Privacy Policy

1. Who we are & scope

This Privacy Policy is issued by Seyhun Akyurek (“we”, “us”, “our”), individual developer and AI Architect based in Dubai, United Arab Emirates. It describes how personal data connected with our offerings is handled. Storage and processing sit with the platforms that collect it: form and email submissions are stored by YouForm, agent-chat conversations on /contact are processed and stored by Jotform, and mobile App data, distribution, and billing are managed by the Apple App Store and Google Play Store. We do not operate our own user database, and we do not use any collected data for marketing, advertising, profiling, or sale:

• Websites — seyhunakyurek.com and sub-paths (/apps, /offers, /demos, /contact, /developers,/projects, APIs under /api/*)
• AI tools & agents — interactive demos, assistants and automations delivered via the site, embedded widgets or standalone web apps (each an “AI Tool”)
• Consultancy & implementation services — AI readiness audits, advisory, architecture and delivery engagements, workshops and related deliverables (each a “Service”)
• Mobile & desktop applications — all apps published by Seyhun Akyurek on Apple App Store and Google Play (each an “App”), including free, paid and demo builds
• Support channels — contact form, email, scheduling links and any channel linked from the above

Together, “Products & Services” means websites, AI Tools, Services and Apps. If an App or AI Tool has supplemental in-product disclosures, those disclosures supplement — not replace — this policy. Where there is a conflict, this policy prevails unless the in-product notice is more restrictive.

2. Summary — plain language

3. What we collect

Personal data connected with our offerings falls in three categories. It is stored by the provider that collects it — not in a database we operate:

A. Data you provide directly

• Contact & inquiry data — name, email, company, role, message content submitted via the YouForm embed on /contact, stored by YouForm.
• Agent-chat data — messages you send to the Digital Twin chat on /contact, processed and stored by Jotform under Jotform's own terms.
• Scheduling data — if you book a call (e.g. Cal.com), name, email, timezone and meeting notes, stored by the scheduling provider.
• App inputs — content you enter, upload or generate inside an App (prompts, files, preferences). This stays on your device or is handled under the store's terms; any server component is listed in the App's store privacy details.
• Support data — messages you send reporting bugs or requesting help, including attachments you choose to share. Form-based messages are stored by YouForm; App-related reports are handled through the store channels.

B. Data collected automatically

• Device & technical data — device model, OS version, app version, language, time zone, IP address (truncated where possible), user-agent.
• Usage & diagnostics — screens viewed, features used, crash logs, performance metrics, error traces. In Apps this is anonymized or pseudonymized where feasible.
• Website analytics — page views, referrers, outbound clicks and CTA interactions, collected via privacy-respecting analytics with IP anonymization.
• Logs — request path, timestamp and edge logs retained briefly by our hosting provider (Vercel) for security and reliability.

C. Data we do NOT collect via Apps (unless explicitly disclosed in the App listing)

• Precise location (GPS) — not collected unless an App feature requires it and you grant permission.
• Contacts, photos/media, microphone, health or financial data — accessed only if the feature requires it and you grant permission; see §6.
• Advertising ID (IDFA / GAID) for cross-app tracking — we do not track you across apps or sites.

Data minimization: Every App requests the minimum permissions and data needed for its purpose. Features that can run on-device do so; server calls are made only when needed and are documented in the App’s store listing.

4. How we use data

• Provide, operate and improve the website and Apps (including testing, debugging and support).
• Respond to inquiries, schedule discovery calls and deliver requested audits / ROI maps.
• Authenticate requests and enforce rate limits (see /developers).
• Monitor stability and abuse (crash reporting, anomaly detection, performance analytics).
• Send transactional replies only. We do not send marketing emails, and we do not use collected data for marketing, advertising, profiling, or sale.
• Comply with legal obligations and enforce our Terms of Use.

We do not use personal data for automated decision-making with legal effects, nor to build profiles for third-party advertising.

5. Legal bases

Where GDPR / UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) applies, personal data connected with our offerings is processed under: consent (you asked to be contacted or granted a permission), contract (to provide the App or service you requested), legitimate interests (security, product improvement, analytics — balanced against your rights), and legal obligation (where the law requires retention or disclosure). You may withdraw consent at any time via the provider that holds the data (YouForm for form/email data; Apple/Google and your device settings for Apps) without affecting prior processing.

6. App permissions & device access

Apps only request device permissions when a feature cannot work without them. The system permission dialog is shown first; access is granted only after you tap Allow, and you can revoke it at any time in iOS Settings → Privacy & Security or Android Settings → Apps → Permissions.

If you deny a permission, the related feature will be unavailable or degraded, but the rest of the App continues to work. The relevant store listing and in-app prompt describe exactly which permission each build requests.

7. Third-party services & SDKs

We use only processors necessary to run the site and Apps. Each acts under its own terms and privacy policy:

• Hosting & edge — Vercel (site, APIs, edge logs).
• App distribution & billing — Apple App Store and Google Play Store (downloads, updates, in-app purchases, subscriptions, refunds — see §9).
• Forms & scheduling — YouForm (contact form), Cal.com (call booking) when you interact with those widgets.
• Agent chat — Jotform (Digital Twin chat on /contact). Conversations are processed and stored by Jotform under Jotform's GDPR compliance terms.
• Analytics & diagnostics — privacy-respecting web analytics (IP anonymized) and, in Apps where disclosed, crash/performance SDKs (e.g. Apple Crash Reports, Google Firebase Crashlytics / Analytics) limited to anonymized/pseudonymized metrics.
• Infrastructure — cloud providers used to host App back-ends where an App requires a server component (listed per-App in its store privacy details).

