Consents

Version 2026-11-06 · Effective 6 November 2026

This page is the full text of the explicit consents the Viyu app asks you for. You give each one in the app, when you first use the feature or in Profile → Privacy & data, as a separate switch. Usage statistics in §5 are different: they rest on legitimate interest rather than consent and are on by default; you turn them off with their switch on the same screen. We describe them here so everything behind that switch is in one place. The Turkish version prevails if the two differ.

• Each consent is separate and off by default. There is no "accept all".
• None is a condition of the service. Without a consent you keep using the whole app except that feature, on paid plans too.
• Withdraw any consent anytime, without giving a reason, with a single tap in Profile → Privacy & data. Withdrawal takes effect for the future. Before you switch one off, we tell you what will stop.
• If a consent text changes, the feature that depends on it pauses until you accept the new text.
• Which text you accepted, in which version and when is recorded as proof; no content is recorded.

Information on how your personal data is processed is a separate text: Privacy Notice (KVKK).

1. AI for general Q&A and transfer abroad

I give explicit consent to Viyu sending the data below to the third-party AI provider DeepSeek, and to its transfer abroad to the People's Republic of China, where the provider's servers are located, so that the Viyu assistant can answer my visa and travel questions and, when I ask, write letter drafts (cover letter, employer letter):

• the questions I type to the assistant, the latest messages of the same chat (at most 12) and the short note I add for a letter,
• only these basics of my plan: destination country, visa type, travel date range by month, my stage and my experience level.

I understand that:

• My documents and their content, my and my family members' names, passport and national ID numbers, IBANs, account and card numbers, address, phone number, e-mail address, income and balance amounts, and the rest of my profile (province, birth year, work, social-security and income details, passport, visa and refusal history, family details, document types and dates) are not sent. Names are replaced with labels before my message leaves my phone; if the server finds a pattern such as an ID number or IBAN, nothing is sent.
• The provider may retain this data and use it to improve its service under its own terms, so I should not type ID, health or criminal record details into the assistant.
• AI answers can be wrong; rules and sources come from Viyu's rule base, and only the relevant authorities decide on visas.
• If I don't consent, or withdraw, the assistant and letter drafts don't work; my checklist, vault, Day Ledger, travel log and reminders keep working.

More: How we use AI.

2. Special categories of documents

Asked before you add a document containing special categories of personal data, such as a criminal record or medical report. Asked separately for each category (criminal record, health).

I give explicit consent to documents in the selected category being kept only in the encrypted vault on my phone and checked only on my phone (for example, how recent the issue date is), for my visa or travel preparation. I understand that these documents are not sent to any server or to AI, and that they are deleted from my phone automatically 30 days after my goal ends, with a reminder 3 days before.

Without this consent the document isn't added; you can mark the checklist item as prepared and move on. If you withdraw, documents in that category are deleted from the vault on your phone.

3. Anonymous community contribution: slot radar

I give explicit consent to the observations I report to the slot radar (application center, visa type, appointment date I saw, waiting time) being processed so that they are shown to other users without my identity, as "User report". My name, documents and account are not shared. Raw observations are kept for 180 days, then only identity-free totals remain.

Without this consent you can still read the radar and get its alerts; you just don't contribute. Observations already shared are identity-free and can't be linked back to you.

4. Türkiye's Route board

I give explicit consent to the stops on my route being added to Türkiye's Route board without my name or account, as identity-free rows (year, destination country, city if on the allowed list, month, companions, intent, my region of residence). Rows are added after a random delay of 0 to 72 hours and are not linked to my account; the board only shows values chosen by at least 10 people, with counts rounded to 10. Raw rows are kept for 18 months, then only totals remain.

To withdraw, your phone recalls your rows with a key kept only on your phone. It also tries this before you delete your account; if it can't, the rows stay identity-free.

