Miyonk Privacy Policy

Last updated: 7 November 2026

1. Who we are

Miyonk is currently operated by an individual developer based in Turkey ("we", "us", "our"), named in section 13 (Contact us) at the end of this policy. If Miyonk is later transferred to a registered company, this policy will be updated to name that company as the data controller instead.

For any question about this policy or your personal data, contact us at:

privacy@miyonk.com

2. Scope

This Privacy Policy explains what personal data Miyonk collects when you use our mobile application (the "App"), why we collect it, how it is used and protected, and what rights you have over it. It applies to all users, worldwide.

Miyonk requires all users to be at least 18 years old. We do not knowingly collect personal data from anyone under 18. If we learn that someone under 18 has created an account, we will delete it.

3. Data we collect

3.1 Account and profile data

Email address and password (used to sign you in; your password is never stored in readable form)
If you sign in with Google or Apple instead: the email address that provider gives us (with Apple this can be a private relay address), and your account identifier at that provider. Google also sends the name and profile picture on your Google account; we discard them as they arrive and never store them.
Date of birth, which you enter once during sign-up. We use it only to confirm that you are 18 or older; it is stored separately from your public profile and is never shown to other users. Once saved it cannot be changed from within the App.
Username and a system-generated anonymous code (shown to other users before you choose to reveal your identity)
An anonymous display name that is generated for you and shown to people you message anonymously
Bio, tags/interests, and relationship preferences you add to your profile
The profile photo requested during account setup (it does not have to be a photo of you, and you can delete it later), plus additional photos and a voice introduction recording if you choose to add them
Gender, if you provide it. Like your date of birth, it is stored separately from your public profile and is never shown to other users.
An optional app-lock PIN you can set to protect the App on your device (stored only as an irreversible hash, never in plain text)
Your online/last-active status
Your display preferences, such as whether the counters on your profile are visible to other people, and your notification and read-receipt settings
Which version of our Community Guidelines you accepted, and when

3.2 Content you create

Messages you send and receive within the App, including text, photos and voice messages
Conversation metadata (who you're talking to, when a conversation started, its status, and when the last message was sent)
How you organise your conversations: which ones you pin, archive, lock, or give a custom label to
Your identity-reveal choices and requests within a conversation (i.e., whether and when you've agreed to share your real profile with a specific conversation partner)
Whether each message has been read. The person who sent it can see this as a read receipt, unless either of you has turned read receipts off in Settings, and it is never shown for a message request that has not been accepted.
Messages you delete. "Delete for me" hides a message on your side only; the other person still has it. "Delete for everyone" removes it for both of you (see Section 9 for the copy we keep).
Messages you send us from Settings ("Complaint, suggestion, feedback"): your text, the topics you choose, the App's version and platform, and technical details of your phone that help us find display problems — its model, operating-system version, screen size, text-size and bold-text settings, and the App's language. You can also attach one screenshot; before it leaves your phone it is converted to a plain image and its embedded details (such as the location a photo was taken) are removed. Only we can see these. The screenshot and the phone details are deleted 90 days after you send them, or within a few hours after you delete your account.

Photos and voice messages sent in conversations are deleted 7 days after they are sent. Only the file is deleted: the message stays in the conversation and is then shown as "Photo expired" or "Voice message expired". Text messages are not affected.

3.3 Stories

If you post a Story:

The photo you upload and its optional caption
The time it was posted and the time it expires
A record of which users viewed it and which users liked it, and the resulting view and like counts

Stories are public content: any adult user of the App can see a Story you post, whether or not you have any connection to them. Story authors are shown counts only — we deliberately never show you the identity of the people who viewed or liked your Story, and we never show your identity to a Story author when you view or like theirs.

Stories expire 24 hours after they are posted. After expiry a Story is removed from the App and its media file is deleted from our storage; the underlying record is retained for a limited period for safety and moderation purposes and then removed.

We also store which users you have muted (so their Stories stop appearing for you) and which users you follow. Your list of who you follow is used to build your own feed; we do not provide any screen that shows a user the list of people who follow them.

