← Kordy

Privacy Policy

Last updated: November 7, 2026

This policy explains what information the Kordy app for iPhone and iPad and the website kordyapp.com handle, why, who else receives it and what you can do about it.

Kordy is made by Faruk Mert Kapar, an independent developer in Türkiye, who is responsible for the data described here ("we" in this policy). You can reach us at farukmertkapar@gmail.com.

Your account

Kordy needs an account so your trips sync between your devices and with the people you plan with. You sign in with Apple, with Google or with an email address and password. We receive your name and email address from the sign-in you choose; with Sign in with Apple you can hide your email, and we then receive Apple's relay address.

Your profile holds your name and, if you add them, a profile photo, a phone number and an IBAN (so the people in your trips know where to send money). It also records whether you have Kordy Pro.

Your trips and what you put in them

Everything you add to a trip is stored on our servers so it can sync: the trip's name, dates and destinations, plans, flights and stays, expenses and payments, checklists, chat messages (including voice messages, polls and locations you send), photos, likes and comments in Memories, and documents you attach. Places you pin on the Pins map and guides you publish are stored the same way. Kordy keeps a copy on your device so trips you've opened work offline.

Who can see what

• The members of a trip see everything in that trip, including your name, photo and IBAN if you added it, the expenses you add and the messages you send. If you turn on live location sharing for a trip, its members see where you are until you stop.
• People you send a read-only trip link to can open the sections you chose to share for 30 days after the link is created, once they sign in to Kordy.
• Other Kordy users can find you by name or by your exact email address when adding friends; they see your name, photo and a partly hidden email. They can also see your public profile (name and photo), the guides you publish (with your name and photo) and the ratings, comments and photos you add to places in guides.
• We don't publish trips on the web. Invite and friend links contain an identifier and, for friend links, your display name.

Permissions on your device

Kordy asks for each permission only when a feature needs it, and you can change your mind in iOS Settings.

• Location (only while you use the app): to show places near you on the map, plan around where you are and, if you turn it on, share your live location with a trip's members.
• Camera and photos: to scan receipts, take or choose photos for your profile, trip covers and Memories, and to save the Memory Book video to your Photos. Receipts are read on your device.
• Microphone: to record voice messages in a trip's chat.
• Calendars: to add your plans to Apple Calendar. Kordy can add events but cannot read your calendar.
• Notifications: for trip and plan reminders, chat messages, invites and flight updates.
• Apple Health (Kordy Pro, only if you allow it): Kordy reads your steps, walking and running distance, flights climbed and active energy for the dates of a trip to show its walking summary. It never writes to Apple Health. The daily totals for those dates are stored with your account so the summary is the same on your devices; the rest of your Health data never leaves your device. Health data is not used for advertising or analytics.

Features that send data to other services

• Import from email: emails you forward to your personal Kordy address are received by our email provider, Postmark. To find the reservations in them, the email's content may be sent to OpenAI. We keep the sender, the subject, a short excerpt (up to 1,500 characters) and the reservations found.
• Import from Link and Add to Kordy: when you share a web page, a Google Maps list or an Instagram or TikTok post with Kordy, our server fetches that page and may send its text to OpenAI and Google Places to find the places in it.
• Flights: the flight number and date are sent to flight data providers (Flightradar24, AeroDataBox and Aviationstack) to get schedules and live status.
• Maps, places and weather: searches and map positions go to Google (Maps, Places and Routes), Apple (Maps and WeatherKit) and, for Smart Discovery suggestions, Tripadvisor.
• Exchange rates: your device asks Frankfurter for daily exchange rates; that service sees your device's IP address and the currencies requested.
• Link previews: when you add a link, your device loads a preview of that page from its website.

Analytics and diagnostics

To understand which features are used and to fix problems, the app sends usage events to Google Analytics for Firebase and to TelemetryDeck: which screens and features are used, app version, device model, iOS version and language, together with your account ID (TelemetryDeck receives it in hashed form). Before an event is sent, anything you typed — titles, messages, notes, places, searches — is removed, and identifiers of trips and items are replaced by a code. Crash reports and error details go to Firebase Crashlytics without your account ID.

