CappaGo · Privacy Policy

Last updated: 2026-11-02

This policy explains which data the CappaGo Cappadocia travel guide app processes and why. You do not need an account to use the app.

Who we are and contact

The app is provided by the developer publishing as CappaGo on Google Play. For any privacy question or request: [email protected]

Data that stays on your device

Your favourites, plans, meeting point, AI chat history (up to 40 messages), downloaded offline guides and photos, and your language, theme and notification preferences are stored only on your phone and are not sent to us. You can delete all of it with Settings → Delete saved data or by uninstalling the app.

Location

Location permission is optional and used only while the app is open; no location is collected in the background. On your device it is used to sort nearby places, show you on the map and display your coordinates on the emergency help screen. When you calculate a route, the start and destination are sent through the CappaGo server to Google Routes and are not stored on the server. Your location is never sent to the AI guide.

AI guide and translator

These features are optional and intended for users aged 18 or over. To generate an answer, your message, up to 8 earlier messages, short excerpts of your previous questions and your language are sent to Google Gemini through the CappaGo server or Firebase AI Logic. The translator sends only the text you enter and the target language. Conversations are not stored on our server; do not enter sensitive personal information. If you report an AI answer, only that answer, your reason and language are kept for review for up to 30 days. To apply the daily limit (15 AI guide messages per day), the app sends a random installation ID; the server keeps only a keyed hash of it and of your IP address with a daily counter, deleted after two days. The trip planner sends only your choices (length, base town, interests, pace, transport) and language; the resulting plan is stored only on your phone. For menu and sign translation the photo is read only on your phone and never uploaded; only the recognised text and your language are sent. For price conversion your phone downloads exchange rates directly from the Central Bank of the Republic of Türkiye (TCMB).

Voice translation (microphone)

Microphone permission is optional and used only while you use the voice translation button. Your phone's speech recognition service (for example Google) turns your speech into text; CappaGo receives only the recognised text, sends it for translation like the text translator, and does not record or store audio.

Balloon notifications

Balloon notifications are off by default; the notification permission is requested only when you turn on a balloon notification in Settings, and you can turn them off at any time. If you turn on balloon notifications, your device's notification token (Firebase Cloud Messaging), your language and the notification types you choose are saved on our server; the token is stored encrypted. The record is deleted when you turn notifications off or delete saved data, and records not renewed for 90 days are deleted automatically. Notifications do not use your location. The official flight status is read from the public SHM Kapadokya page.

Feedback

When you send feedback, your message, the chosen category, your optional e-mail address, the app version and language are forwarded to the developer by e-mail. They are not stored on the server and are kept in the developer's mailbox until the matter is resolved.

Advertising

The app is free and shows Google AdMob ads. AdMob may use your advertising ID, IP address and device information to serve and measure ads and to prevent fraud. Where required (for example in the EU and UK), Google's consent form asks about personalised ads; you can change your choice under Settings → Ads. You can reset or delete your advertising ID in Android settings. On iPhone the advertising identifier (IDFA) is used only if you allow it when Apple asks about tracking; otherwise ads are shown without personalisation, and you can change this in iPhone Settings → Privacy & Security → Tracking. In some US states (for example California) you have the right to opt out of the sharing of your personal information for targeted advertising; you can do this under Settings → Ad privacy options. We do not sell your personal information for money.

Tours and bookings

Booking links in the Tours section and on the balloon screen take you to partner websites such as GetYourGuide. Booking and payment happen entirely on that website under its own privacy policy; CappaGo receives no payment or personal details. The links contain a partner code, and if you book, CappaGo may earn a commission; this does not change the price you pay. To see which categories are of interest, the server keeps only an anonymous counter (day, category, level and app language); nothing that identifies you is stored.

Crash reports

If the app crashes, the error trace, device model, operating system and app version are sent to Firebase Crashlytics. These reports contain no location, chat text or personal content and are used only to fix bugs.

Service providers

The app uses Google Maps, Routes and Weather (maps, routes and weather information), Google Gemini and Firebase (AI, notifications, crash reports), Google AdMob and Google Play. These providers may process data under their own policies and on servers outside Turkey: https://policies.google.com/privacy

Server logs and security

Our server does not log request contents, locations or IP addresses. To prevent abuse, a temporary hash derived from the IP address is kept in memory only. All connections are encrypted with HTTPS. Usage and notification delivery records are deleted after 30 days. Requests from the app are verified with Firebase App Check (Google Play Integrity) so the service can only be used by the genuine CappaGo app. This check does not identify you. To count how many devices use the app, an irreversible hash of the app's random installation ID is kept per day and deleted after 31 days; it does not identify you. If you installed the app from a partner's QR code, the first launch reports only which partner link you came from (the Google Play install referrer). For the total number of installations, only the day that same hash was first seen is also kept. This daily count also keeps the language selected in the app, so we can see which languages are used.

Children

The app is not directed at children under 13 and does not knowingly collect their data. AI features are for users aged 18 or over.

Your rights

Under laws such as the GDPR and Turkey's KVKK you have the right to access, correct and delete your data and to object to its processing. You can delete on-device data yourself; for other requests write to [email protected] and we will reply within 30 days.

Changes

We may update this policy. The current version is published in the app and on the web page with its last-updated date.