Soyum Privacy Policy

Data we collect on the website

• If you join the waitlist: your email address, language, the page version you signed up on, and which version of the consent text you agreed to and when.
• Anonymous visit statistics: a random session id, the page version shown (A/B test) and the experiment it belongs to, language, ad campaign parameters (utm_*) and an approximate country derived from your IP address.
• Visits made through our own test links (?v=qa or ?qa=1) are flagged as test traffic and excluded from the statistics.
• To prevent abuse, your IP address is kept only as a keyed HMAC hash (it cannot be reversed without our secret key) for at most 24 hours; raw IP addresses are not stored in our database. Our hosting provider may keep technical server logs.
• We use one first-party cookie (90 days) to remember which page version you saw, and session storage that is cleared when you close the tab.

Data processed in the app

• An anonymous user id, device and app information, in-app usage events and crash reports.
• Subscription and purchase status (payments are processed by Apple or Google; we never see your card details).

Purposes and legal bases

• Waitlist and launch notification: your consent, given by ticking the consent box (you can withdraw it at any time).
• Providing the Service, usage limits and subscriptions: performance of a contract.
• Security, abuse prevention and basic anonymous measurement: legitimate interests.
• Ad measurement with the Meta Pixel: only your consent given in the cookie banner.

Waitlist emails and unsubscribing

After you sign up we send you a confirmation email (at most one per 24 hours); you receive launch news only after you confirm your address with its link. We use your email address only to send news about the launch of Soyum. Every email contains an unsubscribe link. You can also unsubscribe on our unsubscribe page (https://soyum.4ourstack.com/en/unsubscribe/) or by writing to support@4ourstack.com. Your address is deleted immediately when you unsubscribe.

For recipients in Turkey, launch news emails may count as commercial electronic messages under Law No. 6563; your approval is collected for this purpose and, where the law requires it, registered in the Message Management System (İYS). You can refuse further emails at any time via the link in every email (or through İYS where applicable).

Service providers on the website

• Vercel Inc.: website hosting and delivery
• Supabase Inc.: database for the waitlist and anonymous visit statistics
• Resend: sending the waitlist confirmation and launch emails

Service providers in the app

• PostHog Inc.: product analytics, only if you opt in
• Functional Software Inc. (Sentry): crash and error reports
• RevenueCat Inc.: subscription and purchase status

International transfers

Some of the service providers listed above may process data outside Turkey and the European Economic Area. Transfers rely on appropriate safeguards such as standard contractual clauses under the GDPR and Article 9 of Turkish Law No. 6698 (KVKK), or your explicit consent.

Retention

• Waitlist email addresses: deleted 12 months after the product launches, or 24 months after you signed up if the product never launches — and immediately when you unsubscribe. If you do not confirm your address with the link in our confirmation email, it is deleted 30 days after sign-up.
• Anonymous visit statistics: 24 months.
• Abuse-prevention IP hashes: 24 hours. They are keyed HMAC values that cannot be reversed without our secret key.
• App data: the app does not create an account for you on our servers. Your settings and progress stay on your device until you delete them in the app or uninstall it.

Deleting your data

You can delete your data in the app (Settings → "Delete my data"), leave the waitlist with the unsubscribe link, or ask us by email. Step-by-step instructions: https://soyum.4ourstack.com/en/delete/

Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and to withdraw consent. Contact support@4ourstack.com. You may also lodge a complaint with your local data protection authority (in Turkey: the Personal Data Protection Authority, KVKK).

Age limit

The Service is intended for users aged 13 and over. We do not knowingly collect data from children under 13.

Changes and contact

We may update this policy; the current version is always on this page. Questions: support@4ourstack.com.