A question to the assistant

We send the text of your question, the last few messages of the conversation and — so the answer is about you rather than generic — a snapshot of what the app knows about you: citizenship, city, purpose of stay, permit type and expiry, passport expiry, family situation, upcoming deadlines, application stage and step progress. Your name, if you gave one, and your passport number are not sent: the name decides nothing in the answer (it travels once, in the message about you starting to use the app — see below), and the app never asks for the passport number at all. None of this is stored on the server.

If you have just had a paper explained, its result travels with the question too — document type, the short explanation and any deadline read from it: without that the assistant would answer without knowing what you are asking about. The photo itself is never sent or stored, and the result lives only in the app's memory until you close it — and is erased by "Delete all data".

Two narrow exceptions, both about answer quality. The text of the question is kept on our side if the assistant finds no answer — those questions tell us which topics the knowledge base is missing — and if you tap "This didn't help"; in that case the titles of the materials the answer was built on are kept next to it. The answer itself is never stored: it retells your own data.

Nothing else is stored alongside the question: no installation identifier, no profile, no conversation. There is nothing to link such a record back to you. Document numbers, phone numbers and email addresses are stripped from the text automatically before it is written.

Finishing the initial setup

When you answer the last question of the setup survey, a single message tells us that someone started using the app. It contains: the name you entered, country of citizenship, city, purpose of stay, residence permit type and whether you already hold one, whether you have a spouse and how many children, the interface language, plus the platform and app version. This tells us who needs the app and which topics to add to the knowledge base.

Your entry date, passport and permit expiry dates, deadlines, trips and checkmarks are not sent. As with a question to the assistant, the random installation number travels with the request — it serves the daily cap only (see below) and does not appear in the message itself.

Your name is sent in this message only. It still does not travel with a question to the assistant: what goes there is a snapshot of your circumstances, and your name decides nothing in it.

The message is sent once per installation and reaches us through the Telegram messenger. The same details are kept in a list of sign-ups on our support server (EU region), available only to us. The record carries no installation number, so it is matched against nothing — neither your support conversation nor your device. To have it deleted, write to us: we will find it by name and date. If you had no internet during setup, the message is sent at the next app launch.

Notifications about rule changes

Reminders about your own deadlines are computed on the phone itself and require no server at all: your deadline dates are something the server neither knows nor can know.

Separately there is a broadcast about things the phone cannot know — göç idaresi changed the rules, a needed feature shipped. It uses OneSignal: it receives the notification token issued by Apple and your interface language, so the message arrives in a language you read. Nothing else — no name, no profile, no city, none of your deadlines.

The broadcast is turned off in Profile with its own switch; reminders about deadlines keep coming.

Installation identifier

A random installation number is sent with each request to the assistant or the scanner, and with the setup-finished message. It is created on first launch and serves exactly one purpose: capping how many AI requests can be made per day, so the service does not pay for someone else's automated abuse. It is not an advertising identifier and not a device identifier: it is tied neither to you nor to your phone, is never shared with third parties, and disappears with the app when you delete it.

A photo of a document or a screen

The image is sent to the server, read, and discarded immediately. It is not written to storage, does not appear in server logs and is not retained by the model provider. Inside the app it lives in screen memory until you close the result.

The same applies to the document set check: a passport and a policy carry a name and a number. The fields are read from the photo, the photo itself is discarded by the server immediately, and the fields stay on your device only — they are what makes cross-checking the papers possible.

The same applies to the housing check: a rental contract shows the owner's name and the flat's address. They are used only for the check itself — matching the address against the closed-neighbourhood list and looking for the required fields — and disappear with the image. If you then ask the assistant about it, only the document type and one sentence of the summary are passed on: neither the address nor the owner's name.

The same applies to the chat check and the application-form check. A screenshot of a conversation with a landlord, an agent or an employer is handled the same way: the server notes what the text says and quotes it, and the names and phone numbers of the other party do not enter the result — they are replaced with an ellipsis. The values read from the application form are compared with your dossier on the device itself and are not stored: close the screen and they are gone.

A message to support

When you write to us from the app, the server receives the text of your message, any photos attached to it, the name from your profile, the interface language, the app version and the platform, plus the time of your first and last launch. The name is there so that a real person answers knowing who they are talking to; if you never entered one, the request is identified by a random installation number.

Your city, your citizenship, your travel dates and anything from your document set — the passport number included — are not sent to support. All of it stays on the device.

This is not an account: we ask for no email, no password and no proof of identity, and we store none.

Unlike a photo sent for analysis, an attachment sent to support is kept — otherwise we cannot see what you are asking about. It sits in private storage available only to you and to us, and is deleted after 180 days. The conversation itself stays until you ask us to delete it: without it, answering your next message would start from nothing.

To delete the conversation and its attachments, ask us in that same chat. Deletion is irreversible and takes both the messages and the photos.

The notification about our reply is delivered by the push service: it receives the same random request number — so that the notification reaches your device — and nothing else.

We learn that you wrote through Telegram — the same messenger as at first launch. That notification carries only the name from your profile (or the random installation number if you entered none) and the request number. The text of your message and any photos attached to it are not sent there: they stay in private storage, and that is where we read them.