Privacy Policy
Last updated:
Turify (“Turify”, “we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use the Turify mobile application and platform (the “Platform”), whether as a traveler/guest or as a guide/provider (“you”). It also describes your rights and how to exercise them, and it reflects the information required for Google Play's Data Safety and app-review requirements. This Policy is designed to meet international data protection standards, including the EU/UK General Data Protection Regulation (GDPR) and comparable local legislation.
1 Data Controller
Turify, registered at Future forward Hub, Al Wasl Parcel B, Floor 8 Expo City, Dubai, UAE (“Turify”, “we”), is the data controller responsible for your personal data collected through the Platform, unless otherwise stated. For questions about this Policy or our data practices, contact us using the details in Section 19.
2 Scope
This Policy applies to all users of the Turify Platform, including travelers/guests, tour guides, drivers, rental hosts, accommodation owners, admins, support staff, and content creators. Certain sections apply specifically to Providers due to the additional verification data we collect from them.
3 Information We Collect
3.1 Information You Provide
- Account details: full name, email address, phone number, password, date of birth, country, preferred language and currency, profile photo.
- Booking details: destination, dates, service type, number of travelers, special requests.
- Communications: messages sent through in-app messaging, support tickets, reviews, and appeal submissions.
- Provider verification (KYC) data: government-issued ID, proof of address, service-specific licenses/permits, insurance documents, banking or mobile-money account details.
- Payment information: processed by our third-party payment processors (e.g., Stripe, Telebirr, M-Pesa, CBE); we do not store full card numbers on our own servers.
3.2 Information Collected Automatically
- Device and log data: IP address, device identifiers, app version, operating system, and crash/diagnostic logs.
- Usage data: screens viewed, search queries, features used, interactions with listings.
- Location data: approximate or precise location, where you enable location permissions, used for search relevance, safety features, and emergency support.
- Cookies and similar technologies: used for authentication, preferences, analytics, and (where applicable) marketing.
3.3 Information from Third Parties
- Social login providers (Google, Facebook, Apple), where you choose to register or sign in using these services.
- Identity verification and fraud-prevention partners, in connection with Provider KYC checks.
- Payment processors, confirming transaction status and limited payment metadata.
4 App Permissions
The Turify Android app requests the following device permissions. You can review and change most permissions at any time in your device Settings > Apps > Turify > Permissions.
| Permission | Why We Request It | Required? |
|---|---|---|
| Camera | Capture KYC documents (ID, license), profile photos, and listing/service photos or videos. | Optional (required only for uploading via camera) |
| Photos/Media/Storage | Select existing images or documents to upload for KYC, profile, or listings. | Optional |
| Location | Improve search relevance to your area, show nearby listings on the map, and support the in-app emergency support feature. | Optional |
| Notifications | Deliver booking confirmations, reminders, messages, and status updates. | Optional |
| Microphone | Only if you choose to upload short video content that includes audio. | Optional |
| Biometric (Face/Fingerprint) | Optional two-factor authentication, processed on-device via your device's OS; biometric data is not transmitted to or stored on Turify's servers. | Optional |
We request permissions only when needed for the related feature, and the app remains functional (with reduced features) if optional permissions are denied.
5 How We Use Your Information
- To create and manage your account and authenticate your identity.
- To facilitate bookings, process payments and payouts, and issue digital tickets.
- To verify Provider identity, licensing, and eligibility (KYC/compliance).
- To enable in-app messaging between travelers and Providers.
- To send booking confirmations, reminders, and service-related notifications.
- To provide customer support, investigate disputes, and respond to emergencies.
- To detect, prevent, and investigate fraud, abuse, and violations of our Terms & Conditions.
- To personalize search results, recommendations, and content.
- To analyze app usage and improve our services.
- To comply with legal, tax, and regulatory obligations.
- To send administrative, security, and (with consent, where required) marketing communications.