3.4 Safety data

Users you block
Reports you submit: the reason you selected, any additional details you write, whether you also chose to block that user, and — if you are reporting a Story — a copy of the reported Story's media reference so the report can still be reviewed after the Story expires
Evidence copied when a conversation is reported: at the moment someone reports a conversation, we copy the last 50 messages of that conversation, from both participants, into a separate record that only we can access: the text, the message type, the link to any photo or voice file, and when each message was sent. This lets us review the report even if messages are later deleted. The files themselves are not copied, so a photo or voice message still expires after 7 days. Only the conversation between the reporter and the reported person is copied, never any other conversation.
Reports submitted about your account by other users, and the moderation decisions that follow: restrictions placed on your account while a report is reviewed, yellow cards (with their expiry dates), and permanent closures
Requests to remove an intimate image shared without consent (Removing Intimate Images), including requests e-mailed by people without an account: the name, contact address, statement and image location given in the request, and what we did about it. We keep them as safety records, like reports.
Whether reports you submitted were upheld when reviewed. We use this only to award the Guardian badge; it is never shown to you or anyone else.
Limited counters we keep to prevent spam and abuse, such as how many new conversations you have started in a day and how many separate people have messaged you
Content screening: text you write in messages, Story captions, your username and your bio is checked on our server against a list of prohibited words before it is saved; text that matches is not saved or sent. Photos are checked on your own device by an image-recognition model before they are uploaded; a photo it flags is not uploaded, and the photo is never sent anywhere for this check. We do not keep a record of text or photos that were blocked.

3.5 Device data

A push-notification token for your device, the platform it runs on (Android or iOS) and your device's language, used only to deliver notifications to you in your language
Your device's time zone (for example "Europe/Istanbul"), used to decide when your day starts for daily limits, the Duel login bonus and the weekly and monthly leaderboards. A time zone is not your location.
The country of your app-store account (for example "TR"), read from Google Play or the App Store each time you open the App, or your phone's region setting if the store does not provide one. It is used only for the "Local" option on Discover, which shows people in your own country; other users cannot see it. It is not your location.
A device identifier, used for two things only: to keep accounts that have signed in on the same phone from earning points for each other (likes and messages between such accounts earn no SEP), and to stop a banned person from coming straight back on the same phone (see below). On Android this is the identifier the system gives the App for your device (it stays the same if you reinstall the App and changes after a factory reset); on iPhone it is a random identifier the App creates and keeps on your phone. We store only an irreversible fingerprint (hash) of it, never the identifier itself, and we never use it for advertising or share it with anyone. People who share a phone can use Miyonk normally. The one exception: when an account is permanently banned — or deleted while it is under a moderation restriction or has an active yellow card, which we treat the same way — we keep the fingerprints of the devices it used. A new account opened on such a device afterwards must wait 90 days, then gets one last chance with a lower daily limit on new chats for its first 30 days; if a second account from that device is banned, no further accounts can be opened on it. Accounts that already existed on the device before the ban are not affected.
Connection records: for every request the App makes to our servers, the IP address, the time, your account identifier (when you are logged in), the kind of request and the device/app identifier string your phone sends (user agent). We keep these records to meet our legal obligations as a hosting provider under Turkish Law No. 5651 and to protect the service against abuse and account takeover. They are kept in private storage that only we can access, are never shown to other users, and are disclosed only to competent authorities under a lawful request. We do not keep your city or postal code from these records.
Crash reports: if the App crashes or hits an unexpected error, a crash report is sent to Google Firebase Crashlytics (see Section 6). It contains the technical details of the error (where in the App's code it happened), your device model, operating-system version, the App's version, technical device state (such as free memory and disk space) and a random installation identifier created by Crashlytics. It does not contain your account identifier, username, email address or the content of your messages. We use crash reports only to find and fix errors.

3.6 Duel (the quiz game)

If you play Duel:

The matches you play: your opponent, the categories and questions, your answers, how long each answer took, the score, the result, the emoji reactions sent during the match, and any rematch or gift-round requests
Game invites you send or receive from a chat: who invited whom, in which conversation, which game, whether it used your plays as a gift, whether it was accepted, declined, withdrawn or went unanswered, and when. We use this to apply the invite limits (for example, after a declined invite you cannot invite the same person again until they invite you). Invites are deleted after 90 days, or straight away when either account is closed. An invite shows the other person the same identity you have in that chat: if you are anonymous there, they see only your nickname.
Whether you accept game invites at all, and whether you get a phone notification for them
Your points total, your daily login streak and the day you last collected the login bonus

Your points are public: your profile shows your Duel points (the points you won in matches) and, separately, the points you have earned in total from the daily login bonus. Spending points in the Store does not lower either number. Your Duel points also appear, together with your username and profile photo, on the leaderboard, which ranks users by the points they won in matches. Points from matches you played anonymously are included in these totals, but the leaderboard and your profile never say which matches your points came from or who your opponents were. In an anonymous match your opponent sees only your nickname; in an open match they see your username and can visit your profile.

Store. If you spend points in the Store, we keep which items you got, when, how many points each cost and, for time-limited items, when they expire. Your points balance is calculated from this; it is visible only to you. Spending points does not lower the public numbers described above.

