Privacy Policy

Version 2026-11-06 · Effective 6 November 2026

This policy explains how your personal data is processed when you use the Viyu mobile app (iPhone and Android) and this website. The formal notice under Türkiye's Personal Data Protection Law No. 6698 (KVKK) is in the Privacy Notice (KVKK); both describe the same data flows. The Turkish version of these texts prevails if the two differ.

Viyu is an independent private company. We are not affiliated with any government, embassy, consulate or visa application center. Only the relevant authorities decide on applications.

In short

• Your documents stay on your phone. Documents you add (photos, PDFs) are kept only in the encrypted vault on your phone. They are never sent to our servers, to AI or anywhere else. They are deleted from your phone automatically 30 days after your goal ends; we remind you 3 days before. You can delete them earlier.
• We don't ask for your ID. We never ask for or store passport numbers or Turkish national ID numbers. We don't scan your passport and don't connect to e-Devlet. You enter what's needed yourself.
• Your name stays on your phone. Your name and your family members' names never reach our servers.
• AI is optional. The assistant works only if you give explicit consent, and it answers general questions. The provider is DeepSeek, whose servers are in China. It receives only your question and a few basics of your plan (destination country, visa type, date range by month, stage).
• No ads, no selling. We show no ads in the app and never sell your data. We measure how the app is used with pseudonymous statistics; part of them and crash reports go to Firebase (Google) and Meta, which also helps us measure whether our own ads work. Your documents, name, ID numbers and anything you type never go into these statistics; turn them off in Profile › Privacy & data (§2, "Usage statistics").

1. Data controller

Neuros Studio ("Viyu", "we"). E-mail: viyu@neuros.com.tr. The company's registered trade name is provided by e-mail on request for formal applications.

2. What we process

Your account

• Your e-mail address (encrypted on our servers), how you sign in (e-mail code, Sign in with Apple or Google) and the account identifier Apple or Google gives us.
• Session and device data: device type, operating system and app version, language, push token (encrypted).

What you enter for your plan

• Your stage (dreaming, planning, preparing to apply, waiting, have a visa), your goals, destination countries, dates and who you're travelling with.
• General details we ask to tailor your plan: country and province of residence, birth year, work status and sector, social security type, income band (a range, not an amount), ties to Türkiye, languages.
• Family members: relationship and birth year only. Their names stay on your phone.
• Passport: type, issuing country, issue and expiry dates. No number.
• Your visas: type, issuing country, validity dates and number of entries.
• Your applications: visa type, stage, application center, appointment and application dates, outcome.
• Refusals: country, date and the standard grounds you tick from a list. The refusal letter's text or photo never reaches our servers.
• Document status: document type, whether it's ready, issue and validity dates, the day it will be deleted from your phone. Not the document itself, its image or its content.

Travel log

• Your trips: dates, countries and cities, mode of travel, who you went with (as roles) and the title you give a trip (encrypted). Your Day Ledger (Schengen 90/180) stays and stamps are calculated from these records.
• If you import a boarding pass or Wallet pass, it is read on your phone; only from, to, date and flight number are saved. Names and booking references (PNR) are not read or stored.

Where you downloaded the app

• When you first open the app, the channel your install came from is recorded once: on iPhone, a one-time code from Apple's AdServices (Apple tells us whether the install came from an Apple Ads ad, and which campaign and keyword); on Android, Google Play's install referrer (campaign codes and whether there was a Google Ads click). The record is kept under an encrypted digest of the app's random install ID.
• For this record we do not read advertising IDs (IDFA, Android advertising ID), do not ask for tracking permission, do not keep click IDs and do not share the record with anyone. (Firebase reading the Google advertising ID on Android is covered below, under "Usage statistics".)
• When you use Viyu signed in, this record is associated with your account together with your usage events (legitimate interest; see "Usage statistics" below). Turning off Usage statistics or deleting your account removes the link and the record stays as an anonymous install count.

