KVKK Disclosure Text

Disclosure Text Within the Scope of Personal Data Protection Law No. 6698

1. Data Controller

Pursuant to the Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by the operator of Flompt, Kubilay Karacar ("Flompt"), as data controller, within the scope explained below. Contact: [email protected]. This text will be updated with the company details when the operating entity is incorporated.

2. Purpose of Processing Personal Data

Your personal data is processed for the following purposes:

  • Performing membership transactions
  • Providing application services
  • Improving user experience
  • Conducting statistical analyses
  • Fulfilling legal obligations
  • Managing information security processes
  • Delivering a personalized content feed based on your in-app activity (can be turned off anytime in app settings)

3. Processed Personal Data

The following personal data categories are processed:

  • Identity Information: Name, surname, username
  • Contact Information: Email address
  • Visual Data: Profile picture
  • Transaction Security: IP address, device information, log records
  • Usage Data: In-app interactions, preferences

4. Transfer of Personal Data

Your personal data may be transferred in accordance with the conditions specified in Articles 8 and 9 of KVKK to:

  • Authorized public institutions and organizations in case of legal obligation
  • DigitalOcean LLC (data stored in Frankfurt, Germany): cloud hosting and media storage
  • Cloudflare Inc. (USA): content delivery network and security services
  • Google LLC (USA): AdMob advertising services and AI features via the Gemini API (semantic search, automatic topic labeling, AI image generation)
  • RevenueCat Inc. (USA): subscription and in-app purchase management
  • 650 Industries Inc. / Expo (USA): push notification delivery
  • OpenAI, L.L.C. (USA): automated content moderation
  • Replicate, Inc. (USA): AI Studio image generation and editing models
  • Functional Software Inc. / Sentry (USA): error tracking service
  • PostHog, Inc. (data processed in the EU region, Frankfurt): product analytics — only with your explicit consent while signed in; anonymous, account-unlinked measurement outside the EEA and the UK while browsing without an account
  • Resend Inc. (USA): transactional email delivery
  • Lawyers for the purpose of following legal processes

International data transfers are carried out with appropriate safeguards under KVKK Article 9 and applicable data protection law.

5. Legal Basis for Data Processing

Your personal data is processed based on the following legal grounds specified in Article 5 of KVKK:

  • Your explicit consent
  • Necessity for the establishment or performance of a contract
  • Fulfillment of legal obligation
  • Necessity for our legitimate interests

is processed based on these legal grounds. Feed personalization specifically relies on the performance of a contract and legitimate interest (KVKK Art. 5/2(c) and (f)) rather than explicit consent; you may object and turn it off at any time in the app under Settings → Consent Preferences.

6. Your Rights Under KVKK

Within the scope of Article 11 of KVKK, you have the following rights:

  • To learn whether your personal data is processed
  • To request information if it has been processed
  • To learn the purpose of processing and whether it is used in accordance with its purpose
  • To know the third parties to whom it is transferred domestically or abroad
  • To request correction if it is incomplete or incorrectly processed
  • To request deletion within the framework of the conditions in Article 7 of KVKK
  • To request notification of correction and deletion operations to third parties to whom it has been transferred
  • To object to the emergence of a result against you through the analysis of processed data
  • To request compensation for damages in case of damage due to unlawful processing

7. Application Method

To exercise your rights mentioned above, you can apply through the following methods:

In your application, you must clearly state which of the rights specified in Article 11 of KVKK you are using, along with information to verify your identity.