The controller is identified below. Data is collected electronically through forms, user actions, device connections and reports/support requests. Names, emails and password hashes support accounts; listings, photos, chosen city/country, favourites and message delivery metadata support the service. Passwords are not stored in plain text. A current device location is required to browse and post listings; account and help sections remain available without permission. Device location and geocoding services determine the country/city; exact coordinates are not sent to the API. Country/city, fix time, accuracy and a mock-location flag support regional access checks. Expired region access records are removed by hourly cleanup; the last country/city and app language are retained with the account for regional notifications. Manual region selection is unavailable. Security and operation also involve IP address, request time/path and client information; encrypted communication uses public keys; enabled paid services involve subscriptions, credit balances and store purchase-verification records. Tovunza does not collect card details.
Under Turkish KVKK, contract performance (Article 5/2-c) supports core services; balanced legitimate interests (5/2-f) support security; establishment, exercise or protection of rights (5/2-e) supports necessary dispute evidence and acceptance records; applicable statutory duties support compulsory disclosures (5/2-a or ç). Where no other basis applies and consent is required, it is requested separately and freely. This notice is not blanket or marketing consent.
New chats are end-to-end encrypted on devices. The server handles ciphertext, participants, times and delivery status; ordinary admin access cannot read new messages. A reporter decrypts selected messages on their device and submits only those readable items and necessary context as evidence. Reporting never unlocks the whole conversation. Legacy unencrypted records, if present, are outside this new encryption assurance. Avoid unnecessary sensitive or third-party data; unavoidable sensitive evidence requires a specific Article 6 condition and additional safeguards.
Listings, photos, seller names, city and publication dates may be public and indexed. Emails, password hashes and admin records are not shown on listings. Authorised hosting/technical providers process data for operations; enabled app-store purchases involve store verification; authorities receive only necessary data under lawful requests or duties. Optional Google sign-in and store payments connect to those providers only when enabled and chosen; their notices also apply.
Hosting and transfer arrangements are disclosed below. Overseas hosting alone is not a lawful transfer basis: KVKK Article 9 and other applicable safeguards must be fulfilled. Personal data is not sold for advertising. Applicable breach notification duties apply; no absolute security claim is made.
Records are retained only as necessary for their purpose. Expired sessions are removed and completed message-queue entries are cleaned after 30 days. Account deletion starts removal of active related data; backups and narrowly required legal records follow the schedule below. Data is deleted, destroyed or anonymised when no longer needed. KVKK Article 11 rights include access, purpose/recipient information, correction, qualifying erasure and recipient notification, objection to adverse solely automated analysis and compensation where applicable; see Requests.
Profile completion processes your username, phone number, photo, review outcome and email-verification records. Approved photos and usernames may be public; phone numbers are not shown on listings. Verification messages go through the configured mail provider, which processes the recipient address and message content. Only a keyed code digest is stored on the server; codes last 10 minutes with at most 5 incorrect attempts. Expired records are removed by scheduled cleanup. Archiving affects only the requesting participant and does not delete messages.