Draft — pending legal review

Privacy Policy

Last updated 2026-08-20 · DYP GIDA İTHALAT İHRACAT SANAYİ TİCARET ANONİM ŞİRKETİ

Who we are

This service is operated by DYP GIDA İTHALAT İHRACAT SANAYİ TİCARET ANONİM ŞİRKETİ, working with our manufacturer Rad İlaç Sanayi Ticaret Limited Şirketi (İşletme Kayıt No TR-35-K-150588), İzmir, Türkiye ("DYP", "we", "us"). This policy covers the DYP Hydrate marketing site and DYP AI, our hydration-guidance assistant.

What we collect

When you create a DYP AI account and use the product, we collect:

Account data — your e-mail address and a salted, hashed password. We never store your password in plain text.
Profile data — name, sex, age, body mass, height, activity level, sports, sweat traits and the climate you train in, if you choose to provide them.
Health-related facts you choose to share — things you tell DYP AI in conversation, such as medications, medical conditions, cramps, or pregnancy, that help it give safer guidance.
Conversation content — the messages you send and the hydration plans DYP AI generates for you.
Usage and technical logs — request timestamps, rate-limit counters and basic error logs, kept to operate the service safely.

Why we collect it

We use this data to give you personalised hydration guidance, remember your context between visits so you don't repeat yourself, keep the service safe and within its intended use, and to comply with our legal obligations.

Legal basis

Because we are a Turkish company, the Personal Data Protection Law (KVKK) is our primary legal basis. Health-related data is a "special category" under KVKK Art. 6 and is processed only on your explicit consent, given at sign-up and re-confirmed whenever our terms change. For visitors in the European Union, we additionally rely on GDPR Art. 9(2)(a) (explicit consent) for the same data, and on contract / legitimate interest for ordinary account operation.

Who processes it

Anthropic PBC — when you chat with DYP AI, your message and the context we assemble about you (name, profile fields, the facts DYP AI has learned — never your e-mail address or internal user id) are sent to Anthropic's API to generate a reply. Anthropic retains API conversation data under its own API data-retention terms (currently up to 30 days for abuse monitoring, not used to train models by default) — see Anthropic's published API terms for the current policy.
E-mail provider — used for password resets, e-mail verification and waitlist confirmation, only when this feature is enabled on our server.
Hosting provider — runs the application and database that store your data.

Retention

We keep your data until you delete your account. If e-mail notifications are configured and your account has been inactive for an extended period, we may warn you by e-mail before purging it under our retention policy. Database backups are kept for a rolling window of up to 14 days for disaster recovery, then overwritten.

Your rights

Under KVKK Art. 11 (and equivalently under the GDPR for EU visitors), you can:

Find out whether we process your data, and get a copy of it — use "Download my data" in the DYP AI memory drawer.
Ask us to correct inaccurate data — tell DYP AI directly, or use the profile editor and "Forget" on individual facts.
Ask us to delete your data — use "Delete account" in the memory drawer, which permanently removes your account, profile, facts, conversations and plans.
Withdraw your consent at any time, which will require us to stop processing your health-related data (and, in practice, close your account).
Complain to the KVKK Board (Kişisel Verileri Koruma Kurumu) in Türkiye, or to your local Data Protection Authority if you are in the EU.

Cookies

We use exactly one cookie: an essential, httpOnly session cookie that keeps you signed in. We do not use tracking or analytics cookies, so there is no cookie consent banner.

Age

DYP AI is intended for people aged 16 and over. We ask for confirmation of this at sign-up and enforce a minimum age on stored profiles.

Medical disclaimer. DYP AI provides general hydration guidance based on a documented, non-clinical framework. It is not medical advice, and it is not a substitute for a clinician. It is not intended for use by people under 16, during pregnancy, or for the specific conditions it flags for professional referral — always follow the guidance of a qualified professional in those cases.

Contact

Questions about this policy or your data can be sent to.