rotaPrivacy policy
Draft under legal review. Last updated 12/09/2026. Controller details and the Turkish (KVKK) version will be added before the public launch.
What we store. Your account (name, email, password hash); the profile you choose to fill (bio, home city, languages, interests); your trips (cities, dates, stops, stays, costs, notes, checklist, saved places); your Must-see list; reviews and star ratings you publish; invitations and requests you create; chat messages; notification preferences; consent history; blocks and reports; moderation records; device push subscriptions if you enable push; and security records (sessions, sign-in attempts).
What others can see. Nothing about a trip unless you turn on discovery for it. Discovery shares your name, public profile and city plus date overlap; activity and flight matching are separate switches. Hotel names, addresses, booking references and notes are never shared. Invited trip members see the trip you shared with them. Reviews you publish are visible to all signed-in travelers with your name. A place shows how many travelers keep it on their Must-see lists, never who.
Links and posts you share. When you share a link or caption into RotaPin, we fetch what that page shows publicly (for example a video's title and description) to find place names, and we may pass that text to a language-model provider to extract names when that service is enabled. Shared links wait in a short-lived inbox for at most 24 hours until the app collects them; captions are not stored.
Why we process it. To plan your trip, to match you with travelers who opted in, to run invitations and chat you take part in, to keep the community safe (reports, blocks, moderation), and to send notifications you enabled.
Retention. Sessions expire after 7 days and are purged 30 days later; content removed by moderation is purged after 30 days; sample accounts are deleted after 7 days; closed reports are kept 365 days for audit; your trips stay until you archive or delete them or delete your account.
Your rights. Export your data (Account → Download my data) and delete your account (Account → Delete my account) at any time. Appeals against suspension are available in the app.
Providers. Maps, walking routes and place data for supported cities are served from our own servers using open data (OpenStreetMap, Overture Maps). For other cities the map loads OpenStreetMap's public tiles, and place positions may be looked up through OpenStreetMap Nominatim; in both cases your IP address reaches those servers. No advertising or analytics SDKs are included.