Purchases. If you buy an item with money, the payment is handled by Google Play or the App Store; we never receive your card details. We keep the purchase token the store gives us, which item you bought and when, whether it was a test purchase, its status (for example, refunded), and what it added to your account (such as days of Premium or the frame you picked). We use this only to deliver the item, to remove it if the purchase is refunded, and to prevent fraud. Your purchases are never shown to other users, with one exception: if you have Premium, a Premium badge appears on your profile and your Discover card unless you hide it in the App's settings. It never appears in an anonymous conversation. These records are deleted when you delete your account; Google and Apple keep their own records of your payment under their own policies.

3.7 Badges and in-app notifications

Badges you earn (for Story likes, followers, time on Miyonk, and the Guardian badge), their level, and whether you chose to hide them. Visible badges appear on your profile and your Discover card; a badge never appears in an anonymous conversation.
The in-app notification list on your profile: a new badge, or a notice about a moderation decision on your account

3.8 Information we do not collect

We do not use advertising SDKs, third-party analytics/tracking libraries, or ad networks in Miyonk, and we do not sell your personal data to anyone. We do not collect your location, your contacts, or your device's identifiers beyond the push token, the device identifier fingerprint and the crash-report installation identifier described above.

4. How we use your data

We use your data to:

Create and operate your account, and let you use the App's core features (profiles, Discover, messaging, Stories, identity reveal)
Confirm that you meet the 18+ age requirement
Match and connect you with other users based on the profile information you provide
Screen text and photos for prohibited content before they are sent (see Section 3.4)
Operate the block/report system and take action against accounts that violate our Terms of Service and Community Guidelines, including reviewing reports and, where necessary, restricting, warning or permanently closing accounts
Run Duel: pairing players, scoring matches, applying the daily play limit and awarding points, badges and the leaderboard
Apply anti-spam and anti-abuse limits, such as limiting how many new conversations can be started in a day
Send you push notifications about messages, requests and new Stories from people you follow, and keep the in-app notification list
Maintain the security and integrity of the App (e.g., preventing abuse, spam, and unauthorized access)
Find and fix errors and crashes in the App, using crash reports (Section 3.5) and the details and screenshots you send us (Section 3.2)
Answer the complaints, suggestions and feedback you send us
Comply with legal obligations where applicable

5. Legal basis for processing

Depending on where you live, we rely on one or more of the following legal bases:

Your consent — for example, when you choose to add a profile photo, voice recording, post a Story, or reveal your identity to another user
Performance of a contract — processing necessary to provide the App's core features under our Terms of Service
Legitimate interests — for example, operating the block/report system and content screening to keep the platform safe, keeping evidence for reports, and preventing fraud or abuse
Legal obligation — where we are required to retain or disclose information by law

6. Who we share your data with

We do not sell your personal data. We share data only with the service providers that operate our infrastructure, strictly to the extent necessary to run the App:

Supabase — our database, authentication, file storage, and backend hosting provider. Supabase stores your account data, messages, and uploaded media on our behalf, under our instructions, acting as our data processor.
Google Firebase Cloud Messaging (and, on iPhone, Apple's push notification service through it) — used to deliver push notifications to your device. To display a notification, we send Firebase the sender's display name (their username, or their anonymous name if the message was sent anonymously), a generic label describing what arrived ("New message", "New photo", "New voice message" or "Shared a new story"), and an internal identifier so that tapping the notification opens the right screen. The content of your messages and Stories is never sent to Firebase, and it is never shown on your lock screen. You can turn notifications off in the App's settings or in your device settings.
Google and Apple — if you choose to sign in with them, they confirm your identity to us and give us the information listed in Section 3.1. We send them nothing about your use of Miyonk.
Google Firebase Crashlytics — receives the crash reports described in Section 3.5 so that we can find and fix errors. Google keeps crash reports for 90 days.
Resend — our email delivery provider. It receives your email address and the content of the account emails we send you (such as sign-up confirmation and password reset). It is not used for marketing.
Cloudflare — during a live action game such as Snowball Fight, carries the moves between the two players' phones. While the match is running it sees your IP address and the game messages (positions, shots, health); it stores neither, and your opponent never receives your IP address. Cloudflare also hosts the miyonk.com website.

We may also disclose information if required by law, court order, or to protect the rights, safety, or property of Miyonk, our users, or the public.

7. Uploaded media and who can open it

Photos and voice messages you send in conversations are kept in private storage. Only the two people in that conversation can get a link to open them, and each link expires one hour after it is issued. Someone who copies such a link can open the file only until it expires.

