Privacy policy

Last updated: 16 September 2026.

This policy explains what data the turchi.uz website and the "Turchi.uz — tur va aviachipta" mobile app collect, why we need it, who we share it with, how long we keep it and how you can delete it. The data controller is Turchi.uz travel agency, Tashkent, Uzbekistan. You can reach us on +998 91 197 30 30 or on Telegram at @turchiuz.

1. WHAT WE COLLECT

Your account. A phone number — you sign in with it and a manager calls you on it. During registration we ask for your name, date of birth, gender and city. If you sign in through Telegram, we receive the identifier and the phone number that Telegram itself has verified.

Enquiries and bookings. The tour you chose, the dates, the number of travellers and anything you tell us. If you send a payment receipt, we store the uploaded file.

Reviews. The review text, the rating and any photos or videos you attach. The name and city shown under a review come from your profile; we do not ask for them separately. Reviews are published only after a moderator has checked them. Capture metadata, including coordinates, is stripped from uploaded photos.

Messages to our managers. What you write to support and what our staff reply.

Technical data. On first launch the app creates a random installation identifier. We do not request or use the device advertising identifier (IDFA). If you allow notifications, a delivery token is stored. We record which screens and tours you opened so we can tell what people are looking for. When an enquiry is sent from the website, the IP address is stored as spam protection.

Photo access is requested only at the moment you attach a file to a review or a receipt. The app does not ask for your location: weather is shown for the destination's coordinates, not for where you are.

2. WHY WE USE IT

To let you sign in, to create and run your booking, to contact you about your enquiry, to show your review to other travellers, to answer you in support, to notify you when a booking changes status, and to understand which parts of the app people need. We do not sell your data, we do not pass it to advertising networks, and we do not track you across other companies' apps and websites.

3. WHO WE SHARE IT WITH

Only those the service cannot work without, and only as far as needed:

Eskiz (eskiz.uz, Uzbekistan) — delivery of the sign-in code by SMS; the phone number is passed.

Google Firebase Cloud Messaging — delivery of push notifications; the device token and the notification text are passed.

Telegram — only if you chose to sign in through Telegram or wrote to our bot.

All of them are required to protect the data to no lesser standard than described here. We also disclose data where the law of the Republic of Uzbekistan requires it.

4. HOW LONG WE KEEP IT

Account data for as long as the account exists. Confirmation codes live for a few minutes and are stored only as a hash. The in-app activity log is pruned regularly. Records of completed bookings are kept longer because accounting rules require it.

5. YOUR RIGHTS

You can see and change your data under "Profile", and you can delete it: Profile → Delete my data. The account, the sign-in keys, the support conversation and your favourites are removed. You can withdraw consent for notifications in your phone's settings. To request a copy of your data or to ask how it is processed, write to us on Telegram at @turchiuz or call +998 91 197 30 30.

6. CHILDREN

The service is intended for adults. We do not knowingly collect children's data. If such data has reached us, tell us and we will delete it.

7. CHANGES

If this policy changes, we will update this page and the date at the top.