Every detail leaves a trace; the trace stays with you.

Last updated: October 29, 2026

This policy explains which data is processed in the DOKED app and on this website, provided by DOKED Platformu ("DOKED", "we"), why and how. You don’t need to create an account. Your chat archive stays on your device; the content needed for AI features is sent to OpenAI with your permission. The DOKED server does not keep a chat database. We don’t sell your data and we don’t track you for advertising.

1. What Data Do We Process?

Chat archive: the chat file you export from WhatsApp (.zip / .txt) is brought onto your device only at your explicit request, when you choose DOKED on the share sheet, and is stored only on your device. Media files are not processed.
Text sent for AI: for the person profile, relationship analysis, message interpretation and rehearsal features, the chat text (or the parts selected to fit the size budget), sender names, dates, the existing profile, statistics, the situation or draft you write and the rehearsal history may be sent to OpenAI. The texts also include the other person’s messages (see section 3). The provider’s retention terms are explained in section 2.
Screenshots: an image you optionally add to message interpretation or to a rehearsal’s starting situation is sent to OpenAI to generate the response.
Analysis results: records of person profiles, relationship analyses and rehearsals are kept on your device. The existing profile and earlier rehearsal turns may be included as context in later AI requests.
App and device identifier: a randomly generated persistent UUID is used to match fair-use limits and purchase status. This pseudonymous identifier links usage and subscription records to the same installation; it is not directly your name or email address. A value derived from this identifier is sent to OpenAI for safety purposes.
Purchase information: product, transaction and subscription status are verified by RevenueCat and matched to the app user ID. RevenueCat also provides purchase reports and measurements.

There is no sign-up form, no contacts access and no advertising SDK. The chats and images you import may contain names, phone numbers or other personal information. When you ask for support by email, the address and content you send us are also processed. RevenueCat is used for purchase management and measurement.

2. How Is Chat Data Processed?

What is collected: only the text of the chat you export (sender name, date, message) and the relationship patterns derived from it: message frequency, who starts conversations, response times, tone, recurring topics and estimated signal shares. Chats are matched to the person files on your device by the sender names they contain; DOKED does not access your contacts or perform official identity verification.

What it is used for: to generate the relationship analysis, person profile, message interpretation and rehearsal replies shown to you. Chat contents are not used for ad targeting or for selling data.

Who it is shared with: the content is sent to the OpenAI API through the DOKED server (Cloudflare). Storing responses for later retrieval from the API is turned off (store: false); this setting does not turn off all retention by the provider. By default, OpenAI API data is not used to train models. Abuse-monitoring logs may be kept for up to 30 days by default; legal obligations and safety exceptions may lead to longer retention. An encrypted processing cache that speeds up responses may be kept for up to 24 hours; the 30-minute cache setting used in rehearsals is not a maximum deletion period. Details: OpenAI data controls.

Where and for how long it is stored: the DOKED server does not write chat text to persistent storage: the text is processed in memory only for the duration of the active request and discarded once the response is generated; it is not written to server logs. The archive, profiles and analyses are kept only in the app’s storage on your own device and stay there until you delete them.

How it is deleted: deleting a person from the archive deletes that person’s chats, profile, rehearsals and analyses in the app. Uninstalling the app deletes the local app records; device/iCloud backups and provider records are managed separately. Purchase and usage records and the identifier in the Keychain do not count as deleted just because the app is uninstalled.

3. The Other Person’s Data

The chat you export also contains the messages of the person you chat with. Only import chats you have the right to use; respect the other person’s privacy and provide any required notice or obtain any required permission. Remove unnecessary personal information and sensitive content before sending. A user’s AI permission does not by itself mean that the legal conditions required for the personal data of the other people they chat with are met.

4. How and Why Do We Process Your Data?

Data is used to generate relationship analyses, person profiles, message interpretations and rehearsal replies, to verify and measure purchases, to answer support requests and to protect the service against abuse. Chat contents are not used for advertising and are not sold.

5. Legal Bases

Your personal data is processed under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the GDPR on the following bases: processing of chat text, drafts and screenshots upon the request you start of your own explicit will and for the performance of the contract; fair-use limits and security measures under legitimate interest; purchase verification for the performance of the contract; and, where legal obligations must be fulfilled, under legal obligation.

