Privacy Policy
This policy explains what data is processed, why and how, when you use the Halkora iOS app and the halkora.app website ("Halkora"). Data controller: [SORUMLU AD/UNVAN], contact: support@halkora.app.
Data we collect
- Account information. You can use the app as a guest; in that case only a name you choose and an automatically generated anonymous user ID (UUID) are stored. If you sign in with Apple, the identifier Apple shares with us and (unless you choose to hide it) your email address are linked to your account.
- Usage content. The challenges you create or join, your daily check-ins, your joker uses, your in-circle messages and your "wave" interactions. This content is shown only to other members of your circle; it is not public.
- Notification token. If you allow notifications, your device's push notification token (Expo Push token) is stored. You can revoke the permission any time from iOS settings.
- Language preference. Your app language (tr/en) is stored so notifications can be sent in the right language.
- Subscription status. If you purchase Halkora Pro, your subscription status is processed through our payment provider RevenueCat with an anonymous user ID via the App Store. Your payment details (card, etc.) never reach us; payment is handled entirely by Apple.
What we don't collect
- No ads, no advertising identifier, no third-party tracking SDKs.
- We use no analytics service and build no behavioral profiles.
- We do not request or access location, contacts, photos or microphone data.
- We do not sell your data to anyone.
Where data is processed
Data is stored on the servers of our infrastructure provider Supabase in the [SUPABASE_BOLGESI] region. Push notifications are delivered through Expo and Apple's notification services. Subscription validation is done through RevenueCat. These providers process your data only to provide these services.
Retention and deletion
Your data is kept for as long as your account is active. You can delete your account any time from within the app (Settings → Delete Account); your account, circles, check-ins and messages are permanently deleted. Details: halkora.app/hesap-silme. Expired invite links and technical logs are automatically cleared within reasonable periods.
Your rights
Under the Turkish DPL (KVKK) and GDPR you have the right to access, rectify, erase, object to processing of, and port your data. To make a request, write to support@halkora.app; we respond within 30 days at the latest.
Children
Halkora is not intended for children under 13. If we become aware of a user under 13, we delete their account and data.
Changes
If there is a meaningful change to this policy, we announce it from within the app or on this page. Questions: support@halkora.app