KVKK notice
Effective: October 20, 2026
This notice is given under Article 10 of Turkey’s Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles of the Obligation to Inform. It tells you about the personal data processed through the Gezenti mobile app and the gezentiapp.com website. The details are in the Privacy Policy. This is an English version; if it differs from the Turkish one (KVKK Aydınlatma Metni), the Turkish version prevails.
Controller
Oğuz Han Kıdık
Email: destek@gezentiapp.com
Personal data processed
| Category | Data |
|---|---|
| Identity | Your name from your Apple or Google account, display name, username |
| Contact | Your Apple or Google account’s email address; the email address you use for support and requests |
| Location | The exact location where a photo was taken and its accuracy; the area and approximate location sent to find nearby places and albums (these queries are not stored) |
| Visual records | Photos of your captures and their preview copies |
| Transaction security | Account identifier, session details, one-time capture codes, mock location flag, photo hashes (a fingerprint and a similarity hash), check and moderation results, device details (platform, operating system version, model, app version), notification token, IP addresses in providers’ logs |
| Customer transactions | Stickers, badges, titles, profile privacy setting, follows and follow requests, likes, blocks, reports and their notes, app usage events and crash reports |
| Request and complaint management | Support emails and KVKK applications |
We don’t process special categories of personal data. No face recognition or other biometric processing is done on photos.
Purposes
Your personal data is processed to:
- run membership and account operations;
- provide Gezenti: stickers, albums, badges and titles, follows, likes and Explore;
- verify captures and prevent cheating;
- moderate content, review reports and support blocking;
- send notifications;
- keep information secure;
- detect and fix errors;
- measure usage to improve the app;
- answer requests and applications;
- meet legal obligations and requests from competent authorities.
How it’s collected, and legal bases
Your personal data is collected electronically, partly by automated means:
- through the app and the website, from what you enter;
- from your phone (camera, location, gallery, device details);
- from the Apple or Google account you sign in with;
- from operations our servers carry out.
It is processed on these legal bases in Article 5(2) of the KVKK:
- Establishing or performing a contract (c): your account, providing Gezenti, captures, the social features and notifications.
- Meeting a legal obligation (ç): requests from competent public authorities and courts.
- Establishing, exercising or protecting a right (e): disputes that may arise.
- Legitimate interest (f), provided it doesn’t harm your fundamental rights and freedoms:
- verifying captures and preventing cheating,
- moderation and reports,
- information security,
- crash reports,
- measuring usage to improve the app.
You can turn off usage measurement in the app with Profile → About → Share usage data.
Transfers
Within Türkiye: your personal data may be transferred to competent public authorities and courts, where our legal obligations require it, in line with Article 8 of the KVKK.
Abroad: the servers of the service providers we use to run Gezenti are outside Türkiye. Your personal data is transferred to them, limited to the purposes above, in line with the conditions of Article 9 of the KVKK:
| Provider | Service | Country |
|---|---|---|
| Supabase | Database, sign-in, photo storage, server functions | Germany |
| Amazon Web Services | Photo moderation | Germany |
| PostHog | Usage measurement | Germany |
| Sentry | Crash reports | Germany |
| Expo | Sending notifications, app updates | United States |
| Apple | Sign in with Apple, iPhone notifications | United States |
| Google sign-in, Android notifications, support email | United States | |
| OpenFreeMap | Map images | Outside Türkiye |
| Cloudflare | Website and email forwarding | Global network |
To other users: your display name, username, photos, stickers, badges and titles are shown to other Gezenti users according to your profile privacy setting. Others see the place’s location, never yours.
Your rights
Under Article 11 of the KVKK, you have the right to:
- learn whether your personal data is processed;
- request information about it if it is;
- learn the purpose of the processing and whether the data is used for that purpose;
- know the third parties, in Türkiye or abroad, to whom it is transferred;
- ask for it to be corrected if it is incomplete or inaccurate;
- ask for it to be erased or destroyed under the conditions of Article 7 of the KVKK;
- ask for corrections, erasures and destructions to be notified to the third parties it was transferred to;
- object to a result against you that arises from analysis of your data exclusively by automated systems (for example, a capture rejected automatically);
- claim compensation if you suffer damage because your data was processed unlawfully.
You can delete your photos and your account from the app at any time; for the account, Profile → Delete account. Deletion happens at once and for good.
How to apply
You can send requests about your rights, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, in one of these ways:
- by an email signed with a secure electronic signature or mobile signature, to destek@gezentiapp.com;
- from the email address linked to your Gezenti account, to destek@gezentiapp.com.
If you hid your email with Sign in with Apple, you can write from another address and include your username. We’ll then contact you to confirm your identity.
Your application should include:
- your name and surname;
- your Turkish ID number (for foreign nationals, your nationality and passport or ID number);
- your residential or business address for notifications;
- if you have them, your email address, phone or fax number for notifications;
- what you’re requesting.
Including your username helps us find your account.
We’ll resolve your application as soon as possible, depending on its nature, and within 30 days at the latest, free of charge. If the request involves an additional cost, a fee from the tariff set by the Personal Data Protection Board may be charged.
If your application is rejected, you find our answer insufficient, or we don’t answer in time, you can complain to the Personal Data Protection Board within 30 days of learning our answer, and in any case within 60 days of your application.