Privacy Policy
AirTrans processes voice data in order to provide live speech translation. This policy explains what we collect, why we process it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Introduction
AirTrans (the “App”) is an iOS application that performs AI-assisted spoken interpretation. The App captures audio from the device microphone, sends it to translation providers, and returns the translated audio together with live on-screen captions. Raw audio is never written to our database; it is held only as a temporary buffer for the duration of the active session and discarded when the session ends.
2. Data Controller
The data controller for AirTrans is:
- Erkan Öztürk (natural person)
- Address: ISOTEC Enerji A.Ş., Çerkeşli Mah. İmes OSB 19. Cad. No:18, 41455 Dilovası/Kocaeli, Türkiye
- E-mail: privacy@getairtrans.com
This notice is provided under Article 10 of the KVKK (duty to inform) and Articles 13–14 of the GDPR.
3. Categories of Personal Data Processed
- Identity data — an anonymous Supabase user ID, or your e-mail address if you create a registered account.
- Contact data — your e-mail address and the content of any support request you send us.
- Transaction data — direction-minute usage counters, in-app purchase records, subscription status.
- Special category data — voice (KVKK Art. 6; GDPR Art. 9) — audio captured from the microphone during an active translation session. Processed solely on the basis of your explicit consent and not retained in our database.
- Device and technical data — device model, iOS version, app build number, anonymous device identifier, language, network type.
- Behavioural data — anonymous product events (for example which screens are opened, which features are used) and error reports.
4. Purposes and Legal Bases
- Service delivery — performance of the translation contract formed when you start a session. Legal basis: performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6/1-b).
- Quality and troubleshooting — debugging and improving translation quality. Legal basis: legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6/1-f).
- Legal obligations — tax, accounting and consumer-law duties. Legal basis: compliance with a legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6/1-c).
- Subscription management — entitlement handling through Apple and RevenueCat. Legal basis: performance of a contract.
- Processing of voice data — capturing and translating your speech. Legal basis: explicit consent (KVKK Art. 6/2; GDPR Art. 9/2-a). Consent is obtained in-app when you first grant microphone access.
5. Third-Party Processors
We use the processors below to operate AirTrans. Each processor receives the minimum data required for its task and is bound by a data processing agreement or equivalent contractual safeguard.
| Processor | Country | Data processed | Purpose |
|---|---|---|---|
| Google (Gemini Live) | USA | Audio (transient), transcripts | Real-time speech translation (primary engine) |
| OpenAI | USA | Audio (transient), transcripts | Real-time speech translation (alternative engine) |
| OpenRouter | USA | Transcript text | Text translation and translation quality checks |
| Supabase | USA (AWS) | Account, usage, preferences | Authentication, application database |
| Sentry | USA | Error events, device metadata | Crash and error reporting |
| PostHog | EU (Frankfurt) or USA | Anonymous product events | Product analytics |
| RevenueCat | USA | Purchase identifiers, subscription status | Subscription management |
| Apple | USA | In-app purchase data, App Store account ID | Payments, App Store distribution |
| Netlify | USA | Web visitor IP (server logs) | Static website hosting |
Which translation engine is used for a given session is a server-side configuration; audio may be sent to Google or to OpenAI depending on that configuration. In both cases the audio is used only to produce your translation.
6. International Transfers
Some of the processors listed above are located outside Türkiye and outside the European Economic Area, in particular in the United States. When you grant microphone access and start a translation session, you give explicit consent under KVKK Art. 9 to the transfer of your audio and transcripts to those translation providers (currently Google and/or OpenAI in the USA) for the sole purpose of translation. For users in the European Union we additionally rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. You can withdraw this consent at any time by revoking microphone access in iOS Settings or by deleting your account.
7. Retention Periods
- Raw audio — never stored persistently. Held only as a temporary buffer for the duration of the active session and discarded when the session ends.
- Transcripts — conversation transcripts are kept on your device so that your chat history survives app restarts. This is on by default and can be switched off in Settings → Audio and privacy. They remain until you clear the history in the app or delete your account. Transcripts are not stored on our servers.
- Usage events — 12 months.
- Audit logs — 24 months.
- Invoice and tax records — 5 years (statutory retention under the Turkish Tax Procedure Law).
- Support correspondence — 24 months from the last message.
8. Your Rights (KVKK Art. 11 / GDPR Art. 15–22)
Under the applicable legislation you have the right to:
- learn whether your personal data is processed and, if so, request information about it (access);
- request rectification of incomplete or inaccurate data;
- request erasure of your data (right to be forgotten);
- request restriction of processing;
- receive your data in a structured, machine-readable format and transmit it to another controller (portability);
- object to processing based on legitimate interests;
- not be subject to fully automated decisions producing legal effects concerning you;
- withdraw consent previously given at any time, without affecting the lawfulness of prior processing.
9. How to Exercise Your Rights
To exercise your rights, e-mail privacy@getairtrans.com or use the in-app Delete account data flow (Support → Delete account data). Verified requests are answered within 30 days.
10. Children
AirTrans is rated 4+ on the App Store and does not knowingly process the personal data of children under 16. If we learn that we have collected data from a user under 16 without parental consent, that data is deleted immediately.
11. Cookies and Local Storage
This website uses no tracking or advertising cookies. The mobile app uses Apple SecureStore for credentials and AsyncStorage for non-sensitive preferences such as language selection and onboarding state.
12. Right to Complain
If you believe your data is processed unlawfully you have the right to lodge a complaint with the competent authority. In Türkiye this is the Personal Data Protection Board (kvkk.gov.tr). Users located in the European Union may contact the data protection authority of their country.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes are announced in the app and on this page at least 30 days before they take effect. Continuing to use AirTrans after the effective date means you accept the updated policy.
14. Contact
Privacy: privacy@getairtrans.com
Support: support@getairtrans.com