Privacy policy
Last updated September 23, 2026 · Also available in Türkçe
JustUs is a private diary for two people. This page explains, in plain words, what we keep and why.
Who we are
The JustUs app and the justus.tr website are operated by Hubmira Bilişim, the data controller of your personal data under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR).
This policy covers the JustUs mobile app (iOS and Android) and this website. Questions: info@justus.tr.
What we collect
Account details: your e-mail address, display name, optional profile photo and a one-way hash of your password (we never store the password itself). If you sign in with Apple or Google, the account identifier and e-mail address they share with us (including Apple’s “Hide My Email” address).
What you share: your couple details (couple name, start date, couple photo), dates (title, description, date, category), photos and videos with their captions, journals, comments, reactions and ratings.
Location (optional): the place name and coordinates when you add a place to a date. In Settings → Privacy you can keep the exact location, only the city (about 11 km precision), or no location at all.
Device and session details: your device’s push token and platform, so we can send notifications; the device name and when each session started and was last active, so you can see your sessions; the app version.
Support requests: your message, the app version, the device model and, if you choose to attach one, a screenshot.
Technical logs: the IP address, time and errors of requests reaching our servers, used only for security and troubleshooting.
We don’t collect advertising identifiers, contacts, health data or background location. The app contains no advertising, analytics or tracking tools.
Device permissions
Each permission is requested only when you use the feature that needs it, and you can revoke it at any time in your device settings; the rest of the app keeps working without it.
Camera: to take a photo for a date. Photos: we only access the photos and videos you pick; saving a photo to your phone asks for permission to write to your gallery.
Location: used only while the app is open and you are adding a place to a date; never tracked in the background.
Notifications: only for the types you leave on in Settings → Notifications.
Face ID / fingerprint: for the app lock. Biometric checks happen entirely on your device; your biometric data never reaches us.
Screenshot detection: if a screenshot is taken while a journal is open, your partner is told. The screenshot itself is never captured or sent to us.
Why we use your data, and on what legal basis
To create your account and sign you in, show your story only to the two of you, send the notifications you turn on and answer your support requests: performance of our contract with you (KVKK art. 5/2-c; GDPR art. 6(1)(b)).
To keep the service secure and detect abuse and errors: our legitimate interests (KVKK art. 5/2-f; GDPR art. 6(1)(f)).
To meet our legal obligations and lawful requests from authorities: KVKK art. 5/2-ç; GDPR art. 6(1)(c).
We don’t use your data for automated decision-making or profiling.
International transfers
When you use notifications (Google, Apple), Apple or Google sign-in, or map features, the related data may be processed on those companies’ servers outside Türkiye. These transfers rely on the safeguards in KVKK art. 9 (standard contracts) and, for the GDPR, on adequacy decisions or standard contractual clauses, and are limited to what the feature needs.
How long we keep it
Your account details and content are kept while your account is open.
If you end your relationship, your shared story (dates, photos, videos, journals, comments, reactions, ratings) is permanently deleted for both of you; your accounts remain.
If you delete your account, your account and shared story are permanently deleted 30 days after the request. Deleted data is removed from backups within a further 30 days at most.
Technical logs are kept for at most 90 days. Support requests are deleted together with your account.
If a legal obligation requires us to keep something longer, we keep only that, only for that period and only for that purpose.
How we protect it
All traffic between the app and our servers is encrypted (HTTPS/TLS). Passwords are stored as one-way hashes; session keys are kept in your device’s secure storage.
Your photos and videos are never at a public address; they are served only to the members of your couple, through signed links that expire shortly.
Our team sees only account metadata (such as sign-up date and account status) in the admin panel. Your private content (journal text, photos, comments) can be accessed only in response to your own complaint or support request, with the reason recorded.
Deleting your account and data
In the app: Settings → Your data → Delete account. Before deleting, you can download everything with “Download our story” in the same section.
Without the app: e-mail info@justus.tr from the address registered to your account, with the subject “Account deletion request”. Once we have verified it is you, we process the request within 30 days at most.
What is deleted: your account details, profile photo, device and session records, support requests and all content in your couple’s shared story. For 30 days after the request your couple is read-only and you can change your mind; after that the deletion is permanent and cannot be undone.
You can also have specific data deleted without deleting your account: delete photos, dates and comments one by one in the app, and turn off location saving in Settings → Privacy.
Your rights
Under KVKK art. 11 you have the right to learn whether your personal data is processed and to request information about it; to learn the purpose of processing and whether it is used accordingly; to know the third parties it is transferred to; to have it corrected, deleted or destroyed and to have those third parties notified; to object to an outcome against you arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing.
If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction, objection and data portability. You can also take a copy of your data at any time with “Download our story” in the app.
Send your requests to info@justus.tr; we answer free of charge within 30 days at most. You may also complain to the Turkish Personal Data Protection Authority or to the data protection authority where you live.
Age limit
JustUs is for people aged 18 and over. We don’t knowingly collect data from anyone under 18; if we find such an account, we delete it and its data.
Changes to this policy
When we update this policy we change the “Last updated” date on this page. We announce significant changes in the app or by e-mail before they take effect.
Contact
Data controller: Hubmira Bilişim (https://hubmirabilisim.com). For anything about privacy or your data: info@justus.tr.