Profile photos, voice introductions and Story images are served over public links, because they are meant to be seen by other users. The links are long and not published anywhere, so they are not practically guessable, but anyone who obtains one can open that file without being logged in to Miyonk, until the file is deleted.

When a file is deleted (see Section 9), its link stops working. Photos and voice messages sent in conversations are deleted 7 days after they are sent.

The App cannot prevent another user from taking a screenshot of what you send them, and you should assume that anything you send can be saved by the person receiving it.

8. International data transfers

Our service providers may process and store data on servers located outside your country of residence, including outside Turkey and the European Economic Area. Where this happens, we rely on the safeguards our providers offer (such as standard contractual clauses) to protect your data.

9. Data retention and account deletion

We keep your data for as long as your account is active and as needed to provide the App.

If you sign up with an email address and do not confirm it within 7 days of the most recent confirmation email, the unfinished registration, including that email address, is permanently deleted. You can sign up again at any time.

Stories are deleted automatically, as described in Section 3.3.

Photos and voice messages sent in conversations are deleted automatically 7 days after they are sent, whether or not the conversation is still open. Only the file is removed from our storage; the message itself remains in the conversation and is shown as "Photo expired" or "Voice message expired". Text messages are kept for as long as the conversation exists. If you delete a message for everyone, it is removed for both participants and shown as "This message was deleted", and any photo or voice file it carried is deleted from our storage within an hour. A copy of the original message is kept for 30 days, accessible only to us, so that a report about it can still be reviewed; it is then permanently deleted.

Evidence copied from a reported conversation (Section 3.4) is deleted 6 months after the report has been reviewed, or 1 year after the report was made if it was never reviewed. If we have reported the matter to the US National Center for Missing & Exploited Children (NCMEC), the evidence is kept for 1 year after that report, as US law requires. In-app notifications are deleted after 6 months. Connection records (Section 3.5) are kept for 400 days and then deleted.

You can delete your account at any time from the App's settings. Step-by-step instructions are on our Account and Data Deletion page. When you delete your account:

Immediately: your username, email address, date of birth, biography, gender, tags, relationship preferences, app-lock passcode and anonymous display name are removed, your notification tokens and device identifier fingerprints are deleted (except, for a permanently banned account or one deleted under a restriction or active yellow card, as described in Section 3), and your account is permanently disabled — it cannot be recovered or reused. Your badges, your in-app notifications, your Duel time zone and login streak, the Store items you got with points and their record, and your record of accepting the Community Guidelines are deleted too.
Your email address is also erased from our sign-in system, together with any link to your Google or Apple account. The one exception: if your account is under a moderation restriction or has an active yellow card when you delete it, your sign-in email is kept, disabled, so that the same person cannot sign up again to escape the decision.
Within 7 days: your profile photo, your voice introduction, and every photo and voice recording you sent in conversations are permanently deleted from our storage systems.
To protect the experience of people you've talked to, your past messages remain visible to the other participant in a conversation, but your account will be shown to them as a "Deleted user" with no photo and no way to identify or contact you further. Each message that carried a photo or voice recording is replaced with the text "Media removed", so nothing is left pointing at a deleted file.
Duel matches you finished are kept, without your name or any other profile detail, because your opponents' points and leaderboard positions are calculated from them. You no longer appear on the leaderboard.
Stories are not part of this process because they are already temporary: every Story and its image are deleted automatically 24 hours after it is posted, as described in Section 3.3.
Reports that were submitted about your account, and reports you submitted about others, are retained for safety and moderation purposes; evidence copied for them is deleted on the schedule above.
Some technical/log data may be retained for a limited period afterward where necessary for security, fraud prevention, or legal compliance.

10. Your rights

Subject to applicable law (including Turkey's Law on Protection of Personal Data (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR)), you have the right to:

Know whether we process your personal data, and request a copy of it
Correct inaccurate or incomplete data
Request deletion of your data (see Section 9)
Object to or request restriction of certain processing
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with your local data protection authority (in Turkey, the Personal Data Protection Board — KVKK Kurulu)

To exercise any of these rights, contact us at the email address in Section 1.

11. Security

We use industry-standard safeguards to protect your data, including encryption in transit, hashed credentials, and database-level access controls (row-level security) that restrict access to your data to only what each feature requires. No system is completely secure, and we cannot guarantee absolute security. Please also read Section 7, which explains an important limitation of how uploaded files are served.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other reasonable means before the changes take effect.

13. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@miyonk.com.

Miyonk is operated by Ahmet Samed Ateş, an individual based in Turkey, who is the data controller for the personal data described in this policy.