Usage statistics

• From the very first time you open the app, before any account, pseudonymous usage events are recorded: the app opening, going to the background, coming back and the time spent; which screens were opened (screen paths with IDs removed); taps on buttons; your first-run choices as fixed option keys (such as purpose, destination country code, timing; not free text); account, Premium screen and purchase steps; error messages you saw. With them: a random install ID (our server stores only a keyed digest of it), the app version, platform, operating system version, device model (e.g. "Pixel 7") and your phone's language.
• These events are processed on our own server. When you use Viyu signed in, these events and the channel or campaign you installed the app from (e.g. Google Ads, Google Play, Apple Ads campaign codes) are associated with your account.
• Some of them (first open, first-run start and finish, goal created, sign-up and sign-in, Premium screen viewed, trial and purchase) go to Google Analytics for Firebase, and crash reports (stack trace, device model, operating system, app version) to Firebase Crashlytics. Your Viyu account number may be set as a pseudonymous ID; your name and e-mail are never sent. On Android, Firebase reads the Google advertising ID only for ad conversion measurement (which Google Ads campaign brought installs that reach these steps); ad personalisation signals are turned off. On iPhone no advertising identifier (IDFA) is read and no tracking permission is asked.
• To measure our Instagram and Facebook ads, some events (the app opening and the install, first-run finish, sign-up, first alarm follow, goal created, Premium screen viewed; App Store and Google Play purchases and trials) go to Meta Platforms Ireland Ltd. through the Meta software in the app. Your Viyu account number, name, e-mail, destination and documents are never sent. On Android, Meta reads the Google advertising ID for ad measurement; on iPhone no advertising identifier (IDFA) is read and no tracking permission is asked (Meta measures installs with Apple's SKAdNetwork). Nothing is sent to Meta from phones set to a European Economic Area, UK or Swiss region.
• Document contents, passport and ID numbers, names, e-mail addresses, location and anything you type never go into these events.
• The legal basis, including the link to your account, is legitimate interest (KVKK Art. 5/2-f); no separate explicit consent is asked. It is on by default; turn it off in Profile › Privacy & data › Usage statistics (there even without an account). Once off, no usage events or crash reports go from this phone to Viyu, Firebase or Meta, events waiting to be sent are dropped and our server removes the link between the install source and your account. Details: Consents §5.

Only with your explicit consent

• What you type to the assistant or for a letter draft: see §5.
• Community contributions: appointment observations you report to the slot radar (application center, visa type, date seen, waiting time).
• Türkiye's Route board: identity-free rows for the stops on your route (country, city, month, companions, intent, region).
• Your consents for commercial messages (offer notifications, campaign e-mails).

Purchases

• The plan you bought, start and end dates, renewal status, store transaction ID. We never see your card or payment details; Apple or Google takes the payment.

Support and feedback

• Messages you send us, your "This is wrong" reports and, when you report an AI answer, that question and answer.

Security logs

• IP address, date and time, requested address and result code. Request bodies, document text and chat text are never logged.
• Error logs: when something goes wrong in the app, the screen name, error code and a short description (without personal information), the app version and platform, kept for 30 days; to keep the service working (legitimate interest).

On the website

• No cookies, no advertising or analytics tools. What you enter into the calculators stays in your browser.
• If you join the waitlist, we process your e-mail address, language, optional destination, campaign codes and consent record.

3. What stays only on your phone

The following never reach our servers and are never sent to AI:

• Documents you add: their photos, PDFs, text and every detail read from them (amounts, account numbers and addresses included).
• Your name and your family members' names.
• IBANs, account numbers and addresses.
• Your vault key (in your phone's secure key store).

Because we hold no copy of your documents, we can't restore them if you lose your phone or delete the app. You can export any document to your own files at any time.

4. Why we process it

• To give you a personal plan, checklist, timeline and reminders for your stage, and to keep your Day Ledger and travel log.
• To open your account, verify sign-in and protect your account.
• To measure, at campaign level, how many installs our ads and promotions bring.
• To understand how the app is used through pseudonymous statistics (linked to your account and install source if you are signed in), fix crashes and measure which of our ad campaigns (Google Ads, Instagram and Facebook) bring installs that reach key steps (legitimate interest; can be turned off).
• To unlock the plan you bought and manage your subscription.
• With your consent: to run the assistant, take your community contributions and send commercial messages.
• To prevent abuse, fix errors, meet our legal obligations and protect our rights.