No personal data is shared with advertisers, and none is used for marketing, advertising, profiling, or sale. Providers process data under their own terms and privacy policies — access, correction, deletion, and export requests go directly to the provider that holds the data (YouForm for form/email data; Jotform for agent-chat data; Apple or Google for App data). Their policies govern the cookies/SDKs they set.

8. How we share data

We do not sell personal data. Data is held by the providers above; it is disclosed only:

• to comply with UAE law, court orders or regulatory requests; or
• to protect our rights, safety or property, or that of our users.

Aggregated or de-identified analytics (no personal data) may be used to describe product performance publicly (e.g., “fix X reduced crashes by Y%”).

9. Purchases, subscriptions & store payments

10. Retention

• Contact / support messages stored by YouForm: retained under YouForm's terms; deletion or export via YouForm.
• App inputs you save: until you delete them in-App, via your device settings, or via the store.
• Analytics & aggregated metrics: aggregated and retained 26 months, then deleted or anonymized.
• Server / edge logs: 30–90 days, then purged automatically.
• Backups: follow the same windows and are overwritten on rotation.

Where the law requires longer retention (e.g., tax or compliance records), we retain the minimum required and restrict access.

11. International transfers

We are based in the UAE, and data may be processed in the UAE, the EU, the United States and other locations where our providers operate. Where GDPR or PDPL cross-border rules apply, we rely on adequacy decisions, Standard Contractual Clauses or explicit consent as appropriate, and we apply the same safeguards regardless of location.

12. Security

We use HTTPS, HSTS, encryption in transit and at rest where applicable, least-privilege access, and Vercel-managed infrastructure. API endpoints enforce rate limiting (see /developers and the RateLimit headers in openapi.json) and structured JSON error responses. No method is 100% secure; if you believe an App or our site has a vulnerability, report it through the App's store listing feedback channel so it can be addressed.

13. Your rights

Under the UAE PDPL, GDPR (where applicable), and similar regimes, you have the right to request:

• access to and a copy of your personal data;
• correction of inaccurate or incomplete data;
• deletion (“right to be forgotten”) where there is no overriding legal basis to retain it;
• restriction or objection to certain processing;
• data portability (machine-readable export) where feasible; and
• withdrawal of consent at any time.

Data submitted via our contact form is collected and stored by YouForm. The form on /contact is a YouForm embed: what you type there is transmitted to, stored, and processed by YouForm (servers in Ireland/EU, encrypted in transit and at rest) under YouForm's own privacy terms. For access, correction, deletion, export, or objection requests concerning that form data, consult YouForm's GDPR page and exercise your rights directly with YouForm — YouForm is the party holding and solely responsible for operating on that stored form data: help.youform.com/gdpr-3pfig.

Agent-chat conversations are processed and stored by Jotform. The Digital Twin chat on /contact is a Jotform agent embed: what you type there is transmitted to, stored, and processed by Jotform under Jotform's own terms. For access, correction, deletion, export, or objection requests concerning that chat data, consult Jotform's GDPR page and exercise your rights directly with Jotform — Jotform is the party holding and solely responsible for operating on that stored chat data: jotform.com/gdpr-compliance.

For email addresses and data collected via forms, exercise your rights directly with YouForm (see above). For agent-chat data, exercise your rights directly with Jotform (see above). For mobile Apps, exercise your rights via the Apple App Store and Google Play Store (including in-App deletion where offered and uninstalling the App to stop further collection). You also have the right to lodge a complaint with your local data protection authority or the UAE Data Office.

California / EEA / UK note: We do not sell or share personal data for cross-context behavioral advertising, and we do not use sensitive personal data for inferential purposes.

14. Cookies & similar storage

• Site: strictly necessary storage (localStorage) for UI preferences (e.g., theme). No advertising cookies are set by this site.
• Embedded widgets: YouForm and Cal.com may set their own cookies when you interact with them — governed by their policies.
• Apps: Apps do not use web cookies; they may use on-device storage (UserDefaults / SharedPreferences, Keychain / EncryptedSharedPreferences) strictly to keep you signed in, cache preferences and store content you save.

You can clear storage in your browser or reset an App’s data by removing and reinstalling it.

15. Children

Our site and Apps are not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided data, submit a deletion request to the provider that holds it (YouForm for form submissions; Apple/Google for Apps) for deletion under their terms. Apps rated for younger audiences remain general-audience products and do not knowingly collect children’s personal data.

16. Do Not Track & choices

We honor requests to limit collection: use your browser’s “Do Not Track” or “Global Privacy Control”, decline optional permissions in Apps, opt out of analytics where offered, or object via the provider that holds the data (YouForm, Apple, or Google). There is no way to use an App without the store provider knowing you downloaded it — that processing is governed by Apple’s and Google’s own policies.

17. Changes to this policy

Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notice on the site or in-App, and by updating the store privacy listings for affected Apps. Continued use after changes means you accept the updated policy. The current version published here supersedes all previous versions.

18. Contact & where to exercise your rights

We do not hold your data or process deletion requests ourselves — exercise your rights directly with the provider that holds the data:

If you are in the EU/EEA or UK, you may also contact your local supervisory authority. App Store billing disputes should be directed to Apple or Google as described in §9.