Privacy Policy

1. Who we are

1.1 MasjidMap (the "App") is provided by the individual developer who operates under the trade name Assistly AI ("Assistly AI", "we", "us" or "our"), based in Istanbul, Türkiye. We decide how and why your personal information is processed, which makes us the data controller under the EU and UK General Data Protection Regulation ("GDPR") and the veri sorumlusu under Türkiye's Law on the Protection of Personal Data No. 6698 ("KVKK").

1.2 This Privacy Policy applies to the App on Android and iOS and to the MasjidMap pages of our website at assistlyai.space/masjidmap (the "Website"), together the "Service". It also serves as our information notice (aydınlatma metni) under Article 10 of the KVKK.

1.3 For any question about this policy or your personal information, email karadumanburak000@gmail.com. We do not have a data protection officer, because the law does not require one for a service of our size, and you can write to us directly.

2. What we collect

We collect only what the Service needs to work. The table below lists every category, and the sections after it explain each one.

Guest account

2.1 The first time you open the App, it creates a guest account for your installation. The guest account is a random identifier with no name, email address or phone number attached. It lets the App talk to our servers securely and, if you later sign in, lets your account carry on without losing anything.

Location

2.2 If you allow it, the App reads your device's location while you are using the App, so it can centre the map on you, list nearby places and show how far away they are. The App never reads your location in the background. You can use MasjidMap without sharing your location by searching for a place or moving the map yourself.

2.3 To find places, the App sends our servers the coordinates of your position or of the area on screen. We use them to answer that request. We do not store them in your account, and we do not build a history of where you have been.

Searches, saved places and recent searches

2.4 When you type in the search box, the text you type and the area of the map you are looking at are sent to Google so that it can suggest matching places (see Section 6). The searches you open are kept in a recent searches list on your device, and so are the places you save. Neither list is sent to us. Both are removed when you clear them in the App or uninstall it.

Signing in with Google or Apple

2.5 You need to sign in only to contribute. When you sign in, Google or Apple confirms your identity to us and sends us the details listed in the table above. We use your email address to recognise your account and to answer you if you write to us. We do not send you marketing email.

2.6 With Sign in with Apple you can choose to hide your email address. Apple then gives us a random relay address that forwards to you, and we never learn your real address. We never receive your Google or Apple password.

Contributions

2.7 When you add a place, we store what you entered in the form, the location you pinned, the facilities you selected, any photo you attached, and the date, linked to your user ID. When you confirm or report a place, we store that action, any reason you give, the date and your user ID.

2.8 Photos. The App only receives the photo you pick. It does not get access to the rest of your photo library or to your camera. Before a photo is uploaded, the App resizes it and saves it as a new image file, which leaves out the information cameras embed in photos, such as the GPS position where the photo was taken and the camera model. Please do not upload photos in which people can be recognised.

2.9 Information about other people. A place's phone number or website should be the place's own public contact details. Do not enter a private person's phone number or other personal information.

Technical data

2.10 Like any online service, our servers and our hosting provider automatically record technical information about each request, such as your IP address, the type of device and operating system, the app version and the time. We use it to keep the Service running, to find and fix errors and to protect it against abuse.

What we do not collect

2.11 We do not access your contacts, camera, microphone or files. We do not use your advertising identifier. We do not use analytics, advertising or crash-reporting tools, and we do not track you across other apps or websites.

3. Information that may reveal religious belief

3.1 MasjidMap helps people find masjids and prayer rooms. We never ask about your religion, and the App works the same for everyone. Data protection law treats information that reveals religious belief as a special category of personal information, so we handle anything that could suggest it with extra care:

• we do not try to work out your religion or beliefs, and we do not create profiles of users;
• your saved places and recent searches stay on your device;
• your location is used to answer a request, not stored as a history; and
• your contributions are shown publicly without your name, email address or picture.

3.2 To the extent that your contributions, kept with your account, could be taken to reveal a religious belief, we process them on the basis of your explicit consent, which you give when you sign in and choose to contribute. You can withdraw that consent at any time by deleting your account (see Section 10). Withdrawing consent does not affect processing that took place before.

4. How we use your information and our legal bases

We use personal information only for the purposes below. For each one we rely on a legal basis under the GDPR (Article 6, and Article 9 for the information in Section 3) and under the KVKK (Articles 5 and 6).

4.1 Where we rely on legitimate interests, we have balanced them against your rights, and you may object at any time (see Section 11). We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

5. What other people can see

5.1 MasjidMap is a shared map. The places, photos and facilities you add, and the number of confirmations a place has, are visible to everyone who uses the Service, and anyone may view, save or share them. Our technical interface also exposes the random user ID stored with each contribution. That ID does not contain your name or email address, but it shows that several contributions came from the same account.

5.2 Your name, email address, profile picture and sign-in provider are never shown to other users. Reports you send are visible only to you and to us.