The legal basis for each purpose is listed in the Privacy Notice (KVKK).

5. AI

• The assistant works only with your explicit consent. Without it nothing is sent to AI; your checklist, vault, Day Ledger, travel log and reminders keep working, on paid plans too.
• What for: only two features use AI: the assistant (answers your visa and travel questions, explains rules) and letter drafts (cover letter, employer letter). Rules, dates and sources come from Viyu's verified rule base, not from AI.
• Provider: DeepSeek. Its servers are in the People's Republic of China.
• Sent: the question you type, the latest messages of the same chat (at most 12) and the short note you add for a letter; only these basics of your plan: destination country, visa type, travel date range by month, your stage and your experience level; the public rule-base records relevant to the question.
• Never sent: your documents and their content, your and your family members' names, passport and national ID numbers, IBANs, account and card numbers, addresses, phone numbers, e-mail addresses, income and balance amounts. The rest of your profile (province, birth year, work, social-security and income details, passport, visa and refusal history, family details, document types and dates) is not sent either.
• Two gates: names are replaced with labels before your message leaves your phone. Before anything goes to the provider, our server scans it again for patterns such as ID numbers, passport numbers, IBANs and card numbers; if it finds one, nothing is sent and you're asked to remove the number and ask again.
• The provider may retain this data and use it to improve its service under its own terms. So please don't type ID, health or criminal record details into the assistant.
• Our servers don't store your questions, the assistant's answers or letter drafts; only a content-free usage record (feature, duration, result) is kept.
• AI answers can be wrong. Every answer comes labelled Certain, Likely or Uncertain, with its source; the consulate decides. Long-press an answer to report it as wrong or inappropriate.
• Withdraw your consent anytime in Profile → Privacy & data; nothing new is sent to the provider after that.

More: How we use AI · Consent text: Consents.

6. Who we share it with

We never sell your data or share it for ad personalisation. To run the service we work only with the providers below, each receiving the minimum it needs.

• Notifications never carry sensitive details: a lock-screen message may say "Your bank statement is over 30 days old", never an amount, number or name. Most reminders are created locally on your phone.
• Apple and Google also process data under their own privacy policies for sign-in and payments. Meta keeps the ad measurement data it receives under its own privacy policy.
• We share data with authorities or courts only when legally required, and only what is required.
• Every provider above, including the third-party AI service DeepSeek, is bound by contract (the KVKK standard contractual clauses for transfers abroad) to protect your data with the same or an equal level of protection as this policy.
• Transfers abroad follow Article 9 of the KVKK; details in the Privacy Notice (KVKK).

7. How long we keep it

When a period ends, data is deleted, destroyed or anonymised. This runs at least every 6 months; ours runs daily.

8. Security

• Every connection between the app and our servers is encrypted (TLS). Sensitive fields such as your e-mail address are additionally encrypted field by field on the server.
• Our servers and backups are in Türkiye. Backups contain no documents.
• Logs never contain request bodies, document text, chat text or names.
• Our staff can't see your documents, because they are not on our servers.
• If a data breach happens, we notify the Personal Data Protection Board within 72 hours and tell you without delay, in plain language.

9. Your rights and choices

• Consents: turn each one on or off with a single tap in Profile → Privacy & data. All are off by default; none is a condition of the service.
• Usage statistics: rest on legitimate interest rather than consent and are on by default; turn them off with a single tap on the same screen (your right to object).
• Correction: edit your profile in the app. See, correct or delete what the assistant remembers about you in Profile.
• Download your data: Profile → Privacy & data → Download my data, or write to viyu@neuros.com.tr; we send it within 30 days.
• Delete your account: see Delete account.
• Your rights under Article 11 of the KVKK and how to apply: Privacy Notice (KVKK).

10. Children

Viyu is for people aged 18 and over. A minor traveller's preparation is managed in a parent's account, as a family member (relationship and birth year only); children don't have their own accounts.

11. Changes

If we change this policy we publish the current version here and in the app, and announce important changes in the app before they take effect. If a consent text changes, the feature that depends on it pauses until you accept the new text.

12. Contact

viyu@neuros.com.tr · Data controller details in §1.