5. Usage statistics

This section is not a consent text. Usage statistics and crash reports rest on our legitimate interest in keeping the app working and improving it (KVKK Art. 5/2-f), are processed under a pseudonymous ID and are on by default. Turn them off anytime, without giving a reason, with the Usage statistics switch in Profile › Privacy & data (it is there even without an account); turning them off does not limit any feature.

What is collected. From the very first time you open the app, before any account: the app opening, going to the background, coming back and the time spent; which screens were opened (screen paths with any IDs removed); taps on buttons; your first-run choices as fixed option keys (such as purpose, destination country code, timing; never free text); account, Premium screen and purchase steps; error messages you saw. Along with these: a random install ID, the app version, platform, operating system version, device model (e.g. "Pixel 7") and your phone's language.

Never collected. Document contents, passport and ID numbers, names, e-mail addresses, location and anything you type are never part of these events.

Viyu's server. All events are processed on our own server (Türkiye). The server stores only a keyed digest of the install ID. Events are kept for 180 days; if you delete your account, the events linked to it are deleted too, and the rest stay pseudonymous until they expire.

Firebase (Google). Some of the events (first open, first-run start and finish, goal created, sign-up and sign-in, Premium screen viewed, trial and purchase) go to Google Analytics for Firebase; if the app crashes, a crash report (stack trace, device model, operating system, app version; no document content) goes to Firebase Crashlytics. The provider is Google LLC / Google Ireland Ltd.; the data may be processed on Google's servers abroad (e.g. USA, EU). Your Viyu account number (a random code) may be set as a pseudonymous ID; your name and e-mail are never sent. Purpose: product statistics, fixing crashes and measuring which ad campaigns (Google Ads) bring installs that reach these steps. On Android, the Google advertising ID is read by Firebase for ad conversion measurement only; ad personalisation signals are turned off. On iPhone no advertising identifier (IDFA) is read and no tracking permission is asked. Event data is kept for 14 months, crash reports for 90 days.

Meta. To measure our Instagram and Facebook ads, some events (the app opening and the install, first-run finish, sign-up, first alarm follow, goal created, Premium screen viewed; App Store and Google Play purchases and trials) go to Meta Platforms Ireland Ltd. through the Meta SDK in the app; the data may be processed on Meta's servers abroad (e.g. USA, EU). Your Viyu account number, name, e-mail, destination and documents are never sent. On Android, Meta reads the Google advertising ID for ad measurement; on iPhone no advertising identifier (IDFA) is read and no tracking permission is asked. Nothing is sent to Meta from phones set to a European Economic Area, UK or Swiss region. Turning this switch off stops Meta too.

Linking to your account. When you use Viyu signed in, these usage events and the channel or campaign you installed the app from (e.g. Google Ads, Google Play, Apple Ads campaign codes) are associated with your account. This rests on the same legitimate interest and is turned off by the same switch; no separate explicit consent is asked. The install source record is kept for 24 months.

If you turn it off. No more usage events or crash reports go from this phone to Viyu's server or to Firebase; events waiting to be sent are dropped. If you are signed in, our server also removes the link between the install source and your account; the record stays as an anonymous install count. Deleting your account removes the link too.

6. Offer and campaign notifications

I consent, under Türkiye's Law No. 6563 on the Regulation of Electronic Commerce, to Viyu sending me commercial electronic messages as app notifications about partner offers such as travel insurance and eSIMs, discounts and new features.

Notifications about your application, appointment, document freshness, expiry dates and rule changes are separate, do not depend on this consent and never contain promotions. You can opt out of commercial notifications with a single tap; the request takes effect immediately.

7. Campaign e-mails

I consent, under Law No. 6563, to receiving promotional and campaign e-mails. My consent is recorded in the Message Management System (İYS). Service e-mails such as sign-in codes and trial and subscription reminders are separate. I can opt out with a single tap using the link in every e-mail; the request is processed within 3 business days at the latest, immediately on our side.

8. Waitlist e-mails

The website waitlist form has its own consent text: Waitlist consent.