Valiseio Privacy Policy

Effective Date: September 7, 2026
Last Updated: September 7, 2026

Valiseio ("Valiseio," "we," "us," or "our") is operated by Mustafa Güller, based in Türkiye.

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you use the Valiseio mobile application, website, and related services (collectively, the "Services").

By using Valiseio, you acknowledge the practices described in this Privacy Policy.

For privacy-related questions or requests, you can contact us at:

Email: support@valiseio.com
Address: Mehmet Taşlı Sokak 33/A, Akkent, Çal, 20794, Türkiye

1. Information We Collect

The information we collect depends on the features you use.

1.1 Account and Profile Information

When you create and maintain a Valiseio account, we may collect information including:

We do not collect your phone number as part of the current account system.

Passwords are managed through our authentication provider, Supabase Auth. Valiseio does not store your raw password.

You may also choose to sign in using Google or Sign in with Apple. When you use these services, the relevant authentication provider processes information in accordance with its own privacy practices.

2. Community and User-Generated Content

Valiseio contains social and community features.

Depending on how you use the Services, we may process content including:

Content you choose to publish in public or community areas may be visible to other Valiseio users.

You should avoid publishing personal information that you do not want other users to see.

3. Direct Messages

Valiseio provides direct messaging functionality.

Direct messages are designed to use end-to-end encryption. Our server stores encrypted message content rather than readable plaintext message content.

Certain technical information associated with messaging, such as sender/recipient identifiers, timestamps, delivery state, or information required to operate the messaging functionality, may still be processed as necessary to provide the service.

Real-time messaging is provided through Supabase Realtime.

4. Travel and Saved Information

When you use Valiseio's travel features, we may store information such as:

This information is used to provide travel planning, personalization, saving, and trip-management functionality.

5. AI Travel Planner

Valiseio includes an AI-powered travel planning feature.

The AI Travel Planner currently uses Anthropic's Claude API.

When you request a travel plan, information sent to the AI service may include:

We do not intentionally send your:

to Anthropic as part of the AI Planner request.

AI Planner prompts are not persistently stored by Valiseio after the request is processed.

Valiseio does not persistently store AI Planner prompts in its primary database. Anthropic may retain and process API data in accordance with its applicable commercial terms, data-processing commitments, and privacy practices.

An AI-generated plan is stored in your Valiseio account only if you choose to save it as a Trip.

Requests are sent through a Valiseio-controlled Supabase Edge Function. The Anthropic API credential is stored server-side and is not embedded in the mobile application.

Based on the commercial API configuration used by Valiseio, customer API content is not used for model training without permission. Anthropic may process API requests for service operation, safety, abuse prevention, and other purposes under its applicable commercial terms and privacy practices.

6. AI and Content Reporting

Users can report certain content and AI-generated results that they believe are inappropriate, unsafe, abusive, misleading, or otherwise violate Valiseio's rules.

Reports may apply to:

Reports are made available to authorized Valiseio administrators through our moderation system and may also be delivered to our moderation or support email inbox.

Authorized administrators may review reports and take actions such as:

7. Automated Content Filtering

To help maintain a safe community, Valiseio uses internally developed rule-based content filtering.

Our filtering system may identify patterns associated with categories such as:

The filtering system currently operates using rule-based pattern and text matching rather than a third-party AI moderation service.

Automated filtering may not identify every violation. Users can also report content for human review.

8. Location Information

Valiseio does not currently request or collect precise or approximate device location.

In particular, the current version of Valiseio does not collect:

Cities and destinations are selected or entered manually by users.

If you provide a city, destination, event location, or other place as part of your profile or content, that information is treated as information you voluntarily submit and is different from GPS/device-location collection.

9. Photos and Device Permissions

Valiseio may request access to your Photo Library so that you can select and upload profile photos.

The current iOS version does not require access to:

Valiseio only accesses device capabilities that are required for the features you choose to use.

10. Subscription and Purchase Information

Valiseio may offer paid subscriptions and premium features.

Payments on iOS are processed through Apple's App Store / StoreKit, and subscription entitlement management is provided through RevenueCat.

Valiseio does not receive or store:

We may maintain information needed to determine whether an account has premium access and information related to referral or creator commissions.

RevenueCat may process information such as:

Apple processes payments under Apple's own privacy terms.

11. Technical and Server Information

Our primary backend infrastructure is provided by Supabase.

Valiseio uses Supabase for services including:

Our primary Supabase database is hosted in the Ireland / EU (eu-west-1) region.

When you communicate with our systems, infrastructure providers may automatically process technical request information, such as:

Valiseio does not use IP addresses as a profile field or for advertising purposes.

Supabase platform logs are currently retained for approximately 7 days.

12. Analytics, Advertising, and Tracking

The current version of Valiseio does not use advertising or behavioral analytics SDKs.

We currently do not use:

Valiseio does not currently access:

We do not currently use your information to track you across apps or websites owned by other companies for targeted advertising.

Apple AppTrackingTransparency is therefore not used in the current version of the application.

13. Push Notifications

The current version of Valiseio does not operate an OS-level push notification service.

We do not currently collect APNs or Firebase Cloud Messaging push tokens.

Valiseio may display notifications inside the application, such as notifications relating to:

These in-app notifications should not be confused with operating-system push notifications.

14. Third-Party Service Providers

We use service providers to operate Valiseio.

Supabase

Used for authentication, database, storage, realtime communication, Edge Functions, and backend infrastructure. Supabase processes Valiseio account and application data on our behalf. Our primary Supabase project is hosted in Ireland.

Anthropic

Used to provide the AI Travel Planner. Anthropic receives travel-planning parameters necessary to generate requested AI results.

