Privacy Policy

Effective date: 21 October 2026 · version 2

Vistuvo is a service for real-estate professionals: you record a property room by room with your iPhone, and we use the recording to prepare a 3D virtual tour of the property.

1. What we process and how we collect it

The app collects most data automatically while you record. You provide the rest yourself: your access code, and any email you send us.

• Access: the personal access code you were given and the session it opens. Our server keeps only a one-way hash of the code, linked to an internal user ID, until your access expires. The session credential is kept in your iPhone's secure storage.
• Recordings: room images or video, and the camera's position and orientation, lens and exposure data, and tracking state.
• Motion sensors during recording: accelerometer, gyroscope, magnetometer, compass heading and device motion (attitude, gravity, acceleration). They are timed relative to the start of the recording. We use them to align images, never to infer health or activity.
• Depth: on iPhones that support it, depth, confidence and surface-mesh files.
• Technical data: capture and room identifiers, the iPhone model, iOS and app versions, and the capture settings.
• Room sketch diagnostics: outcome counters, processing-stage durations, and changes in the phone's thermal state during the capture. They contain no identifier of their own, but they are stored with your capture, so they are not anonymous.
• Upload records: file size, upload status and receipt.
• Notifications: if you allow them in iOS, your device's notification token and a record of the notifications we send about your captures.
• Connection data: when you sign in, a hash of your IP address is used briefly to limit repeated attempts. We have turned request logging off. Our infrastructure providers still handle ordinary connection data so that traffic can reach us.
• Correspondence: the emails you send us and our replies.

Some data stays on your iPhone and is not uploaded: capture and room names, preview thumbnails, and the live coverage sketch. We do not collect location, microphone audio, contacts, your photo library or advertising identifiers. The app contains no advertising, analytics or tracking tools.

2. Purposes and legal bases

• Providing the service (KVKK Art. 5(2)(c), performance of the contract you accept in the Terms of Use). This means:
  • checking your access;
  • receiving and storing your uploads;
  • preparing the 3D virtual tour;
  • having our team review capture quality;
  • telling you about your captures by notification, if you allow it.
• Keeping the capture guidance working and the service secure (Art. 5(2)(f), our legitimate interest). This covers the sketch diagnostics and the sign-in attempt limit.
• Answering requests and meeting legal duties (Art. 5(2)(ç)).

We do not use your recordings for advertising, sell them, or use them for unrelated purposes.

3. Other people in recordings

Recordings may show the owner, occupants or their belongings. Record only properties where you have permission, and keep people, documents, screens and personal photos out of view. If such data appears in a recording anyway, we process it only for the purposes and periods above, based on our legitimate interest (Art. 5(2)(f)). We do not blur or remove it automatically.

4. Who receives your data

• Our authorised team: to prepare tours and review quality.
• Cloud infrastructure providers: to store recordings and run the service. Storage is in the European Union, which means it is a transfer abroad. Network traffic may be routed through other locations.
• Apple's push notification service: only your notification token and the notification itself, so that the notification can be delivered. This is also a transfer abroad.
• Authorised public bodies: only when the law requires it.

We do not share recordings publicly. These providers process the data only on our behalf and under the same protection as this policy.

Transfer abroad and your explicit consent. We transfer data abroad to the cloud providers and to Apple's push service only with your explicit consent (KVKK Art. 9(6)(a)). You give it separately on the "Your data" page before your first upload. The countries involved may not offer the same level of protection as Turkey, and exercising your rights there may be harder. You can withdraw consent at any time by emailing hello@valerionstudio.com. We then close your access and no further uploads are made. Withdrawal does not affect transfers already made. You can ask separately for earlier uploads to be deleted.

5. How long we keep it

• Uploaded recordings, upload records, notification tokens and notification records: kept for 30 days, then deleted on a schedule. The deletion itself may finish shortly after that date.
• Unfinished uploads: cancelled after seven days.
• The access-code hash: kept until your access ends.
• Emails: kept as long as we need them to handle your request.
• Data on your iPhone: stays there until you delete it or remove the app.

6. Your choices and rights

• Delete from phone removes the local copy only. It does not delete uploaded files.
• Earlier deletion of uploads: email hello@valerionstudio.com and give the capture date and property so we can find the files. Never send your access code.
• Signing out in Settings stops uploads from this iPhone.
• Camera and notification access: you can turn these off in iOS Settings. That does not delete earlier uploads.

Under KVKK Art. 11 you may ask:

• whether your data is processed, and for information about it;
• for its purpose, and whether it is used for that purpose;
• who receives it;
• for it to be corrected, deleted or destroyed, and for recipients to be told;
• to object to a result against you produced only by automated analysis;
• for compensation for unlawful processing.

You can apply in writing, or from an email address you have already given us, to hello@valerionstudio.com. We answer free of charge within 30 days at the latest. If we refuse or do not answer, you may complain to the Personal Data Protection Board.

7. Security and changes

• Security: connections use HTTPS. Capture files on the iPhone use iOS file protection. Uploaded files are stored privately, with access limited to our team and providers.
• Not for children: the service is meant for professionals, not for children.
• Changes: if this policy changes, we show the new version in the app and on this page.

8. Data controller and contact

Data controller: Semih Colu. Write to hello@valerionstudio.com with privacy questions, requests about your rights and deletion requests.