KVKK Information Notice
This English version is provided for users outside Türkiye. For users in Türkiye, the Turkish version prevails if the two differ.
This notice is provided under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") to inform users of the mayAssistant app and the mayassistant.com website. It is for information only; you do not need to accept it. Users in the European Union will find the information required by the GDPR in the Privacy Policy.
1. Data controller
Yusuf Efe Mayda — the developer of mayAssistant (hereinafter "we"). mayAssistant is not a company; we provide the Service as an individual. Contact: info@mayassistant.com · identification details on the Imprint page.
2. Personal data processed
- Identity and contact: name and email address. With Google or Apple sign-in, the email address and name verified by the provider.
- Account and transaction security: password hash, session and audit logs, IP address, and the computer name in the Windows app.
- Audio and video recordings: meeting audio you record or upload and, if you choose, screen recordings.
- Derived content: transcript, speaker separation, summary, task list.
- Email accounts you connect: sender, subject and content of incoming emails, and the summaries and tasks derived from them.
- Calendar (if you connect a Google or Microsoft calendar): event name, time, attendees, meeting link.
- mayAI chats and meeting preparations: what you write, the answers and the information read to produce them.
- Contacts: contact records you create from meetings and emails.
- Subscription: subscription status received from the App Store (product, renewal and expiry dates, transaction ID). Your card and payment details never reach us.
- Consent records: the times you accepted the Terms of Use and gave or withdrew the AI permission (explicit consent), and the version of the text shown.
- Website statistics: only with your cookie consent (see the Cookie Policy).
3. Purposes and legal grounds
Your data will not be used for training. Neither we nor our service providers use your recordings, transcripts or summaries to train AI models; this option is disabled with our providers.
| Purpose | Legal ground (KVKK Art. 5) |
|---|---|
| Setting up the account and providing the Service: recording, transcript, summary, search, My Tasks, calendar, email assistant, mayAI | Establishment / performance of a contract (Art. 5(2)(c)) |
| Processing audio recordings and related text by AI service providers abroad | Explicit consent (Art. 5(1), Art. 9) — obtained on the AI permission screen in the app, separately from this notice; details in the Explicit Consent text |
| Subscription records and statutory retention | Performance of a contract (Art. 5(2)(c)), legal obligation (Art. 5(2)(ç)) |
| Security, preventing abuse, transaction and audit logs | Legal obligation (Art. 5(2)(ç)), legitimate interest (Art. 5(2)(f)) |
| Service emails (verification code, security, changes to the Service) | Performance of a contract (Art. 5(2)(c)) |
| Website usage statistics | Explicit consent (cookie consent) |
No commercial electronic messages are sent for marketing purposes.
4. Recipients and transfers abroad
| Recipient | Country | Data transferred and purpose |
|---|---|---|
| ElevenLabs | USA | Audio recording — transcription and speaker separation (with your explicit consent) |
| OpenAI | USA | Transcript, emails you connect, what you write to mayAI, meeting and calendar information read for an answer — summary, task list, answer (with your explicit consent) |
| DigitalOcean | Netherlands (EU) | Server and data hosting: all Service data |
| Apple | USA / Ireland | App Store subscription and Sign in with Apple |
| USA | Sign in with Google, Google Calendar if you connect it, website statistics with your cookie consent | |
| Microsoft | USA | Outlook / Teams calendar if you connect it |
| Expo | USA | Downloading mobile app updates (IP address, app and device version) |
Data may also be transferred to legally authorised public institutions and organisations on request and to the extent permitted by law.
5. Method of collection
Data is collected electronically, partly by automated means, through the mobile and Windows apps and the website, from the email and calendar accounts you connect, and from App Store subscription notifications. Retention periods are set out in the Retention and Deletion Policy.
6. Your rights (KVKK Art. 11)
You have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties to whom it is transferred, to request its correction and its erasure or destruction, to object to a result against you arising from analysis exclusively by automated systems, and to claim compensation for damage. Send your requests from the email address registered to your account to info@mayassistant.com; they are concluded free of charge within 30 days at the latest. You can also delete your account and all your data yourself in the app (Settings › Account › Delete account). If you are not satisfied with the outcome of your request, you may lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).
7. Important note on the voices of third parties
For the personal data of other participants in the meeting recordings you upload, you are the data controller; the obligation to inform participants and obtain any required consent lies with the user. We act as data processor for these recordings.
8. The assistant (bot) that joins meetings
With the "Join Meeting & Summarise" feature, at your request an assistant (bot) joins the Microsoft Teams or Google Meet meeting you specify as a guest participant; it is clearly visible in the participant list as "mayAssistant (recording)" and posts a notice in the meeting chat that the meeting is being recorded. The assistant records audio only (its microphone and camera are off); at the end of the meeting the audio is processed into a transcript and summary.
In this flow too, you are the data controller: before sending the assistant, you expressly confirm in the interface that you have informed the participants about the recording and obtained the necessary consent; this confirmation is written to the audit log together with your account and the meeting link. The obligation to inform participants and obtain consent lies with the user; we act as data processor for these recordings. The legal consequences of unauthorised audio recording (including under KVKK and Article 133 of the Turkish Criminal Code) are the sole responsibility of the user.