Privacy Policy
Last updated: August 23, 2026
Sipatra is an outdoor social network for hiking, cycling, camping and vanlife. This policy explains what personal data we collect, why we collect it, and the rights you have over it. It applies to the Sipatra mobile apps and the API at sipatra.com.
Data we collect
Account data. Your email address, username, display name, and the profile details you choose to add (bio, avatar, interests, gear).
Content you create. Posts, photos, stories, comments, reviews and direct messages. Direct messages are stored on our servers and are not end-to-end encrypted.
Location data. GPS tracks recorded during your activities, waypoints, and places you review. We treat location as sensitive data: recording requires your separate, explicit consent, which you can withdraw at any time. Raw GPS tracks are private by default. If you share an activity, Privacy Zones you define are applied on our servers before anything is shown to others, so masked areas never leave our infrastructure.
Technical data. Sign-in sessions and device push tokens, used only to operate the service and keep your account secure.
We do not use cookies for tracking. The service consists of a mobile app and an API; the only cookies involved are the ones strictly required for the sign-in pages to work.
Why we process it
We process account and content data to provide the service you signed up for. We process location data solely on the basis of your explicit consent, to record and display your activities. We do not sell personal data and we do not use it for third-party advertising.
Where your data lives
Your data is stored on our own self-hosted servers in the European Union. The backend does not depend on third-party data platforms.
Third-party processors
We use a small number of external services strictly as delivery channels:
- Google and Apple sign-in — optional, only if you choose to sign in with them; we receive your verified email address from the provider.
- Firebase Cloud Messaging / Apple Push Notification service — deliver push notifications; payloads carry references, not your personal content or location.
- Resend — sends transactional email such as verification and password-reset messages.
None of these services store your Sipatra content or GPS tracks.
Retention and deletion
You can deactivate your account from the app; deactivation hides your content but keeps your data until you return or request deletion. You can delete your account from the app: after a 30-day grace period during which you may cancel, your profile is anonymised and your GPS tracks and media are permanently deleted. If you withdraw location consent, recording stops and previously recorded tracks are deleted.
Your rights
Under the Turkish Personal Data Protection Law (KVKK) and the GDPR you have the right to access, correct, delete and export your data, and to object to processing. The app provides self-service data export, profile editing, consent withdrawal and account deletion. For anything else, contact us and we will respond within the statutory deadlines.
Contact
For privacy questions or requests, email privacy@sipatra.com.