Privacy Policy
Last updated: 29 September 2026
In short: uPick does not track you, show ads, or sell your data. Everything we collect is needed for the app to work. Delete your account in the app and your data goes with it.
1. Who collects it
uPick is built and operated by Taha Yasin Çimen. "We" in this policy means him. Contact: cimentahayasin@gmail.com
2. What we collect
| Data | Why | Required |
|---|---|---|
| Email address | Create an account, sign in, reset password | Yes, if you create an account |
| Name and profile photo | So friends recognise you | No |
| Location | Sort nearby events by distance | No — without it you pick a city |
| Friendships and plans | Show who you are going with | Yes, if you use the feature |
| Messages | Deliver your chat to the other person | Yes, if you write one |
| Push token | Send notifications to your device | No — not collected without permission |
| Crash reports | Find out why the app closed | Automatic |
Using the app without an account
You can browse Discover, Events and event details without signing up. No personal data is collected then; if you grant location permission, your coordinates are sent to find nearby events and are not stored.
What we never collect
- Advertising identifier (IDFA) — there are no ads
- Your contacts, calendar, or photo library (other than the single file you pick as an avatar)
- Your browsing outside the app
- Payment or card details — there are no in-app purchases
3. About location
Location is read only while the app is open and only with your permission. There is no background tracking. Coordinates are sent to rank events but not stored; they are used for that one query. Your friends cannot see your location.
4. Where data lives
Data is stored on Supabase (PostgreSQL database and file storage). Access is restricted by rules written at the database level: each user can only read their own data and what has been shared with them.
5. Who we share it with
| Service | Purpose | What is sent |
|---|---|---|
| Supabase | Database, accounts, files | All of the data above |
| Apple | Sign in with Apple, push delivery | Authentication data, notification text |
| Sign in with Google, maps | Authentication data | |
| Google Gemini | The "What should I do?" assistant | Only the text you type to the bot. No name, email or location. |
| Expo | Push notification infrastructure | Device push token and notification text |
| Sentry | Crash reporting | Stack trace, device model, app version, user id |
Nobody else. Data is never sold, used for advertising, or added to marketing lists. We would only disclose it if legally compelled (for example a court order).
6. How long we keep it
As long as your account exists. Delete the account and the data goes too (see section 7). Crash reports expire after 90 days.
7. Deleting your account
In the app: Profile → Settings → Delete account. This cannot be undone and permanently removes your account, profile, avatar, friendships, plans, event attendance, saved events and the messages you sent.
Deletion is immediate and done by you; you do not need to ask us. If you cannot reach the app, write to cimentahayasin@gmail.com.
8. Your rights
Under GDPR and Turkish KVKK you may access, correct, delete and export your data. You can correct it yourself (Profile → Edit profile) and delete it yourself. For a copy of your data, write to the support address; we answer within 30 days.
9. Children
uPick is not directed at children under 13 and we do not knowingly collect their data. Because the app includes user-to-user messaging, it is rated 12+.
10. Changes
If this policy changes, the date on this page is updated. We will tell you in the app if the change is significant.