6 Legal Bases for Processing (GDPR)
Where the GDPR or equivalent legislation applies, we rely on:
- Performance of a contract: to create your account, process bookings, and deliver core app functionality.
- Legal obligation: to meet KYC, anti-fraud, tax, and other regulatory requirements.
- Legitimate interests: to maintain platform safety and integrity, prevent fraud, moderate content and communications, and improve our services.
- Consent: for optional features such as marketing communications, certain analytics/cookies, and biometric 2FA, which you may withdraw at any time.
7 Monitoring of In-App Communications
Messages exchanged through in-app messaging between travelers and Providers are stored on our systems and are not end-to-end encrypted. We may access and review this content for safety, dispute investigation, fraud prevention, quality assurance, and legal compliance purposes. Access is restricted to authorized personnel on a need-to-know basis.
8 Cookies & Tracking Technologies
We use cookies, SDKs, and similar technologies to operate the app, remember preferences, measure performance, and (where permitted) support analytics and marketing. You can manage tracking preferences through your device or app settings; disabling certain technologies may limit app functionality.
9 How We Share Your Information
- With Providers or travelers, as necessary to facilitate a booking (e.g., name, itinerary, and, after confirmation, contact details).
- With payment processors and financial institutions to process payments and payouts.
- With identity verification and fraud-prevention vendors, to complete KYC checks.
- With cloud hosting, analytics, customer support, and communication service providers who process data on our behalf under contract.
- With regulators, tax authorities, law enforcement, or courts, where required by law or to protect the rights, safety, or property of Turify, our users, or others.
- In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.
We do not sell your personal data to third parties.
10 Google Play Services
The app may use Google Play Services (e.g., sign-in, push messaging, crash reporting, analytics). Google's handling of data collected through these services is governed by Google's own Privacy Policy, available at policies.google.com/privacy.
11 International Data Transfers
Your information may be transferred to, stored, and processed in countries other than your own, including countries with different data protection laws. Where we transfer personal data internationally, we use appropriate safeguards, such as Standard Contractual Clauses or equivalent mechanisms recognized under applicable law.
12 Data Retention
We retain personal data for as long as necessary to provide the app, comply with legal, tax, and regulatory obligations (including KYC record-keeping requirements), resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it, except where longer retention is required by law.
13 Data Security
We implement technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration, including encryption in transit, access controls, and secure storage of KYC and payment-related data. No system is completely secure, and we encourage you to use a strong password and enable two-factor authentication.
14 Your Rights
Subject to applicable law, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data, subject to legal retention requirements.
- Object to or request restriction of certain processing, including for direct marketing.
- Request a portable copy of data you provided to us.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise these rights, contact us using the details in Section 19. We may need to verify your identity before responding, and may take up to the period permitted by applicable law to respond.
15 Account & Data Deletion
You can request deletion of your Turify account and associated personal data at any time, in either of the following ways:
- In-app: Go to Profile > Account Settings > Delete Account, and follow the confirmation steps.
- Web: Submit a request at [Insert account-deletion web page URL] without needing to open the app.
Some data may be retained after account deletion where required for legal, tax, fraud-prevention, or dispute-resolution purposes (for example, KYC records or transaction history), consistent with Section 12 (Data Retention). We will delete or anonymize this data once the applicable retention period ends.
16 Children's Privacy
The app is not directed to individuals under 18, and we do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete it.
17 Third-Party Links & Services
The app may contain links to third-party websites or integrate third-party services (e.g., maps, payment processors, social login). This Policy does not apply to those third parties, and we encourage you to review their privacy policies.
18 Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified in-app or by email, and the “Effective Date” above will be updated. Continued use of the app after changes take effect constitutes acceptance of the revised Policy.
19 Contact Us
If you have any questions or concerns about this Privacy Notice, please contact us at:
- Email: contact@sofloom.com
- Address: Future forward Hub, Al Wasl Parcel B, Floor 8 Expo City, Dubai, UAE