, your dream-day description and optional "today" description; for goal ideas and plans, the goal sentence, its area, measure and values; for journal reflections, that day's entry and the names of steps you completed that day; for questions, your latest messages (at most 10); together with your profile summary and the names and progress percentages of your goals. Weekly reviews send step names, durations and completion statistics, and — only if you opt in — notes and your tracked number. Your name, e-mail, device identifier and location are never sent.

To whom: the data passes through our server (hosted by Vercel Inc., USA) to Anthropic, PBC (USA; the Claude model). Our server does not store or log request content; it only keeps usage counters (section 7). Anthropic may retain API inputs for a limited period for safety purposes under its own policies and does not train its models on them; current terms: anthropic.com/legal/privacy.

Legal basis: processing and transfer abroad for AI features rely on your explicit consent given in the app (KVKK art. 5/1 and art. 9). The dream-day description, journal and questions are free text and may contain health information or religious beliefs (e.g. the "Worship" area). Processing this special-category data requires separate explicit consent (KVKK art. 6); without it, profile analysis, journal reflections and questions stay off while everything else works. Sharing notes and tracked numbers is a separate opt-in, off by default.

Warning: AI output can be wrong and is not medical, psychological, financial, legal or religious advice or ruling. "Ask my ideal self" does not decide for you. Report a problematic output with the in-app "Report" link or the form on this site.

6. Device verification (App Attest)

To verify that AI requests come from a genuine copy of Yolda, Apple's App Attest service is used. A one-way hash (HMAC) of a device-specific verification key ID is kept on our server; it cannot identify you or your device and is used only to enforce usage quotas.

7. Usage counters

To enforce free and Pro quotas, our server keeps counters per hashed device/transaction ID and operation type (e.g. "3 reviews this month"). Counters are stored in our key-value database on Upstash Inc. infrastructure in a European Union region, contain no content, and expire automatically within 40 days. To prevent abuse, requests per IP address per minute are counted for 2 minutes.

8. Notifications

Reminders are scheduled locally on your device; no push server is used.

9. In-app purchases

Yolda Pro is sold by Apple through the App Store; your payment details never reach us. To verify Pro on the server, the app sends Apple's signed subscription transaction (which contains no name or payment data) with each coach request; the server only verifies the signature and uses a hash of the transaction number for the quota counter.

10. Contact form

When you use the form in the app or on this site, your message, chosen topic, optional e-mail address and technical details (app version, OS, language) are e-mailed to us. Legal basis: our legitimate interest in answering you (KVKK art. 5/2-f) and, for transfer abroad, the explicit consent you give with the checkbox (art. 9). Delivery is handled by Vercel Inc. and Resend Inc. (USA) as processors. Your message is used only to answer you and deleted at the latest one year after the exchange ends.

11. Summary

12. Cookies and tracking

The app uses no cookies, advertising IDs, fingerprinting or analytics SDKs. This website is static and uses no cookies.

13. Age

The app is intended for users aged 18 and over; it is not directed at children and does not knowingly collect data from them.

14. Your rights

You may ask whether your personal data is processed, request information, correction or deletion, object, and claim compensation for damage. Send requests via the contact form or by post; we answer within 30 days. You can delete in-app data yourself via Settings › "Delete all data" and iOS Settings › Apple Account › iCloud › Manage Account Storage › Yolda.

15. Changes

Updates are published on this page with a new date and version. Material changes to the AI features trigger a new consent request in the app (as happened with version 1.1).