KVKK Disclosure Notice
Last updated: August 2026
11. Data Controller
Ömer Yıldız (individual developer, Pofide) — contact: info@pofide.com — website: pofide.com. No company / MERSIS / KEP as individual developer (VERBIS exempt: <50 employees, <25M TRY).
22. Data Categories & Collection Method
Identity: email. Contact: email. Customer transactions: credits, purchase history, subscription status (via store billing). Transaction security: IP, device OS/app version for fraud prevention. Marketing: none. All collected via membership forms (web/mobile) and in-app SDKs.
33. Purposes & Legal Basis
Account creation & authentication (KVKK Art.5/2-c, GDPR Art.6(1)(b) contract); subscription & billing (contract); fraud/security & legal compliance (legitimate interest, KVKK 5/2-ç/f); communication & support (contract/legitimate interest). No data processed solely on explicit consent except optional marketing (not currently used).
44. Transfers & Recipients
Recipients: secure cloud infrastructure provider (auth/database, EU/US, SCC + TLS), subscription/payment management provider (App Store/Play Billing, store billing only). No sale to third parties. Documents are not transferred — processing is local on device.
55. Retention & Disposal
Account data retained while account active. Upon deletion: immediate erasure of profile, credits, transactions, tokens; only a one-way SHA-256 hash of email may be kept in a blocklist for fraud prevention (irreversible). No document data retained (local-only).
66. Your Rights (KVKK Art.11, GDPR Art.15-22)
You may: learn if data processed, request information, learn purpose & third parties, request correction and notification to third parties, request deletion/erasure and notification, request notification of correction/deletion to third parties, object to automated processing, request data portability, object to processing, and claim damages. Exercise via info@pofide.com or pofide.com/delete-account.
77. Application Method & Complaint
Apply via info@pofide.com from your account email (include email + request type). We respond within 30 days (usually 1 business day). If unsatisfied, you may complain to the KVK Board (kvkk.gov.tr) and your local supervisory authority (GDPR Art.77). No KEP required for individual developer.