Privacy Policy
Last updated: 25 September 2026
Nerdeydi helps you label storage boxes, photograph what is inside them and answer "did I buy it, and where did I put it?". This policy explains, under the Turkish Personal Data Protection Law (KVKK) and the EU General Data Protection Regulation (GDPR), which data we process and why, whom we share it with, and what your rights are.
1. Data controller
Kanguru Teknoloji LTD. ŞTİ., Istanbul/Turkey. Contact: destek@nerdeydi.com.
2. Data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| E-mail address, first and last name, password (stored only as a hash) | Creating your account, signing in, showing who you are to the members of a shared household | Performance of a contract |
| Household, location, box and item records (names, quantities, tags, movement history) | Storing and searching your inventory; the service itself | Performance of a contract |
| Box and item photos | Seeing what is in a box; at your request, extracting an item list with AI | Performance of a contract; explicit consent for AI extraction (see section 4) |
| The coordinates of an area (home, summer house, storage unit) | Only when you tap "I am here", to find the area on a map | Explicit consent; you can delete it at any time |
| Technical logs (request time, error code, trace code, IP address) | Security of the service and troubleshooting | Legitimate interest |
Photos are downscaled on your device and uploaded with their location and device metadata (EXIF) removed. Area coordinates are stored encrypted on the server and never written to logs or labels.
3. Where your data is stored
Your data is stored on our own server in Istanbul/Turkey. Authentication, the database and the photo store all live on that server; nothing is copied to a third-party cloud provider.
4. AI item extraction and transfer abroad
When you use "Extract Items", the photo you chose is sent to the Claude model operated by Anthropic, PBC (USA) to obtain a suggested item list. This is a transfer abroad and happens only with your explicit consent, in an operation you start for each photo. Anthropic commits not to use data sent through its API for model training and retains it for a limited time. The photo itself stays in your account; only a copy of that photo is sent to the model. You can use the whole application without ever using this feature.
5. Who receives your data
- Members of the household you share: they see the boxes, items and photos in that household, your name and the area coordinates.
- Anthropic, PBC: only in the case described in section 4, only the photo concerned.
- Public authorities where the law requires it.
Your data is never shared or sold for advertising. The application contains no advertising and no analytics tracking.
6. Retention and deletion
- When you delete a photo, the file is removed from storage immediately.
- When you delete a household, its records can be recovered for 30 days and are then permanently deleted.
- You can permanently delete your account from the Settings screen of the application or request it at destek@nerdeydi.com; your household data and photos are permanently deleted and your identity account is closed.
- Backups are kept for 14 days; deleted data leaves the backups after that period.
7. Cookies and device storage
The application uses no advertising or tracking cookies. Session data is kept in memory only while the application is open. Your appearance preference and a copy of your inventory are stored on your device so the application works offline; uninstalling the application removes them.
8. Your rights
You have the right to learn whether your data is processed, to request information, correction and deletion, to object to processing, and to claim compensation for damage. Send requests to destek@nerdeydi.com; we answer within 30 days at the latest. If you believe your request was not handled, you may lodge a complaint with the Turkish Personal Data Protection Board or your local supervisory authority.
9. Children
Nerdeydi is not intended for anyone under 18. If we learn that a child's data has been processed, we close the account.
10. Changes
When this policy changes, the new version is published on this page and important changes are announced in the application.