Draft. This text is pending legal review. Highlighted {{…}} fields will be filled in before release.
KVKK Information Notice
Effective date: {{EFFECTIVE_DATE}}
Under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), we inform you about the personal data processed when you use the CartCooler mobile app (the "App"). The Turkish version of this notice is authoritative.
Data controller
{{DATA_CONTROLLER}}, {{ADDRESS}}. Contact: privacy@cartcooler.app.
Personal data processed
- Identity and contact: email address; if you sign in with Google, the name and profile picture link Google sends us.
- Financial information (entered by you): monthly net income, currency, monthly working hours and the hourly labour value calculated from them.
- App content: the link, title, image link, price and store domain of products you add to the cooling tank, when you added and decided on them, and your decisions.
- Preferences: language and theme.
- Transaction security and technical data: random user ID, device model, operating system and app version, error logs, in-app events, IP address during connections.
Purposes and legal bases
- Creating and managing your account — (c) establishment and performance of a contract
- Product cooling, labour calculation, decisions and savings — (c) establishment and performance of a contract
- Debugging and app security — (f) legitimate interest
- Usage analytics and product improvement — {{ANALYTICS_LEGAL_BASIS}}
- Subscription verification — (c) establishment and performance of a contract
- Compliance with legal obligations — (ç) legal obligation
Analytics events carry prices and income only as coarse ranges, never raw.
Collection method
Your data is collected electronically through the App: from what you enter, from the product links you share, and from the App's automatic technical records.
Transfers
Your data is transferred, to the extent needed to provide the service, to these providers:
- Supabase (database and authentication — EU, Frankfurt)
- Sentry (crash reports — EU, Germany)
- PostHog (usage analytics — EU)
- Google (if you use Sign in with Google)
- RevenueCat and Google Play (if you buy a subscription)
Because their servers are outside Türkiye, these transfers fall under KVKK Art. 9. Basis for the transfer: {{CROSS_BORDER_TRANSFER_BASIS}}.
Data may be shared with competent public authorities when legally required.
Retention
Account and product data are kept while your account exists and are permanently deleted when you delete your account. Technical records are kept for the retention period of the respective service.
Your rights under KVKK Art. 11
By applying to the data controller you may:
- learn whether your personal data is processed and request information about it,
- learn the purpose of processing and whether it is used accordingly,
- know the third parties in Türkiye or abroad to whom it is transferred,
- request correction of incomplete or inaccurate data,
- request erasure or destruction under KVKK Art. 7,
- request that corrections and erasures be notified to third parties it was transferred to,
- object to a result against you arising exclusively from automated analysis,
- claim compensation for damage caused by unlawful processing.
You can export your data (Settings → Data) and delete your account (Settings → Account) in the App. For other requests, write to privacy@cartcooler.app in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your request is answered free of charge within 30 days at the latest.