Aviso de información conforme a la KVKK

1. Responsable del tratamiento

The data controller is Kubilay Zengin, a natural person. Crowdier is the name of the app he operates and of crowdier.app.

For any application, question or request: hello@crowdier.app.

2. Datos personales tratados

Identity and contact: name, surname, date of birth, age, email address or phone number.

Profile content: your photos, bio, the profile prompts you answer, interests, languages, height, education, work, star sign, pets, drinking and smoking preferences, exercise habit, gender, relationship status and a partner if you name one.

Location: the city and hometown you type on your profile, and your group's city or its "Online · different cities" setting. GPS coordinates are not stored: the ones previously held were deleted on 15 September 2026.

Communications: the messages, photos, videos and voice notes you send in group chats and match chats.

Usage data: your likes, passes, matches, votes, read receipts, profile views, notifications and in-app activity.

Device and technical data: device type, operating system, app version, IP address and push notification token.

Safety records: reports you file, blocks you make, and any restriction applied to your account.

3. Datos de categoría especial

There is no field dedicated to collecting special-category personal data (KVKK art. 6). Two things still need saying plainly.

Your drinking, smoking and exercise preferences, and your relationship status, can carry a meaning related to health or sexual life depending on context. And your bio, the profile prompts and your chats are free text: if you write something there about religion, political opinion or health, we process that too.

None of those fields is required and all can be left empty. Where you do fill one in, the legal ground is your explicit consent, which you may withdraw at any time by clearing the field or writing to us.

4. Finalidades

Creating and maintaining your account; letting you create and run a group; matching groups with each other; letting matched groups talk; sending you notifications; operating, measuring and improving the service; preventing abuse and reviewing reported content; and meeting our legal obligations.

5. Bases legales (KVKK art. 5)

Performance of a contract (5/2-c): your account, group, matches and chats. Without these the service does not work.

Legal obligation (5/2-ç): age verification, keeping safety records, responding to competent authorities.

Legitimate interest (5/2-f): safety, abuse prevention, reviewing reported content and keeping the service running — provided this does not harm your fundamental rights and freedoms.

Explicit consent (5/1): the optional profile fields, and the push-notification permission.

6. Cómo se recogen

All of it is collected directly from you, electronically, as you use the app: the signup form, the profile screens, the chats, and ordinary use. We do not buy data from third parties. If you sign in with Google or Apple, that provider passes us only your name, email address and profile picture.

7. A quién se transfieren y dónde

We do not sell your data and we do not share it for advertising. We use the following service providers to run the service, and some are outside Turkey:

Supabase (Frankfurt, Germany) — database, authentication and file storage, so everything in this notice. Sentry (Germany) — crash reports; your user id and stack traces, not your email. Expo (USA) — notification delivery; your device token and the notification text. Apple and Google (USA) — notification infrastructure and sign-in. Resend (USA) — system email. Vercel (USA) — this website. OpenStreetMap Foundation (EU) — city search; only the city name you type, sent from our server.

Transfer abroad falls under KVKK art. 9. The Board has published no adequacy decision for any country to date; work to place these transfers on appropriate safeguards is under way, and this notice will be updated when it is complete. We say so here because you should not be treated as having accepted something you were never told.

8. Conservación

Your data is kept while your account exists, and every period below is applied automatically.

• When you delete your account, your profile and group data, your messages and your media are deleted at once; leftover copies of your files are removed from storage within minutes. Our database backups keep a copy for up to 7 days and then drop it; we never restore a deleted account from them.
• An account nobody has used for 2 years is deleted the same way, unless it was banned or still has paid premium time.
• A sign-up that never became a profile is deleted after 30 days, together with the photos uploaded during it.
• Records of which profiles were viewed are deleted after 90 days.
• A safety report stays after the account it concerns is deleted, because it exists to protect the person who filed it. One year after it is closed, its written details and any quoted message are erased.
• Feedback you sent us is kept for 2 years, with your name and email stripped out unless you ticked the contact box. A contact address left when deleting an account is kept for 1 year.

9. Tus derechos (KVKK art. 11)

Under article 11 you have the right to learn whether your personal data is processed; to request information if it is; to learn the purpose and whether it is used accordingly; to know the third parties it is transferred to at home or abroad; to have it corrected if incomplete or wrong; to request its erasure or destruction; to have those actions notified to the third parties it was transferred to; to object to a result against you produced solely by automated analysis; and to claim compensation if you suffer loss from unlawful processing.

Two of these you can exercise yourself, in the app: download a copy of your data from Settings → Privacy → Get a copy of my data, and delete your account instantly from Settings → Delete account.

10. Cómo presentar una solicitud

Send your application to hello@crowdier.app from the email address registered on your account; the Turkish communiqué on applications to data controllers expressly accepts that channel. A written application, KEP, secure electronic signature or mobile signature also work.

Your application must state your name and surname, your Turkish ID number (or, if you are a foreign national, your nationality and passport number), an address for notification, and what you are asking for.

We answer within thirty days at the latest, free of charge. If you find our answer inadequate, or receive none in time, you may complain to the Personal Data Protection Board.