privacy policy

when you use heydiyo through telegram, we may process the following data:

• your phone number
• messages you send through telegram
• service-related communication records
• profile information such as your name, age, gender, height, and weight
• your goals, nutrition preferences, meal records, and measurements
• information you share with us about allergies, sensitivities, illnesses, medication use, special diets, or similar health-related matters
• photos, voice recordings, documents, or similar content you send
• transaction information about your subscription and payment status
• technical records necessary for the security and proper operation of the service

heydiyo does not ask you to share data that is not necessary. you should share sensitive information about your health only if you believe it is genuinely necessary to use the service.

we process your personal data for the following purposes:

• providing the heydiyo service
• responding to your messages
• creating nutrition plans, meal tracking, and shopping lists
• managing your account, subscription, and preferences
• ensuring the security of the service
• identifying and resolving technical issues
• preventing misuse, spam, or security breaches
• fulfilling legal obligations
• analyzing, developing, and improving the service

heydiyo does not provide medical diagnosis, treatment, disease management, or professional dietitian services. information provided by heydiyo is for general information and support purposes.

under applicable law, we may process your personal data on the following legal bases:

• entering into or performing a contract to provide the service
• fulfilling legal obligations
• our legitimate interests
• establishing, exercising, or protecting a right
• your explicit consent where necessary

if you share information with us that may be health-related or special-category personal data, that data is processed on a limited basis only to respond to your request and provide the service. where necessary, your explicit consent may also be obtained separately to process this data.

paid subscription payments are processed by Stripe through Stripe Checkout. card details are entered on Stripe’s secure Stripe-hosted checkout page.

Stripe may process your name, email address, billing address, payment method information, IP address, device and browser signals, transaction details, and other technical data needed to secure the transaction. Soft Signal Apps LTD stores limited transaction records such as Stripe customer, payment, and subscription identifiers; payment status; the selected subscription period; and service access status.

heydiyo does not store your complete credit or debit card details in its own systems. card and payment information is processed through Stripe’s secure infrastructure.

payment data is used to collect payments, manage subscriptions, prevent and detect fraud and loss, authenticate transactions, issue refunds, provide customer support, perform accounting, and fulfill legal obligations. Stripe may process some data as a data processor on behalf of Soft Signal Apps LTD and may process other data as a data controller for purposes it determines itself, including fraud and loss prevention, security, authentication, legal and regulatory compliance, and operating or improving its services. Stripe’s role may vary depending on the product, your location, and the processing activity. Stripe’s own privacy policy (stripe.com/privacy) and service terms also apply to Stripe’s processing.

Stripe may use cookies and similar technologies in connection with its payment and related services. Stripe may collect transaction data and information identifying devices that connect to its payment pages, and use it for fraud and loss prevention and detection, authentication, service-performance analytics, and improving or customizing the user experience.

to provide the service, your personal data may be shared on a limited basis with or processed by the following parties:

• Messaging infrastructure providers such as Telegram
• cloud, server, database, and hosting service providers
• artificial intelligence technology providers
• Stripe and other payment, billing, and fraud prevention service providers
• support and technical maintenance services
• authorized public institutions or legal authorities

only data necessary to operate the service, ensure security, carry out payment processes, or fulfill legal obligations is shared with these parties.

heydiyo may use Telegram, cloud infrastructure, artificial intelligence technology, payment providers such as Stripe, or support services. some of these services may be outside your country or may process data in different countries.

for international transfers, adequacy decisions, standard contractual clauses, or other appropriate safeguards required by applicable law are used. where required by law, your explicit consent is also requested.

when you start using heydiyo, you may receive service-related messages, responses, reminders, plan notifications, and information about your subscription status through telegram.

you can start the confirmation process to delete your account and stored data by typing “hesabımı sil”.

we retain your personal data for as long as you use the service and to the extent necessary for the purpose of processing.

when you request deletion of your account, stored data associated with your account is deleted or anonymized. however, information required for legal obligations, payment records, dispute resolution, security records, or the protection of a right may be retained for the period required by law.

We may not have direct control over records retained in the systems of Telegram, Stripe, or other third-party service providers. these records are processed according to the relevant service provider’s own privacy policies and legal retention obligations.

to request deletion of your data:

• you can start the deletion confirmation process by typing “hesabımı sil” through telegram
• you can send a data deletion request to destek@heydiyo.com

when you start a deletion request through telegram, you will also be asked to type “VERİLERİMİ SİL” as confirmation for security. after your confirmation is received, your account and stored data are deleted or anonymized within a reasonable period. this action cannot be undone.

under applicable personal data protection law, you may have the following rights:

• learning whether your personal data is processed
• requesting information about your processed personal data
• learning the purpose of processing and whether the data is used in accordance with that purpose
• learning the third parties to whom the data is transferred
• requesting correction of incomplete or incorrectly processed data
• requesting deletion or destruction of your data under conditions permitted by law
• requesting that correction, deletion, or destruction be reported to third parties to whom the data was transferred
• objecting to an adverse outcome produced through automated systems
• claiming compensation if you suffer damage due to unlawful processing

you can contact us at destek@heydiyo.com to exercise these rights.

we take reasonable technical and administrative security measures to protect your personal data. however, no data transmission over the internet, cloud services, or messaging infrastructure can be guaranteed to be completely risk-free.

heydiyo is not designed for people under the age of 18. if you are under 18, you should not use heydiyo without the consent of your parent or legal representative.

we may update this privacy policy when necessary. we always publish the current text on this page.

you can email destek@heydiyo.com with questions about privacy.