Privacy Policy

Last updated: 2026-10-13

In short

Damga is a planning app that helps you prepare your visa file. Your visa files, document statuses, document photos, appointment details and travel history are stored only on your device and never sent to our servers.

We never ask for passport, national ID or bank numbers. We use no advertising, analytics or tracking tools, and we do not track you across apps or websites.

Data controller

MelberLabs (developer of Damga). Contact: melberlabs@gmail.com.

Data we keep on our server

Account data: your email (if you sign up with email), an irreversible hash of your password, and the user identifier Apple provides when you sign in with Apple. If you never create an account, only a random anonymous user ID is created.

Appointment radar: centres you follow (country, city, visa type); reports you post (country, city, visa type, event type, optional earliest appointment date); your confirmations, reports of abuse and blocked users. Your reports are shown to others only under a "Traveller #number" nickname.

Notification token: to notify you when an opening is reported at a centre you follow.

Purchase records: transaction ID, product, purchase and expiry dates from Apple or Google. We never see your payment details; payment is taken by Apple or Google.

AI usage counters: how many documents you created in the Document Studio (not the text itself).

Document Studio and Google Gemini

When you create a letter, the details you enter in the form (name, occupation, employer or school, cities, dates, accommodation, sponsor details and your note) are sent to Google's Gemini service to write the text. We only do this after your explicit permission, which you can withdraw anytime in Profile.

The generated text is not stored on our server; it stays in the history on your device. Under paid API terms, Google does not use this data to train its models or for advertising.

Service providers

Apple (Sign in with Apple, App Store purchases and notifications), Google (Google Play purchases, Gemini), Resend (verification and password reset emails), Expo (push delivery), Amazon Web Services (server, Frankfurt, Germany). They process data only to provide the service and must protect it at least as well as this policy.

Legal basis

We process data to perform our agreement with you (account, radar, purchases), on the basis of your consent (Document Studio, international transfer) and our legitimate interest in preventing abuse and keeping the service secure — only to provide the app's features.

Retention

Account data is kept until you delete your account. Anonymous accounts unused for 120 days without an active purchase are deleted automatically. Radar reports are visible in the feed for 7 days and are deleted when your account is deleted.

If you delete your account, an irreversible hash of purchase transaction IDs is kept for 30 days for refund and abuse detection, then deleted. Server backups are encrypted and rotated out within 14 days.

Data on your device stays there until you delete it; if iCloud or Google device backup is on, it may be included in backups in your own account.

Your rights and deleting your account

You can request access to, correction or deletion of your data, and object to processing.

You can delete your account in the app (Profile → Delete account) or at damga.melberlabs.com/hesap-sil. Deletion permanently removes all account data from our servers.

For other requests write to melberlabs@gmail.com; we reply within 30 days.

Children

Damga is not designed for children under 13. For child applications, a parent or legal guardian prepares the file.

Changes

If we update this policy, we change its date and announce significant changes in the app.