EvdeDoy Privacy Policy

Last updated: 5 October 2026

This is an English translation of the Turkish Gizlilik Politikası. If the two differ, the Turkish version prevails.

EvdeDoy ("the app") is a mobile app that compares the cost of ordering food with cooking at home, and builds weekly or monthly meal plans and grocery lists for you. This policy explains what personal data we process when you use the app and evdedoy.com, why, who we share it with, how long we keep it, and your rights. It is prepared under Turkey's Personal Data Protection Law No. 6698 ("KVKK").

1. Data controller

EvdeDoy is currently run by an individual, not a company. Turkish data protection law (KVKK Art. 3) defines the data controller as a "natural or legal person". Company details will be added here once a company is formed.

2. Data we process

To use the app you create an account with Apple (on iPhone), with Google, or with your e-mail (no password; we e-mail you a one-time code each time you sign in).

a) Account — your e-mail address. If you sign in with Apple or Google: the e-mail address, (if shared) your name and your account ID that the company sends us. If you hide your e-mail with Apple, we receive Apple's relay address. We never see your Apple or Google password.

b) Profile and preferences — household size, cooking skill, kitchen tools, maximum cooking time, cooking days, which meals you want planned (breakfast, lunch, dinner), plan preference, ingredients you don't want, why you use the app and what makes cooking hard for you, city, and, if you enter them, your grocery budget and monthly spending on food delivery.

c) Body details and calorie diary (entirely optional) — the app includes a calorie and macro counter. You do not have to use it: it is not asked during sign-up, and meal plans and grocery lists work without it. Only if you enter them on the Profile screen do we process your height, weight, age, sex, activity level and goal (lose, maintain or gain weight), together with a food diary: meals you cook are added automatically, and you can add what you ate out by hand. Each entry holds the dish name, portion and the calculated calories, protein, carbohydrate and fat. These are used only to estimate your daily calorie needs and to add up what you ate. They are not a diagnosis and not medical advice. They are never shared and never used for advertising. You can remove them by clearing the fields, deleting entries or deleting your account.

d) In-app records — your meal plans and grocery lists and what you checked off; your "cooked / ordered / skipped" records and the savings calculated from them; delivery amounts you enter; pantry items and quantities; favourite recipes; your savings-jar goal name and amount (this is not a real account — the app never holds or moves money); your evening reminder setting.

e) Usage measurement — events such as "plan created" or "shopping completed", with device type, app version and a session ID. If a screen crashes, the screen name and error message. These are linked to your account; when you delete the account the link is removed.

f) Technical logs — your IP address, time and request type are recorded in our infrastructure provider's security logs.

g) evdedoy.com (only if you use the form) — your e-mail (if given), the monthly delivery amount you entered and the calculated home cost, the referring link, and the steps you took on the page.

Stored only on your device: small items such as whether you have seen the intro and your sign-in session token (in browser storage on the web). We use no advertising or tracking cookies.

Receipt photos never leave your phone. In the pantry you can use "add from receipt" to scan a grocery receipt. Your phone asks for camera or photo permission for this. The text is read by the phone itself (Apple's on-device text recognition on iPhone, Google's on Android). **We do not upload, store or send the photo anywhere.** Only the lines you confirm reach us: which ingredient was added to your pantry and how much. The store name, date, receipt number and payment details on the receipt are not recorded.

We do not collect: payment details (the app is free), location (this version of the app does not read your location), photos or camera images (permission is requested but the image stays on your phone — see above), contacts, microphone, advertising ID, or medical information such as allergies, illnesses or medication. There are no ads and no third-party tracking or analytics SDKs.

3. Why we process it

To build your meal plan and grocery list; to estimate the approximate cost difference between cooking and ordering; to keep your pantry up to date; if you choose, to add items from a receipt you scan; if you choose, to estimate your daily calorie needs and add up what you ate; to recognise your account and send sign-in codes; to schedule your evening reminder if you turn it on; to find bugs and improve the app using aggregate numbers; to keep the service secure; and, if you left your e-mail on the website and consented, to tell you when the app launches.

4. Legal grounds (KVKK Art. 5)

• Performance of a contract (5/2-c): account, profile, preferences, in-app records.
• Legitimate interest (5/2-f): usage measurement, error and technical logs, the delivery amount entered on the website.
• Legal obligation (5/2-ç): lawful requests from competent authorities.
• Explicit consent (5/1, 6/2): in two places. (1) Your body details and calorie diary (2/c): you are asked separately before filling these in; if you decline, the calorie counter stays off and the rest of the app works normally, and you can withdraw at any time by clearing the fields, which deletes your entries. (2) Launch-news e-mails to addresses left on the website; this is also consent to commercial electronic messages under Law No. 6563, withdrawable at any time.

The evening reminder is a local notification scheduled on your phone; nothing is sent from our servers.

5. Who receives your data

We do not sell your data or share it for advertising. Only these service providers process it on our behalf:

These transfers go abroad. Under KVKK Art. 9 they will be covered by the standard contracts published by the Turkish Personal Data Protection Board. The contracts are being signed with the providers; each is notified to the Authority within 5 business days of signature, and this section will be updated then. Data collected by Apple or Google when you download the app is governed by their own policies. Competent public authorities and courts may receive data where the law requires.

6. Retention

7. Your rights (KVKK Art. 11)

You may ask whether your data is processed and for information about it; learn the purpose and whether it is used accordingly; know the recipients in Turkey or abroad; ask for correction, deletion or destruction and for recipients to be notified; object to a result against you produced solely by automated analysis; and claim compensation for damage caused by unlawful processing.

Delete your account yourself: in the app, **the profile circle at the top right → Delete account (Hesabını sil)**. This is immediate and cannot be undone. Without the app, see Account deletion.

For other requests, write from your account e-mail to merhaba@evdedoy.com. We respond free of charge within 30 days. You may also complain to the Turkish Personal Data Protection Board.

8. Security

All connections use HTTPS. Database rules let each user read only their own records. We store no passwords. If a data breach occurs we will notify the Board and affected users as required by law.

9. Children

EvdeDoy is not directed at children and does not verify age. If you are under 18, use it with a parent's permission. If you think your child created an account without your knowledge, write to merhaba@evdedoy.com and we will delete the data.

10. Changes

We may update this policy. The current version is published at this address with its "last updated" date. We will also announce significant changes in the app.