Privacy Policy
Last updated: October 18, 2026 • GDPR & KVKK Compliance
1. Data Architecture
Banyan follows strict data minimization principles. We do not store user-uploaded images on our servers; profile avatars rely solely on initial fallbacks or verified Google connection photo URLs.
Authentication is managed by Clerk with third-party JWT validation on Supabase with strict Row-Level Security.
2. Cookie Policy & Telemetry
Only strictly necessary authentication session cookies are used. No third-party ad tracking cookies exist.
Analytics (PostHog) runs on EU servers without session replay or keystroke logging, respecting user consent.
3. User Data Rights
Under KVKK and GDPR regulations, users have the right to export all diary and watchlist data in CSV format or delete their accounts entirely.
Account deletion triggers immediate deactivation and permanent data scrubbing.