Privacy Policy & KVKK Clarification Text

Last updated: August 5, 2026

This Privacy Policy (Clarification Text / Aydınlatma Metni) describes how Diwan Türkiye ("we," "us," or "our") collects, uses, and discloses your information when you use our mobile application (the "App"), web dashboard, and AI-backend.

1. Identity of the Data Controller

In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), the Data Controller (Veri Sorumlusu) is Ahmed Nasser Ali Haidar, an individual developer operating Diwan Türkiye. You can contact the Data Controller at support@diwanturkiye.app.

2. Information We Collect

A. Information You Provide to Us

We may collect information that you provide directly to us, such as:

• Account Information: When you sign up using email or through third-party authentication services (like Google), we collect your name, email address, and profile information.
• User-Generated Content (UGC): We collect the content you create, upload, or share on the App. This includes discussion posts, comments, votes, reviews, and images you upload to our servers.
• Communications: Information you provide when you contact us for support or provide feedback.

B. Automatically Collected Information

When you access or use our App, we may automatically collect information about you, including:

• Device Information: We collect information about the device you use to access the App, including the hardware model, operating system and version, and unique app-specific identifiers. We do not use the Google Advertising ID (AAID) for advertising or tracking across other apps.
• Usage Information: We collect information about your interactions with the App, such as the discussions you view, the features you use, and the time you spend on the App.
• Log Data: Our servers automatically record certain information when you use the App, including your IP address, browser type, operating system, referring URLs, device information, pages visited, and search terms.

C. Information from Third Parties

We use third-party services that may collect information used to identify you.

• Google Play Services: Privacy Policy
• Firebase Authentication: Used to securely authenticate users. Privacy Policy
• Firebase Cloud Firestore & Storage: Used to store user data and user-generated content securely.
• Firebase Analytics: Privacy Policy
• Firebase Crashlytics: Privacy Policy
• Firebase Cloud Messaging: Used to send you notifications.
• AI Assistant Backend (hosted on Vercel): The App includes an AI chat assistant. When you send it a message, we share your question, a pseudonymous Firebase identity token, and your recent conversation history with a separate AI-processing backend hosted on Vercel. Because your token is included, the operator of this backend can associate your chat messages with your account.
• Diwan Türkiye Management Dashboard: Union managers and administrators use a separate internal web tool to review member information for administrative purposes like approving new members. This dashboard runs on the same backend infrastructure as the App.

3. How We Use Your Information (Legal Bases for Processing)

In accordance with KVKK Article 5, we process your personal data based on the following legal grounds:

• Performance of a Contract (KVKK Art. 5/2-c): To provide, maintain, and improve our App (including discussions, AI chat, and account security), authenticate users, and send technical notices and support messages.
• Legal Obligation (KVKK Art. 5/2-ç): To retain traffic data (e.g., IP logs) as required by Turkish Law No. 5651 (Internet Broadcasting Law) and to respond to lawful requests from authorities.
• Legitimate Interests (KVKK Art. 5/2-f): To monitor and analyze trends, detect and prevent fraud, spam, and abusive behavior, moderate UGC, and manage union memberships.
• Explicit Consent (KVKK Art. 5/1): For optional analytics and crashlytics (if applicable) and cross-border data transfers to our cloud infrastructure providers (e.g., Firebase, Vercel).

4. Sharing and Cross-Border Transfer of Information

We may share your information as follows:

• Service Providers (Cross-Border Transfer): With vendors and cloud providers (e.g., Google Cloud/Firebase and Vercel) who process data on our behalf. As these providers use global infrastructure, your data may be transferred abroad. By using the App, you provide your explicit consent (KVKK Article 9) for this international transfer, or we rely on Standard Contractual Clauses (SCCs) where applicable.
• Other Users: User-Generated Content and your public profile name will be visible to other users of the App.
• Union Administrators: If you belong to a union, your name, email, and membership status are visible to that union's managers/administrators.
• Legal Requirements: To law enforcement or authorities if required by any applicable law, regulation, or legal process.

5. Your Data Subject Rights (KVKK Article 11)

Under KVKK Article 11, you have the right to:

• Learn whether your personal data is being processed.
• Request information regarding the processing of your personal data.
• Learn the purpose of the processing and whether the data is used in accordance with its purpose.
• Know the third parties to whom your personal data is transferred domestically or abroad.
• Request the correction of incomplete or inaccurate data.
• Request the deletion or destruction of your personal data.
• Request that third parties to whom data is transferred be notified of any corrections or deletions.
• Object to any negative outcome resulting exclusively from automated decision-making systems.
• Claim compensation for damages resulting from unlawful processing of your personal data.

To exercise these rights, or to delete your account and associated data directly, you can use the in-app settings or contact the Data Controller at support@diwanturkiye.app.

6. Payments and Donations

The App may display a bank account number (IBAN) so users can make voluntary donations to support union operations. The App does not process, store, or transmit any payment or banking transaction data.

7. Security and Data Retention

We take reasonable measures to protect your information. We retain your data as long as your account is active or as needed to provide you services. We also retain traffic records (log data) for 1 to 2 years as required by Turkish Law No. 5651.

8. Children's Privacy

Our services are rated for users aged 12 and older (12+). However, under Turkish Civil Law, minors (under the age of 18) generally require parental or guardian consent to enter into contracts or provide explicit consent for data processing. If you are under 18 (e.g., a 16 or 17-year-old university student), you must have your parent or guardian's permission to create an account and use the App. We do not knowingly collect personal information from children under 12. If we discover a child under 12 has provided us with personal information, we will delete it immediately.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

10. Contact Us

If you have any questions or wish to exercise your rights, contact the Data Controller at support@diwanturkiye.app.