Eravandra
Get the app
Legal

Privacy Policy

This policy explains what Eravandra collects, why we collect it, and what you can do about it. We wrote it plainly because we would rather you read it than skim it.

Last updated · April 21, 2026

Who we are. Eravandra is a travel app that helps people discover historical places in a city by swiping on cards and building a walking route. The app is operated by Eravandra (“we,” “us,” or “our”). If you have questions about this policy, write to support@eravandra.app.

This policy covers the Eravandra mobile app on iOS and Android and this website at eravandra.app. It applies whether you use a free city or buy a premium subscription or city pack.

What we collect

We collect only what we need to run the app. Here is the full list.

Account data

  • Email address. Collected when you sign in with Google, Apple, or email. We use it to identify your account and, if you contact us, to reply.
  • Display name. If your Google or Apple account shares one, we store it so the app can greet you.
  • Firebase user ID. A unique ID issued by Firebase Authentication that lets our backend map your sign-in to your account.

App usage data

  • City selections. The cities you open inside the app.
  • Swipes. Which places you swiped right (liked) or left (passed). This is the core of how the app works.
  • Routes. The walking routes Eravandra generates for you, and any rename or delete you make on them.

Purchase data

  • Subscription and purchase status. Whether you have Eravandra Premium, which city packs you have bought, and when they expire. We get this from RevenueCat, which receives it from Apple or Google. Eravandra never sees your card number.

Device and diagnostic data

  • Device type and operating system version. Used to deliver the right build and to debug crashes.
  • Crash reports. Collected by Firebase Crashlytics when the app crashes, so we can fix it.
  • App language. Used to serve content in English or Turkish.

Location data

Eravandra does not track your precise location in the background. When you open a route in your phone’s map app, the map app may request your location to provide directions. That request is handled by Google Maps or Apple Maps under their own privacy policies, not by Eravandra.

Why we collect it

  • To run the app. We need your account, your swipes, and your routes to give you the experience you came for. Legal basis under GDPR: performance of a contract (Article 6(1)(b)).
  • To process payments. If you subscribe to Eravandra Premium or buy a city pack, we process that through Apple, Google, and RevenueCat. Legal basis: performance of a contract.
  • To fix bugs. Crash reports and device data help us keep the app working. Legal basis: our legitimate interest in delivering a stable product (Article 6(1)(f)).
  • To comply with law. We keep certain records if we have to. Legal basis: legal obligation (Article 6(1)(c)).

Who we share it with

We do not sell your data. We work with a small set of service providers who process data on our behalf and only for the purposes below.

  • Firebase (Google LLC). Authentication and crash reporting. Data is stored on Google Cloud.
  • Google Cloud Platform. Hosts photos of places, cities, and our backend. No personal payment data.
  • RevenueCat, Inc. Manages subscriptions and purchases. Receives your Apple or Google receipt and a user identifier, never your card number.
  • Apple App Store and Google Play. Handle the actual purchase and charge your payment method.
  • Backend hosting provider. Runs our API. Only the fields described above pass through it.

We may transfer data outside the European Economic Area and Turkey when our providers operate there. In those cases we rely on Standard Contractual Clauses or equivalent safeguards that our providers have in place.

How long we keep it

  • Account data. For as long as your account is open. Deleted within 30 days after you delete your account.
  • Swipes and routes. Swipe session data in Redis expires after 24 hours by design. Saved routes stay until you delete them or your account.
  • Purchase records. Kept for as long as tax and accounting law requires, usually up to 10 years.
  • Crash logs. Up to 90 days, then automatically purged.

Your rights

If you are in the European Economic Area or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR). If you are in Turkey, you have rights under the Law on the Protection of Personal Data (KVKK, Law No. 6698). The rights overlap and include:

  • Access your data and get a copy.
  • Correct data that is wrong.
  • Delete your account and data. You can do this from inside the app at Profile, Delete account. It also works by email.
  • Object to or restrict how we process your data in certain cases.
  • Port your data to another service.
  • Withdraw consent where we rely on consent, without affecting processing already done.
  • Complain to a data protection authority if you believe we are not handling your data correctly. In the EU, that is your local DPA. In Turkey, that is the Personal Data Protection Authority (KVKK).

To exercise any of these rights, email support@eravandra.app from the address on your account. We reply within 30 days.

Account deletion

You can delete your account at any time. Inside the app, go to Profile and tap Delete account. That removes your user record, your swipes, and your routes from our database. Purchase records may be kept if tax law requires it, with personal identifiers removed where possible. You can also request deletion by email.

Children

Eravandra is rated 4+ and does not target children under 13. We do not knowingly collect data from children under the age at which parental consent is required in your country. If you are a parent and believe your child has created an account, write to us and we will delete it.

Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), encryption at rest through our hosting providers, and access controls on our backend. No system is perfectly secure. If we ever learn of a breach affecting your data, we will notify you as required by law.

Cookies on this website

eravandra.app is a static landing page. It does not set advertising or analytics cookies. Your browser may store standard technical cookies, and our hosting provider may log your IP address for a short period for abuse prevention.

Changes to this policy

If we change this policy, we will update the “Last updated” date above. For meaningful changes we will let you know in the app or by email before the change takes effect.

Contact

Email support@eravandra.app. We read everything that comes in.