5.3 Once something is public, other people may have copied it before it is changed or deleted, and we cannot control those copies.

6. Who we share information with

6.1 We do not sell your personal information, we do not share it for advertising, and we do not give it to data brokers. We share it only with the service providers below, who help us run the Service, and in the situations described in Clause 6.3.

6.2 Google Maps Platform. MasjidMap uses Google Maps Platform services, including the Places API and, on Android, the Maps SDK. Information that Google receives through these services is processed under the Google Privacy Policy, which is incorporated into this policy by reference. Apple's processing is described in the Apple Privacy Policy.

6.3 We may also disclose personal information:

• when you ask us to, for example when you tap Directions, Call or Website, which opens Google Maps, Apple Maps, your phone app or your browser with the place's details. What happens there is governed by those providers' own policies;
• when the law requires it, in response to a valid request from a court or public authority, or to protect the rights, safety or property of our users, the public or us; and
• to a buyer or successor if the Service is sold or transferred, in which case this policy, or a policy at least as protective, will continue to apply to your information, and we will tell you before it changes.

7. International transfers

7.1 We are based in Türkiye, our servers are in the European Union, and Google and Apple may process information in the United States and other countries. When personal information moves between countries, we rely on the safeguards the law provides: adequacy decisions, including the EU-U.S. Data Privacy Framework for providers certified under it, the European Commission's Standard Contractual Clauses, and, for transfers from Türkiye, the standard contracts published by the Turkish Personal Data Protection Authority under Article 9 of the KVKK. You can ask us for a copy of the relevant safeguards.

8. How long we keep information

8.1 Deleted information may remain for a limited time in encrypted backups until they are overwritten in the normal cycle. We may keep information for longer where the law requires it, or where it is needed to deal with a legal claim or an abuse investigation, and only for as long as that need lasts.

9. How we protect information

9.1 Information travels between the App and our servers over encrypted connections (HTTPS). Access to our database is controlled by rules that let each account change only its own contributions, and only a small number of administrators can see account details. We keep the information we hold to a minimum.

9.2 No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify the competent authority and, where the law requires it, you, within the time the law sets.

10. Your choices

• Location. You can allow, limit to approximate location, or withdraw location access at any time in your device settings. The map still works without it.
• No account. You can browse and search without ever signing in.
• On-device data. You can clear recent searches and remove saved places in the App.
• A single contribution. To remove a photo or another contribution of yours, email us with the place's name and location.
• Your account. You can delete your account in the App or by email. Our Delete your account page explains how and what happens.

11. Your rights

11.1 Depending on where you live, you have some or all of these rights over your personal information: to be informed about how it is processed; to access it and receive a copy; to have it corrected; to have it deleted; to restrict how it is used; to object to processing based on legitimate interests; to receive it in a portable format; to withdraw consent at any time; and not to be subject to decisions based solely on automated processing.

11.2 Under the KVKK, Article 11 also gives you the right to learn whether your personal information is processed, the purpose and whether it is used for that purpose, to know the third parties in Türkiye or abroad to whom it is transferred, to ask that corrections or deletions be passed on to them, to object to an outcome against you that results exclusively from automated analysis, and to claim compensation for damage caused by unlawful processing.

11.3 How to make a request. Email karadumanburak000@gmail.com from the email address linked to your account, or tell us that address, so that we can find your account. We may ask for more information to confirm it is you. We answer free of charge, within 30 days. Under the KVKK you may also send a request in writing or by other methods set by the Personal Data Protection Board.

11.4 Complaints. If you are not satisfied with our answer, you can complain to a data protection authority: in Türkiye, the Personal Data Protection Board (kvkk.gov.tr); in the European Economic Area, the authority of the country where you live or work; in the United Kingdom, the Information Commissioner's Office. We would appreciate the chance to deal with your concern first.

11.5 United States residents. We do not sell personal information, share it for cross-context behavioural advertising, or use sensitive personal information to infer characteristics about you. Depending on your state, you may have the right to know, access, correct and delete your personal information and to appeal our decision on your request. Make requests as described in Clause 11.3. We will not discriminate against you for exercising your rights.

12. Children

12.1 The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you are under 16, or under the age of digital consent where you live, please ask a parent or guardian before you sign in. If you believe a child under 13 has given us personal information, contact us and we will delete it.

13. Our website

13.1 The MasjidMap pages of our website do not use cookies, analytics or advertising tools, and they load their fonts and images from our own server. The server that hosts the Website records technical data about visits, as described in Clause 2.10.

14. Changes to this policy

14.1 We may update this policy when the Service or the law changes. We will post the new version on this page and change the "Last updated" date. If a change materially affects how we use your personal information, we will tell you in the App before it takes effect and, where the law requires it, ask for your consent.

15. Contact us

15.1 Assistly AI, Istanbul, Türkiye. Email: karadumanburak000@gmail.com. Please put "MasjidMap privacy" in the subject line.