Privacy Notice (KVKK)
Privacy Notice under KVKK
Last updated: 4 October 2026
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform you about the personal data processed through the Vibed mobile app and letsvibed.com ("Vibed"). See also the Privacy Policy. The Turkish version of this notice prevails.
1. Data controller
Your personal data is processed by Berk Bıyıkçı, developer of the Vibed app ("Vibed", "we"), as data controller.
Contact: [email protected]
2. Personal data we process
| Category | Data |
|---|---|
| Identity and account | Display name, username (@), profile photo (if you upload one), email address when you sign in with Apple / Google, Firebase user ID, age statement and its date, app language |
| Social connections | Your friend and partner connections, connection requests, people you blocked, your friend code and invite links |
| Game and quiz data | Decks you play and your progress, your quiz answers and results, the visibility you chose for your results, your answers in sessions you play together, comparison and match results, cards you save or like |
| Reports | The card, question, person or invite you report, the reason and your optional note |
| Purchases | Subscription and one-off purchase records (payment details stay with Apple / Google and never reach us) |
| Device and usage | Push notification (FCM) token, device model and operating system, in-app interaction events, crash and performance logs, advertising ID (on iOS only if you allow it) |
| Communication | Your support and feedback messages, your email preference |
Special category data: Your answers and results in 18+ (Erotic) quizzes may reveal information about your sex life. Under Article 6 of KVKK this is special category personal data and is processed only with your explicit consent (see Explicit Consent). Results of these quizzes are visible to "Only me" by default.
3. Purposes and legal grounds
| Purpose | Legal ground (KVKK Art. 5/2 and 6) |
|---|---|
| Creating your account, signing in and providing the app's core features (decks, quizzes, results, keeping your progress across devices) | Formation and performance of a contract (Art. 5/2-c) |
| Friend and partner connections, playing together, comparisons, the weekly friend ranking and showing your results to friends according to your visibility choice | Performance of a contract (Art. 5/2-c) |
| Processing answers and results of 18+ quizzes | Explicit consent (Art. 6/2) |
| Sending you relevant notifications (your turn, results ready, connection requests) | Performance of a contract (Art. 5/2-c) |
| Managing subscriptions and purchases, accounting and tax records | Performance of a contract and legal obligation (Art. 5/2-c, ç) |
| Security, preventing abuse, reviewing content and user reports, enforcing blocks, the username filter | Legitimate interest (Art. 5/2-f) and legal obligation (Art. 5/2-ç) |
| Measuring and improving the app (analytics, crash reports) | Legitimate interest (Art. 5/2-f) |
| Ad measurement and personalised ads using the advertising ID | Explicit consent (Art. 5/1); on iOS also Apple's tracking permission |
| Marketing emails | Explicit consent / commercial electronic message approval |
| Protecting our rights in disputes and answering competent authorities | Establishment, exercise or protection of a right and legal obligation (Art. 5/2-e, ç) |
4. How we collect data
Automatically and partly automatically: from what you enter in the app, Apple / Google sign-in, your actions in the app (answers, connections, reports), SDKs on your device (Firebase, Mixpanel, Sentry, RevenueCat, Google AdMob, Meta) and our website when you open an invite link.
5. Who sees it and who receives it
Other users: People who want to add you and your connections see your username, display name and profile photo. Your connections see your quiz results according to the visibility you choose ("My friends", "Only my partner", "Only me"). The result and comparison of a quiz you solved together are always visible to the people who solved it with you. Other users' results cannot be read directly from the app; visibility is enforced on the server.
Service providers (processors):
| Provider | Purpose | Location |
|---|---|---|
| Google Firebase (Authentication, Firestore, Cloud Functions, Storage, Cloud Messaging, Analytics, Remote Config) | Infrastructure, database, notifications, analytics | EU (Belgium, europe-west1) and USA |
| Mixpanel | Product analytics | EU data centre |
| RevenueCat | Subscription management | USA |
| Sentry | Crash and error logs | USA / EU |
| Google AdMob | Ads for free users | USA |
| Meta (Facebook App Events) | Ad measurement and install attribution | USA / EU |
| Apple, Google | Sign-in, app stores and payments | USA |
Transfers abroad: Some of these providers' servers are outside Türkiye. Transfers rely on the appropriate safeguards in Article 9 of KVKK (standard contracts); in occasional cases where these are not available, on your explicit consent.
Authorities: When and as far as competent public bodies require it by law.
6. Retention
- Account data is kept while your account is open.
- When you delete your account in the app, your profile, username, friend code, connections, results, session participation and answers, invites and your traces in friends' feeds are deleted.
- Friend feed items are deleted after 30 days.
- When a partner bond ends, the couple's shared sessions are hidden for 30 days, then deleted.
- Subscription and purchase records are kept for the periods required by tax and accounting law.
- Analytics and crash records are kept for the retention period of the relevant provider.
- Reports are deleted once reviewed and any dispute periods have passed.
7. Your rights (KVKK Art. 11)
You may apply to us to learn whether your personal data is processed and request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties it is transferred to in Türkiye or abroad, request correction if it is incomplete or inaccurate, request its deletion or destruction, request that these actions be notified to the third parties it was transferred to, object to a result against you arising exclusively from automated analysis, and claim compensation for damage caused by unlawful processing.
You may withdraw your explicit consent at any time; withdrawal does not affect processing before it.
Send your request to [email protected] with information that lets us verify you (the email or username on your account). Requests are answered free of charge within 30 days at the latest. You can also delete your account and data yourself in the app under Settings → Delete Account.