RevenueCat

Used to manage subscription entitlements and purchase verification.

Apple

Used for Sign in with Apple, App Store distribution, and StoreKit subscription processing.

Google

Used for Google Sign-In, Google Places-related venue data, and map-related platform functionality where applicable. Google Places requests used to maintain Valiseio venue information do not include Valiseio user PII. They use generic place/category and city-level queries.

Booking.com / RapidAPI

Used to obtain certain accommodation pricing information. These requests operate using city or accommodation-related data and are not intended to transmit Valiseio account PII.

Resend

Used for certain transactional email functions, such as waitlist or service-related email communications. Where Resend is used, an email address may be provided for delivery purposes.

We require service providers to process information for legitimate service purposes and expect them to protect personal information in accordance with their contractual and legal obligations.

15. Google Places and Map Information

Valiseio uses Google Places data to provide information about cities, venues, and places.

Google Places requests used for venue-data maintenance are performed through backend or offline processes using generic queries rather than user-specific requests.

Examples may include queries such as a place category within a city and country.

These requests do not intentionally include:

Place information may be cached or refreshed as part of Valiseio's venue database in accordance with the applicable Google Maps Platform requirements.

16. How We Use Information

We use information collected through Valiseio to:

We do not use personal information for cross-app behavioral advertising in the current version of Valiseio.

17. Legal Bases for Processing

Where applicable data protection laws require a legal basis, we may process information based on one or more of the following:

Performance of a Contract

We process information necessary to provide the Services you request, including account management, trip planning, social features, messaging, and subscriptions.

Consent

Where legally required, we rely on your consent for particular processing activities or device permissions. You may withdraw consent where applicable, although doing so may affect features that require that information.

Legitimate Interests

We may process information when reasonably necessary to protect users, prevent abuse, moderate content, secure our systems, maintain and improve our Services, and respond to support requests, provided those interests are not overridden by applicable privacy rights.

Legal Obligations

We may process or retain information where necessary to comply with applicable law, accounting requirements, valid legal requests, dispute resolution, or enforcement obligations.

18. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Account and Profile Information

Retained while your account remains active and deleted when you delete your account, subject to backup retention and legally required records.

User-Generated Content

Generally retained until the relevant content or account is deleted, unless retention is required for safety, dispute, enforcement, or legal purposes.

Saved Cities, Places, and Trips

Retained until you remove them or delete your account.

AI Planner Prompts

Not persistently stored in Valiseio's primary database. Anthropic may retain and process API data in accordance with its applicable commercial terms, data-processing commitments, and privacy practices.

Saved AI Plans

Retained when you intentionally save them as part of a Trip and removed when the associated Trip or account is deleted.

Server Logs

Supabase platform logs are currently retained for approximately 7 days.

Backups

Supabase automatic database backups are currently retained for 7 days. As a result, information deleted from our active production systems may remain in secure backup copies for up to approximately 7 additional days before being removed through normal backup rotation.

Financial and Referral Records

Certain subscription, commission, accounting, fraud-prevention, tax, or transaction-related records may be retained for longer where reasonably necessary or legally required.

19. Account and Data Deletion

You can request deletion of your Valiseio account directly from the application:

Settings → Delete Account

When account deletion is completed, Valiseio deletes the primary account and associated data from active systems, including, where applicable:

For users who signed in with Apple, the account-deletion process also attempts to revoke the associated Sign in with Apple authorization token.

Deleted information may remain within encrypted backup systems for up to approximately 7 days, after which it is removed through normal backup rotation.

Some limited information may be retained where necessary to comply with law, resolve disputes, prevent fraud or abuse, or enforce agreements.

See Account & Data Deletion for step-by-step instructions.

20. Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, or destruction.

Current safeguards include:

Access to Valiseio's production Supabase project is currently restricted to authorized administrative access.

No security system can guarantee absolute security, and users should use appropriate precautions when sharing information online.

21. International Data Transfers

Valiseio is operated from Türkiye and is available to users in multiple countries.

Our primary application database is hosted in Ireland, and some service providers may process information in other jurisdictions.

Where required by applicable law, we take reasonable steps to use appropriate safeguards for international transfers of personal information.

22. Your Privacy Rights

Depending on where you live, applicable privacy laws may provide rights including the right to:

You can update certain profile information directly within the application.

You can delete your account through Settings → Delete Account.

For other privacy requests, contact support@valiseio.com.

We may need to verify your identity before completing certain requests.

23. Children and Minors

Valiseio is not intended to be used by individuals who are below the minimum age required under applicable law or our Terms of Use to independently use the Services.

If we learn that personal information has been collected from a person who is not legally permitted to use Valiseio without appropriate authorization, we may take steps to remove that information and terminate the relevant account.

Age requirements and eligibility rules will be further described in our Terms of Use.

24. Third-Party Links and Services

Valiseio may display links, venue information, accommodation information, maps, or other content provided by third parties.

If you leave Valiseio or interact directly with a third-party service, that third party's own terms and privacy practices may apply.

We are not responsible for independent privacy practices of third-party websites or services that we do not control.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Valiseio, new features, changes to service providers, changes to data practices, or legal and regulatory requirements.

When we make material changes, we may provide notice through the application, website, or another appropriate method.

The date at the top of this Privacy Policy indicates when it was last updated.

26. Contact Us

If you have questions, concerns, complaints, or requests relating to this Privacy Policy or your personal information, contact:

Valiseio
Operated by: Mustafa Güller
Email: support@valiseio.com
Address: Mehmet Taşlı Sokak 33/A, Akkent, Çal, 20794, Türkiye
Country: Türkiye