Privacy notice
6py is provided by GAZİOĞLU YAZILIM ANONİM ŞİRKETİ. Data controller and support contact: info@gazioglu.com.tr. Effective: 1 November 2026. The service is for people aged 16 and over.
We process your account name, email, password hash, language/time zone, 16+ attestation time and sessions. Information you add about people, dates, notes, memories/media, tasks, chats, sharing permissions, Daily templates and recipient consent is stored to provide the service. We do not bulk-read/upload your device contacts or request location, SMS or call-log access. Purchase tokens, products and validity verify your entitlements; we do not receive card or bank details.
We rely on performance of the service contract for account/features, proportionate legitimate interests for security, abuse prevention and troubleshooting, and legal obligations where required. Optional sharing and applicable advertising consent are separate choices and can be withdrawn. You must be entitled to add information about others; avoid sensitive personal data.
The API and private data are hosted in Türkiye. Content starts private and is shared with only the recipients/circles you choose. Reported content may be reviewed by authorized moderators to handle a complaint. Traffic uses HTTPS; local cache and private server content are encrypted. Chats are not promised to be end-to-end encrypted. Google Play handles store verification and purchase notifications. This version does not send private content to an AI provider.
Optional Google, Facebook or Apple sign-in processes the provider account identifier, shared name and email address. It does not request Gmail, contacts, friend lists, posts or private messages. Matching email addresses are never automatically merged with an existing account; linking requires the existing 6py password. Disconnect in Privacy and account controls; this does not close active 6py sessions, which you can end separately. Disconnecting Apple or deleting the account revokes the provider grant; temporary failures are retried through an encrypted revocation queue. Short-lived sign-in records are removed after expiry.
Free accounts may use Google AdMob/UMP only on an eligible general dashboard. No ad request during the first three opens, on paid plans, for ages 16–17 or when age is unspecified. Thereafter at most one request per session and rolling 24 hours; none on sensitive screens. Personalization is disabled. Google may process IP addresses, device/ad identifiers, diagnostics and ad interactions using international servers. Contacts, chats, memories and private notes are not sent for ad targeting. Manage age preference and available Google consent choices under Settings > Privacy > Ad privacy.
When advertising is enabled and eligible, the Google SDK may infer approximate location from IP and process app set IDs and, where applicable, identifiers related to signed-in accounts on the device. Purposes include ad delivery/measurement, analytics and fraud prevention. Diagnostics can include app/SDK loading, hangs and energy usage. No GPS permission is requested. Choosing not to specify age in Ad privacy prevents ad SDK initialization; ages 16–17 also receive no ad requests. Core features remain available.
Account content is kept while you use the service or until deletion. Deletion removes associated private records and sessions and revokes Daily consent; media files are removed through a durable erasure queue. Other people’s independent copies and the store’s own order records are not deleted by this action. Encrypted notification tokens are cleared after processing; failed/pending tokens last at most 7 days and content-free notification deduplication records 30 days. Export/delete and correct your data in the app; contact info@gazioglu.com.tr for access, objection, restriction and applicable KVKK/GDPR rights. You may complain to the competent data protection authority.
When iOS App Store verification is enabled, Apple transaction identifiers, signed purchase evidence and subscription status verify your account rights; we do not receive card or bank details. When APNs notifications are enabled and you have allowed notifications, Apple receives a device token and an opaque event identifier to deliver a generic 6py notice. Names, private message bodies, notes and media are not included in that push payload. Registration tokens are encrypted on our server and cleared when revoked; account/session and source-access checks stop pending sends. Terminal push diagnostic records are kept for 30 days, and account deletion removes associated records. Functional app-opening counts also enforce advertising limits; iOS advertising remains disabled in this release.