Privacy Policy
This policy explains what personal data RotaMuse processes when you use the mobile app or rotamuse.com, why it is processed, and the rights you have.
RotaMuse is operated from Türkiye. The Turkish text of this policy is the binding version; this translation is provided for convenience. See Gizlilik Politikası.
1. Data controller
The data controller for personal data processed through RotaMuse is Mesut Beysülen.
- [email protected]
- Web
- mesutbeysulen.com
2. You do not create an account
RotaMuse is used anonymously. No registration, name, phone number or e-mail address is required to use the app. Identifying information is processed only when you submit a form: a partner application, feedback, or a deletion request.
3. Data that is processed
| Data | When | Why |
|---|---|---|
| A randomly generated device key, consent type, whether consent was given, the policy version, source and date | When you complete the consent screen on first launch | Recording and evidencing consent |
| Route preferences: area, duration, budget band, interest and the stops you pick | When you generate alternatives or save a route | Producing a route suggestion and storing a saved route |
| Name, e-mail, phone, business or guide name and your message | When you submit a partner application | Assessing the application and replying to you |
| Category, message and optionally your e-mail address | When you send feedback | Reviewing and, where needed, answering it |
| Your e-mail address and any reason you give | When you request deletion | Handling the request and recording its outcome |
| IP address, request time and technical request logs | Each time the app contacts our server | Security, debugging and abuse prevention |
The device key is a random value generated by the app so that consents can be recorded without identifying you. It is not derived from your name, phone number or a device identifier.
4. Data that stays on your phone
- Places you mark as favourites
- A route draft you have not saved
- Your language and theme preference
- An offline cache so content is readable without a connection
- The device key used in consent records
Deleting the app removes all of this from your device.
5. Location
Granting location permission is optional and the app works fully without it. When granted, your location is used on your device only, to show where you are on the map. It is not sent to our servers or to any third party.
Walking routes are calculated from the fixed centre point of the area, not from your position.
6. Service providers and international transfers
| Provider | Data transferred | Location |
|---|---|---|
| Hetzner Online GmbH (hosting) | All data processed on the application server | Germany |
| Mapbox (maps and walking directions) | Coordinates of the places shown on the map and the route start point | United States |
| OpenAI (AI route suggestions) | Publicly available information about the places you selected, plus your duration, budget band and interest | United States |
Your name, e-mail address, phone number, location and device key are never sent to the AI service. What is sent is limited to place information that is already public in the app and the preferences you chose.
7. Purposes and legal bases
- Providing the service (routes, maps, content) — necessary for performance of the service you requested.
- Handling applications, feedback and requests — legal obligation and your own request.
- Security and abuse prevention — legitimate interest.
- Marketing messages — only with your explicit consent. Declining does not restrict your use of the app, and you can withdraw consent at any time.
8. Retention
| Record | Kept for |
|---|---|
| Consent records | 10 years after the consent ceases to apply |
| Saved routes | 12 months after the last update |
| Partner applications | 2 years after the application is concluded |
| Feedback | 2 years |
| Deletion requests | 5 years after the request is concluded |
| Server and access logs | 90 days |
9. Your rights
Under Turkish Law No. 6698 on the Protection of Personal Data you may ask whether your data is processed, request information about it, learn the purpose of processing and whether it is used accordingly, learn the third parties it is transferred to, have inaccurate data corrected, request erasure or destruction, ask that such actions be notified to recipients, object to a result produced solely by automated analysis, and claim compensation for damage caused by unlawful processing.
If you are in the European Union, you may also have rights of access, rectification, erasure, restriction, portability and objection under the GDPR.
10. Making a request
Write to [email protected] or use the data deletion form. Requests are answered within 30 days.
You can review and change your consents in the app under Settings › Privacy.
11. Cookies
rotamuse.com uses no advertising or analytics cookies and does not track visitors.
12. Children
RotaMuse is not directed at children under 13 and does not knowingly collect their personal data.
13. Security
Data is stored on servers in Germany, encrypted in transit over HTTPS, and access to the administration panel is authenticated. Content changes made in the panel are logged.
14. Changes
If this policy changes, the new version is published here with a new version number. Where a change affects your consent, you will be asked again in the app.