Privacy Notice

Last updated: May 20, 2026 — v1

At Mystivo (“we”, “Mystivo”) we take your privacy seriously. This notice explains what personal data we process and how, in compliance with Turkish KVKK and EU GDPR principles.

1. Data Controller

Mystivo is the data controller. Contact: privacy@mystivo.com.

2. Categories of Data Processed

  • Identity: name, email
  • Birth details: date, time (optional), place (optional), gender (optional)
  • Mother's name for yıldızname (optional)
  • Activity: reading history, computed zodiac sign
  • Technical: IP, browser, session cookies
  • Marketing preferences: notification opt-ins (optional)

3. Processing Purposes

  • Service delivery (personalized astrology and divination modules)
  • Account security and authentication (Email OTP)
  • Compliance with KVKK and other legal obligations
  • Product improvement (only if analytics cookies accepted)
  • Notifications upon your request

4. Data Transfers

Your data resides within the EU (Neon Postgres — Frankfurt, Scaleway — Paris) with edge processing on Cloudflare. AI interpretations are generated via Anthropic Claude with ephemeral data sharing during the request; Anthropic does not train on your data.

5. Retention

  • Account data: until account deletion
  • Coffee fortune photos: 30 days, then auto-deleted
  • OTP codes: 10 minutes
  • Upon account deletion, all data is permanently removed

6. Your Rights (KVKK Art. 11 / GDPR)

  • Know whether your data is processed
  • Request information about processing
  • Learn purpose and conformity
  • Know third-party recipients
  • Request correction of inaccuracies
  • Request erasure (right to be forgotten)
  • Notification to recipients of corrections/erasures
  • Object to fully automated decisions
  • Compensation for damages

7. How to Exercise Rights

Contact privacy@mystivo.com. You may also delete your account or export your data directly from Settings.

8. Updates

When this notice changes, the version number increments and active users see a re-consent prompt.