Privacy

Last updated: 3 October 2026

The short version: we don't ask for your phone number, we don't look at your contacts, and we never sell any data. We keep the minimum the app needs to work; delete your account and all of it goes.

What we keep

• Your email address. It comes from Apple or Google when you sign in and is used only to recognise you. Nobody in your groups can see it.
• Your display name and face. You type the name. For your face, you either pick one of the ready-made magnets that come with the app or upload a photo of your own. A photo you upload can be seen only by people who share a group with you.
• Things about your groups: the group's name and question, memberships, the yes/no answer you give each day, the note you add to your answer and the messages you write in the group chat.
• For notifications: your device's notification ID (APNs on iPhone, FCM token on Android), your time zone and your quiet hours setting.
• For safety: the people you block and the reports you send. If you report a message, a copy of it is kept for review. What you write is checked for objectionable content as it is sent; this check happens on the server in real time and no separate record is kept.
• Photo proof: if your group asks for proof, the photo you take on the day you answer is kept in private, non-public storage. The result of the photo check (matched, didn't match, unsure) is recorded too.

What we don't keep

• Phone numbers. They aren't in any table and are never asked for.
• Your address book, contacts or location.
• Advertising IDs. There are no ads and no third-party trackers in the app.

Who can see it

Your answers, notes and messages in a group are visible only to that group's members. Different groups can't see each other. Your name and face are visible to people who share at least one group with you. Your email is visible to no one.

Groups set up as "open groups" are listed in Discover: their name, question and number of members are visible to everyone. Even in an open group, answers are visible only to members.

Proof photos are visible only to the group's members, and only after the photo has been checked. You are not shown proof photos from people you have blocked.

How photo proof is checked

If your group asks for proof, the photo you upload is automatically sent to an AI service to check whether it matches the group's description ("what we want to see in the photo") and whether it contains inappropriate content: the moondream model running on fal.ai (USA). For this check, the group's description text (not the photo) is also sent through the same service to a language model to be translated into English. We don't use the photo for anything other than this check. We send the photo and the description to fal with an instruction not to store the content it receives; fal processes the photo only for the check. fal's own conditions are set out in its privacy policy and terms.

If a photo is found to be inappropriate, it is deleted immediately and an automatic report is opened for review.

Where it is stored and who we work with

Data is stored with Supabase, on servers in Germany (Frankfurt). We work with these service providers to run the app:

• Supabase (servers in the EU, Frankfurt): database, file storage, sign-in sessions.
• Apple APNs and Google Firebase Cloud Messaging (FCM): notifications. Only the notification text and the device ID go to these services.
• Apple and Google sign-in services: signing in with your Apple or Google account.
• fal.ai (USA): the automatic check of photo proof (see above).

Because Apple, Google and fal are based outside Turkey and the EU (mainly in the USA), data sent to these services is transferred abroad. Beyond these, we don't share data with anyone, and we don't sell it to anyone.

How long it is kept

For as long as your account is open. When you tap Settings › Delete account, your profile, answers, notes, messages, the photo you uploaded and your notification record are deleted; if you signed in with Apple, the sign-in permission on Apple's side is also revoked. Deletion can't be undone.

Proof photos are kept for at most 30 days and then deleted automatically. If you delete the photo or delete your account, the photo is deleted too.

If you leave a group, your past answers and proof photos in that group are deleted; the messages you wrote stay in the group and show "Former member" in place of your name.

Children

The app is not directed at children under 13 and does not knowingly collect data from this age group.

Data controller and your rights

The data controller is Volkan Eren, the developer of So, Did You? Contact: volkanerenee@gmail.com.

We process your data to provide the app to you (performance of a contract); blocks, reports and content checks are processed to keep the app safe (legitimate interest).

Under Article 11 of Turkey's Law No. 6698 on the Protection of Personal Data (KVKK) and the EU General Data Protection Regulation (GDPR), you have the right to learn whether your data is processed, to access it and get a copy, to have it corrected if it is wrong, to have it deleted, to object to its processing and to ask for its processing to be restricted.

You can see, correct or delete your data from the Settings section in the app. For anything else, or if you get stuck, write to us from the support page; we answer within 30 days at the latest. You can also complain to the data protection authority in your country (in Turkey, the Personal Data Protection Authority, KVKK).