Kordy shows no ads and doesn't track you across other companies' apps and websites. It doesn't use the advertising identifier.

Purchases

Kordy Pro and the group pass are bought through the App Store; Apple handles payment and we never see your card. RevenueCat manages the purchases for us and receives your account ID and the App Store purchase records. If you installed Kordy after tapping an Apple Ads ad, RevenueCat also receives Apple's attribution information about that ad campaign.

Push notifications

To send notifications, we store a notification token from Firebase Cloud Messaging, an identifier Apple gives this app on your device, your device's language and the app version with your account. Chat notifications show the beginning of the message (up to 140 characters).

This website

kordyapp.com is hosted on Firebase Hosting (Google), which processes your IP address and the request to deliver the page. The website sets no cookies, stores nothing in your browser and shows no ads.

To count visits, each page sends TelemetryDeck an anonymous event with the page, the site's language, the site you came from and any campaign tags in the link, your browser's language and time zone, a rough screen size (phone, tablet or desktop), the kind of device (iOS, Android, Mac, Windows or other) and, when you tap an App Store button or a link to the pricing or comparison pages, which one. A random identifier is made for each page view and never saved, so visits cannot be linked to each other or to you.

Where your data is stored, and who processes it

Kordy runs on Google Firebase: the database is in the European Union (multi-region eur3) and the server functions run in Belgium. The services listed in this policy process data on our behalf under their data-processing terms: Google (Firebase, Analytics, Crashlytics, Maps Platform, Sign-In), Apple, RevenueCat, TelemetryDeck, OpenAI, Postmark, Tripadvisor, Flightradar24, AeroDataBox, Aviationstack and Frankfurter. Some of them, including Google, OpenAI, RevenueCat and Postmark, may process data in the United States.

Why we process your data

• To provide Kordy to you (your account, trips, sync and the features you use): to perform our contract with you.
• Permissions such as location, camera, microphone, calendars, notifications and Apple Health: your consent, which you can withdraw in iOS Settings.
• Analytics, diagnostics, security and preventing abuse: our legitimate interest in keeping Kordy working and improving it.
• Purchase records: our legal obligations.

How long we keep it

• Your account and your trips are kept while your account exists.
• Activity records, invites and rate-limit records are deleted automatically after 90 days. Read-only trip links stop working after 30 days.
• Imported emails are kept until you delete them or your account.
• Analytics and crash data are kept for the retention period of the services above and then deleted by them.

Deleting your account

You can delete your account in the app: open Profile and tap Delete account. This deletes your account and profile, your friends and friend requests, your invites and your membership of trips; a trip in which you were the only member is deleted, and a trip you created that has other members passes to one of them. What you added to trips that other people are still in, such as expenses and messages, stays in those trips so their history and balances add up, and guides and comments you published stay visible.

Some records are not yet removed automatically: your device registrations for notifications, Apple Health totals, saved flights and places, imported emails, the activity notifications shown in the app, your profile photo, and your records with RevenueCat and the analytics services. Email us from the address on your account and we will delete them within 30 days. The page Delete your account explains the steps.

Your rights

Depending on where you live — for example under the EU General Data Protection Regulation or Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK) — you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format; you can withdraw your consent at any time. Email farukmertkapar@gmail.com and we will answer within 30 days. You can also complain to your data protection authority; in Türkiye, that is the Personal Data Protection Authority (KVKK).

Children

Kordy is not meant for children under 13, and we don't knowingly collect personal data from them. If you believe a child has given us personal data, email us and we will delete it.

Changes to this policy

If we change this policy, we will update this page and the "Last updated" date above, and tell you in the app if the change matters.

Contact

Faruk Mert Kapar, developer of Kordy, Türkiye. Questions? Email farukmertkapar@gmail.com.

Language: English Bahasa Indonesia Bahasa Melayu Čeština Dansk Deutsch Español Français Italiano Magyar Nederlands Norsk bokmål Polski Português (Brasil) Português (Portugal) Română Suomi Svenska Tiếng Việt Türkçe Ελληνικά Русский Українська العربية हिन्दी ไทย 日本語 한국어 简体中文 繁體中文