This information notice is prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), based on the KAYNAC Privacy Policy. See the Privacy Policy for details.
1. Data Controller
Your personal data is processed by KAYNAC as the data controller.
- Data controller: Çağlar Akman Web Tasarım ve Danışmanlık Hizmetleri ("KAYNAC")
- Address: Yenigün Mahallesi 222/14 Sokak No: 43 Daire: 2, Buca / İzmir, Türkiye
- Tax office: Şirinyer
- Tax no: 0310406013
- Contact: support@kaynac.com (there is no telephone line; please contact us by email)
2. Personal Data Processed
- Identity: Name, surname, date of birth, and, where necessary under KVKK, Turkish ID number.
- Contact: Email address, phone number, mailing address.
- Customer transactions: Requests, offers, transaction history, wallet and credit activity, support tickets.
- Finance: Payment history and billing details. KAYNAC does not store card numbers; only the last 4 digits are kept for receipts. For in-app purchases only the store's transaction record is received.
- Transaction security: Sign-in methods (email address, phone number, Google or Apple account identifier), hashed session keys, IP address, device and browser information. The Platform does not use or store passwords.
- AI conversations: Messages written to the Kaynac AI assistant and its answers.
- Device and notifications: Push notification token and notification preferences.
- Marketing: Campaign and announcement preferences, if you gave explicit consent.
3. Purposes of Processing
- Providing the Platform's services and running membership and sign-in.
- Running request, offer and credit transactions.
- Processing payments and ensuring financial security.
- Providing customer service and technical support.
- Letting the Kaynac AI assistant produce suggestions and answers when the user asks.
- Sending email, in-app and push notifications.
- Complying with legal obligations and regulations.
- Preventing and detecting fraud and misuse.
- Improving the user experience.
- Sending campaigns and service announcements, if you gave explicit consent.
4. Recipients and Purposes of Transfer
Your personal data may be transferred, limited to the purposes above, to:
- Service providers: iyzico (card payments on the web), Apple and Google (in-app purchases, sign-in with Apple and Google), Google Firebase Cloud Messaging (push notifications), OpenAI (the Kaynac AI assistant), email and SMS delivery providers (sign-in links, verification codes, notifications).
- Suppliers and business partners: to a limited extent, to run the Platform and meet requests.
- Authorised public bodies: upon court orders, legal proceedings or requests from official authorities.
Transfers Abroad
OpenAI, Google and Apple services may process data on servers outside Türkiye. These transfers take place in line with the conditions and safeguards of KVKK Article 9 and only as far as needed to provide the service concerned.
5. Collection Method and Legal Grounds
Your personal data is collected electronically through the website and the mobile apps: membership, sign-in, request and offer forms, payment steps, the Kaynac AI assistant, support tickets and cookies.
It is processed on the following legal grounds under KVKK Article 5:
- It is directly related to the conclusion or performance of a contract (Article 5/2-c).
- It is necessary for the data controller to fulfil a legal obligation (Article 5/2-ç).
- It is necessary to establish, exercise or protect a right (Article 5/2-e).
- It is necessary for the data controller's legitimate interests, provided your fundamental rights and freedoms are not harmed (Article 5/2-f).
- Where none of the above applies, in particular for marketing, advertising, analytics and profiling, your explicit consent (Article 5/1).
6. Retention
Personal data is retained as long as the purpose of processing requires or as long as the law prescribes. When you delete your account in the app, your sign-in methods, contact details and sessions are removed; financial records (the credit ledger) are kept because of legal obligations.
7. Your Rights under KVKK Article 11
Under KVKK Article 11, by applying to the data controller you have the right to:
- Learn whether your personal data is processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether it is used accordingly,
- Know the third parties in Türkiye or abroad to whom it is transferred,
- Request correction if it is incomplete or inaccurate,
- Request deletion or destruction under the conditions of KVKK Article 7,
- Request that correction, deletion or destruction be notified to third parties to whom the data was transferred,
- Object to a result against you arising from analysis exclusively by automated systems,
- Claim compensation if you suffer damage from unlawful processing.
You can also export a copy of your data as JSON in the app (the download link is valid for 7 days) and delete your account under Settings > Account > "Delete account".
8. How to Apply
You can send requests about your rights to support@kaynac.com. Under KVKK Article 13, applications are concluded free of charge within thirty days at the latest, depending on the nature of the request.