1. Data Controller
The data controller responsible for processing your personal data is Softmoor Yazılım Ticaret Anonim Şirketi. Address: Kültür Mahallesi Çakmaklar Caddesi No: 2, Bolu / Merkez, Turkey Email: support@rynaai.com Web: rynaai.com
Privacy Policy
Last updated: March 4, 2026
We at Ryna AI are committed to protecting your personal data. This policy explains how your personal data is collected, processed, stored, and protected in accordance with the Turkish Personal Data Protection Law (KVKK, No. 6698).
2. Personal Data We Collect
We may collect the following personal data while providing our services: • Account information: Name, email address, encrypted password. • Usage data: Chat history, feature usage preferences, session durations, interaction logs. • Device and technical data: IP address, browser type and version, operating system, screen resolution, language preference, timezone. • Cookies and similar technologies: Session cookies, preference cookies, analytics cookies and similar technologies. • Payment information: Payments are processed through PayTR infrastructure. Your credit card details are not stored by us; only transaction reference numbers and billing information are retained.
3. Purposes of Data Processing
Your personal data is processed for the following purposes: • Providing, improving, and personalizing our services • Account creation, verification, and management • Processing payments and billing • Preventing abuse, fraud detection, and ensuring platform security • Identifying and resolving technical issues • Responding to user support requests • Fulfilling legal obligations • Measuring and improving service quality
4. Legal Basis for Processing
Your personal data is processed based on the following legal grounds: • Performance of contract: Essential data processing for service delivery, account management, and payment operations. • Legal obligation: Tax, accounting, and legal reporting requirements. • Legitimate interest: Service security, fraud prevention, service improvement. • Explicit consent: Separate consent is obtained for marketing communications and non-essential analytics cookies.
5. Cookies and Similar Technologies
We use the following types of cookies in our services: • Essential cookies: Required for session management and security. The service cannot function properly without these cookies and they do not require consent. • Functional cookies: Used to remember your preferences such as language and theme selection. • Analytics cookies: Used to measure service quality and obtain usage statistics. Your explicit consent is obtained for these cookies. You can manage your cookie preferences through the in-app cookie banner. For detailed information, please see our Cookie Policy.
6. Data Transfers
Your personal data may be transferred to third parties in the following cases: • Domestic transfers: Payment service providers (PayTR), hosting and infrastructure service providers. • International transfers: Your data may be transferred abroad for AI model providers and cloud infrastructure services. These transfers are made to countries providing adequate protection or where the data controller commits to adequate protection, in compliance with applicable law. Your data is never sold to third parties for advertising or marketing purposes.
7. Data Retention Periods
Your personal data is retained for the period required by the processing purpose: • Account data: As long as your account is active, plus the legal retention period after account deletion. • Usage data: Retained for as long as your account is active. You can delete your chats from within the app at any time; when you delete your account, all of this data is permanently erased. • Payment records: 10 years as required by tax law. • Cookie data: Up to 13 months. • Trial usage data: Automatically deleted after 30 days. Data that has a defined retention period is securely deleted or anonymized once that period expires.
8. Data Security
We take the following measures to ensure the security of your personal data: • Encryption: Data is encrypted during transmission (TLS/SSL) and at rest. • Access control: Only authorized personnel can access data. • Regular security audits: Our systems undergo periodic security testing. • Password security: User passwords are stored using one-way encryption (hashing).
9. Your Rights
You have the following rights regarding your personal data: • Learn whether your personal data is being processed • Request information if it has been processed • Learn the purpose of processing and whether it is used in accordance with its purpose • Know the third parties to whom data has been transferred domestically or abroad • Request correction if data has been processed incompletely or incorrectly • Request deletion or destruction under the conditions set out in applicable law • Request notification of correction, deletion, or destruction operations to third parties to whom data has been transferred • Object to results arising from analysis of processed data exclusively through automated systems • Claim compensation for damages caused by unlawful processing You may submit your requests to support@rynaai.com. Your request will be answered within 30 days at the latest.
10. Users in the European Union (GDPR)
If you are in the European Union, your personal data is covered by the General Data Protection Regulation (GDPR, EU 2016/679) in addition to Turkish law. The GDPR follows where the user is, not where the company is established. Our legal bases (GDPR Art. 6): • Performance of a contract — to create your account and deliver the service (Art. 6(1)(b)). • Consent — for marketing messages and non-essential cookies (Art. 6(1)(a)). You can withdraw consent at any time. • Legitimate interests — to prevent abuse, keep the service secure and improve our infrastructure (Art. 6(1)(f)). Your rights under the GDPR: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21) and not to be subject to automated decision-making (Art. 22). Deletion and data download are available directly in your account settings; for anything else, write to support@rynaai.com. We answer within 30 days at the latest. You also have the right to lodge a complaint with the data protection authority in your EU country (Art. 77).
11. Service Providers and Sub-processors
We work with the providers below to run the service. Each one processes only the data needed to deliver it, and none may use that data for their own purposes. • OpenRouter (USA) — your chat messages reach the AI model through this provider. • PayTR (Türkiye) — payments made on the web. Your card details never reach us. • Apple App Store / Google Play — in-app subscriptions. • Amazon Web Services — file and image storage. Transfers outside the EU (GDPR Art. 44-49): AI model providers and cloud infrastructure may sit outside the EU. Those transfers rely on the European Commission's Standard Contractual Clauses (SCCs) or on an adequacy decision covering the provider's country. For the current sub-processor list, contact us at support@rynaai.com.
12. Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal data from individuals under 13. If we become aware of such a situation, the relevant data will be immediately deleted. Parental or guardian consent is required for users aged 13-18.
13. Policy Changes
We may update this privacy policy from time to time. Significant changes will be communicated through our website and/or application. The updated policy takes effect on the date of publication. Your continued use of our services constitutes acceptance of the updated policy.
14. Contact
For questions or requests regarding our privacy policy: Softmoor Yazılım Ticaret A.Ş. Address: Kültür Mah. Çakmaklar Cad. No: 2, Bolu / Merkez, Turkey Email: support@rynaai.com Corporate: helpdesk@rynaai.com