Privacy Policy

This policy explains how your personal data is processed when you use the TheNext.Place website (thenext.place), web app (app.thenext.place) and mobile apps (the "Service"). It is based on Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data controller and contact

Data controller: TheNext.Place. For any questions and requests: [email protected]

2. Data we process

• Account details: name, email address, username, date of birth (to confirm you are 18+), an irreversible hash of your password (the password itself is never stored), interests and language preference.
• Sign in with Google: if you use "Continue with Google", Google only sends us your name, email address, whether the email is verified, your profile photo and a unique ID for your Google account. We do not access your Google password, contacts, calendar or any other Google data. We use this information only to create your account, sign you in and show it on your profile; we do not use it for advertising, sell it or share it with third parties. Our use of Google data complies with the Google API Services User Data Policy, including the Limited Use requirements.
• Content: routes, plans, RSVP answers (Going / Maybe / Not going), messages, comments and things you save.
• Approximate location (Free Roam): location is used only when you start Free Roam and grant permission, for the duration you choose. The precise location your device sends is converted in server memory to a cell of about 1 km; your precise coordinates are never written to the database or logs and are never shown to others. Other users only see the approximate area and distance ranges such as "<1 km / ≈2 km". You can stop sharing at any time; it ends automatically when the time is up.
• Stays and reservations: when you book, your name, contact details, stay dates and payment status are shared with the property. Card details are processed by the payment provider and are not stored by us.
• Technical data: IP address, browser/device information, session key and security logs.

3. Purposes and legal grounds

• Creating your account, signing you in and providing the Service — performance of a contract (KVKK art. 5/2-c).
• Sharing your approximate location in Free Roam — your explicit consent (KVKK art. 5/1), which you can withdraw at any time.
• Security, abuse prevention and legal obligations — legitimate interest and legal obligation (art. 5/2-ç, f).
• Passing your reservation to the property — performance of a contract.

4. Sharing and transfer

We do not sell your data. We only share it with providers needed to run the Service: hosting (Contabo, EU), content delivery and security (Cloudflare), sign-in with Google (Google), and the property and payment provider you book with. International transfers follow KVKK art. 9. Data may be shared with authorities where required by law.

5. Retention period

Account data is kept as long as your account stays open. You can delete your account in the app via Profile → Delete account or by writing to us; after deletion, data is deleted or anonymised within 30 days, except where the law requires us to keep it. Free Roam approximate location records become inactive when sharing ends and are deleted shortly after. Session keys expire after 30 days.

6. Cookies and local storage

We use essential cookies and browser local storage to keep you signed in and remember your preferences (language, currency). We do not use advertising or third-party tracking cookies.

7. Security

Connections are encrypted with HTTPS, passwords are stored with strong hashing algorithms, and access is restricted by authorisation.

8. Children

The Service is for users aged 18 and over. We delete accounts we learn belong to anyone under 18.

9. Your rights

Under KVKK art. 11 you have the right to learn whether your data is processed, request information, have it corrected or deleted, object to processing, learn who it was transferred to and claim compensation for damages. You can also remove Sign in with Google from your Google account's third-party access settings. Send requests to [email protected]; we reply within 30 days at the latest. You also have the right to complain to the Turkish Personal Data Protection Board.

10. Changes

We may update this policy; we will announce important changes in the app or by email. The current version is always on this page.

---

Other texts: Privacy Policy · Terms of Use · KVKK Lighting Text