Privacy Policy

Theyine is operated by Emrah Turgaylı, an individual based in Sofia, Bulgaria. Theyine is not yet registered as a separate legal entity — until then, Emrah Turgaylı is the data controller under GDPR.

For any question about this policy or your data, write to hello@theyine.com.

We only collect data through the specific products you use:

BlokMate (building management): for managers — name, phone, email, building/site data; for residents — name, phone, email, status (owner/tenant), unit, dues payment history.

QR Menu — Event RSVP: when a guest confirms attendance via a QR code — name, phone or email, party size, menu selections, allergy notes (optional).

Contact and demo request forms on the site: name, email, phone (optional), business name, message.

Automatically while browsing the site: anonymized traffic statistics via Google Analytics 4 (see the Cookie Policy).

To provide the service you requested (dues and request management in BlokMate, processing an RSVP response, replying to an inquiry or demo request).

To communicate about your account, payment or request.

To improve our products — aggregated, anonymized usage statistics.

We never sell personal data to third parties.

Contract performance — when we process a resident's or manager's data to provide BlokMate, or a guest's data to process their RSVP.

Legitimate interest — to answer inquiries, support the product and prevent abuse.

Consent — for marketing emails (only if opted in), and for Google Analytics 4 traffic statistics, which only run after you accept analytics cookies and can be withdrawn at any time via "Cookie settings" in the footer.

Legal obligation — where a law requires retaining certain data (e.g. accounting records for payments).

BlokMate account data — for as long as the account is active, plus a reasonable period after closure for accounting and legal purposes.

Event RSVP responses — until the event has concluded plus a short reporting window for the restaurant/organizer, unless deleted earlier on request.

Contact/demo form data — up to 24 months from the last contact, unless you request earlier deletion.

Payment-related data — per Bulgarian accounting law (typically 5–10 years).

We only share data with service providers necessary to run the product — each processes data on our behalf, under contract, for the stated purpose only:

Under GDPR you have the right to: access your data, correct inaccurate data, request erasure ("right to be forgotten"), restrict processing, data portability, and object to processing based on legitimate interest. Where processing relies on consent, you may withdraw it at any time.

To exercise these rights, write to hello@theyine.com. We respond within 30 days.

If you believe we're processing your data unlawfully, you may file a complaint with the Bulgarian Commission for Personal Data Protection (KZLD), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria, kzld.bg — or with the supervisory authority in your own country of residence.

This policy may be updated as our products evolve. The last-updated date is shown at the top of this page.