6. Who Is Your Data Shared With?

OpenAI — AI responses. Chat text, your drafts and any screenshot you add are sent to the OpenAI API only to generate responses; requests are sent without creating a persistent model history.
Apple App Store — purchase and subscription transactions; your payment information is never passed to DOKED.
RevenueCat — purchase verification, Premium status and purchase measurement; the app user ID, transaction/product information and technical app/store information are processed. RevenueCat privacy policy.
Superwall (paywall presentation) — active in the app to present the Premium offer screen; it may process app/device identifiers, technical device information, and purchase and paywall usage events. Chat content is never sent to Superwall. Superwall privacy policy.
Cloudflare — DOKED’s server infrastructure; the IP address and technical network/request information of requests may be processed for infrastructure security and operation. DOKED’s application code does not write chat text to its logs. Cloudflare privacy policy.

Data is not shared with any third party other than these providers, and no data is sold. No third-party ad network or data broker is used; there is no tracking in the sense of App Tracking Transparency.

7. Third-Party Websites

The content and privacy practices of third-party pages reached through the app or the site (e.g. App Store subscription management) are the responsibility of the respective party; this policy does not cover them.

8. Cookies and Tracking

The app does not use cookies. Our website does not set non-essential cookies and does not run third-party tracking technology.

9. Is Your Data Transferred Abroad?

Our server infrastructure and service providers may process data outside Türkiye, in other countries including the United States or the European Union. Using these services requires the content and technical data described above to be transferred abroad. The legal conditions for transfers abroad are assessed separately under Article 9 of the KVKK in Türkiye and, to the extent applicable, under the GDPR; merely using the app or accepting the service agreement does not by itself satisfy all transfer conditions.

10. How Long Do We Keep Your Data?

The DOKED server does not write chat text to persistent storage. Your archive, profiles, rehearsals and analyses are kept in the app’s storage on your device and may be included in device/iCloud backups. Hashed values of the device identifier and network address are used for usage entitlements and abuse monitoring; the raw network address is not written to these counters. Usage, rate and processing-reservation records are kept for 48 hours from creation; expired records are cleaned up automatically. Aggregate usage counters created in earlier versions, which contain no device identifier, expire when their period of at most 35 days ends. No automatic deletion period applies to the subscription record on the server; deletion requests are handled through the contact route in section 17. Apple and RevenueCat transaction records and OpenAI’s safety/cache records are subject to separate retention terms.

11. Security

All communication is encrypted with HTTPS. The pseudonymous device identifier is kept in your device’s secure storage (Keychain). On the server side, API keys are stored as secret variables and are never sent to the client. Although appropriate technical and administrative measures are taken, no electronic transmission can be guaranteed to be 100% secure.

12. Children’s Data

DOKED is for users aged 18 and over. We do not knowingly process data from people under 18; if such a case is detected, the related data is deleted. You can let us know through our contact address.

13. Your Rights

Under Article 11 of the KVKK, you have the right to learn whether your data is processed, to request information, to learn the purpose of processing and whether it is used in line with that purpose, to know the third parties it is transferred to, to request correction, deletion and destruction, to object, and to claim compensation for damages. Users covered by the GDPR also have the rights of access, rectification, erasure, restriction of processing and data portability. For requests about pseudonymous usage and purchase records, your support ID may be needed to find the records. You can use the contact address below for any request.

14. Do Not Track

Since DOKED does not perform behavioral tracking under any circumstances, there is no need to respond separately to browser "Do Not Track" signals.

15. Changes

When this policy is updated, the update is published on this page and the "last updated" date is changed. Significant changes are also announced in the app.

16. Contact

Data controller: DOKED Platformu, Istanbul, Türkiye. For privacy questions and requests:

auruskan@icloud.com

17. Data Access and Deletion

You can withdraw your AI sharing permission in Settings → Privacy. Later AI submissions require permission again; withdrawing permission does not by itself delete content processed in the past or existing records.

You can delete the records on your device by deleting a person or chat from the archive, and rehearsals from the Rehearsals screen. For usage and purchase records on the server, add the support ID shown in Settings → Privacy to an email with the subject "Data Deletion Request". To fulfil the request, we may need to verify its scope and the record match. Local deletion does not by itself delete Apple/RevenueCat transaction records, OpenAI safety records or device/iCloud backups.

DOKED’s relationship interpretations are estimates based on message patterns; they are not a substitute for psychological counseling, diagnosis or legal advice.