Privacy Policy

Effective: May 22, 2026

1. Data Controller

VYROZE ("we", "the app") processes user personal data in compliance with GDPR and Turkish KVKK. For inquiries and data requests: support@vyroze.com

2. Data We Collect

At registration: email, full name, phone (optional).

During use: your student records, session plans, payment statuses, and any text entered in note fields.

Device identifiers: we store an Expo Push Token (a device-specific identifier) to deliver notifications via the mobile app.

Apple subscription: subscription status and purchase history tied to your Apple ID (delivered via Apple server-to-server webhooks).

Technical data: IP address, device/app version, usage statistics (server logs).

3. Processing Purposes

Account management and service delivery
Apple iOS subscription payments and renewal notifications
Email notifications (welcome, password reset, subscription updates)
Push notifications (daily session summary at 08:00 and 1-hour-before reminders)
Security, error tracking, abuse prevention

No data is used for advertising, marketing, or sold to third parties. We do not perform cross-app tracking; we do not request ATT (App Tracking Transparency) permission.

4. Third Parties (Data Processors)

Apple Inc. — iOS subscription payments, App Store
Expo Application Services (Expo, Inc.) — push notification infrastructure (Expo Push API delivers to Apple Push Notification service)
Resend Inc. — transactional email delivery
Hetzner Online GmbH — server infrastructure (Germany / European Union)
Cloudflare Inc. — CDN, DNS, and DDoS protection

5. Data Retention

Data is retained while your account is active. Upon account deletion, after a 30-day recovery window all data is permanently deleted or anonymized for statistical purposes. Server access logs are auto-purged after 90 days.

6. Your Rights

Under GDPR Articles 15-22 and Turkish KVKK Article 11: you have the right to access, rectify, erase, restrict processing of, and port your data. Send requests to support@vyroze.com — we respond within 1 business day.

7. Account Deletion

You can delete your account from inside the app: Settings → Delete My Account. After password confirmation, the account is soft-deleted; for 30 days it can be restored via support@vyroze.com, then permanently deleted. Apple subscription refunds are subject to Apple's policies and must be cancelled separately via Settings > Apple ID > Subscriptions.

8. Notification Preferences

You can disable push notifications anytime from iPhone Settings > Notifications > VYROZE. Email notifications include an "unsubscribe" link in their footer (except transactional/required emails: password reset, subscription status).

9. Children's Data

VYROZE is not intended for individuals under 16. If we become aware that a user under 16 has uploaded data, the account will be closed and the data deleted.

10. Changes to This Policy

Changes will be posted on this page. For material changes, active users will be notified by email. The last update date is shown above.