1. About this notice
This is the notice required by Turkish Personal Data Protection Law No. 6698 (“KVKK”). CEKU is the data controller.
It covers the same ground as the Privacy Policy, in the structure the law asks for. The Turkish text is the operative one for KVKK purposes; this translation is provided for convenience.
Contact: [email protected]
2. Categories of data processed
| Category | Data |
|---|---|
| Identity | Name, surname, username, date of birth (optional) |
| Contact | Email address |
| Visual records | Profile photo, uploaded outfit photos and videos |
| Transaction security | IP address, country, device model, operating system, app version, session records, sign-in and security activity |
| User activity | Comments, likes, ratings, follows, product links |
| Special categories | Not processed. Height and weight are optional and used for sizing suggestions, not as health data. |
EXIF metadata on uploaded photos, location included, is removed at upload. No location data is processed.
3. Purposes of processing
- Creating and running your membership
- Providing the services the app offers
- Displaying content and operating social features
- Personalising the feed and search
- Information security and abuse detection
- Delivering account and security notifications
- Answering requests and complaints
- Meeting legal obligations
Your data is not processed for marketing or advertising.
4. Recipients and why
| Recipient | Purpose | Data |
|---|---|---|
| Google (Firebase) | Authentication, notification delivery, app integrity | Email, push token |
| Bunny.net | Storage and delivery of media | Uploaded media |
| Resend | Sending account and security email | Email address, name |
| Cloudflare | Information security, attack prevention | IP address, request metadata |
| Public authorities | Meeting a legal obligation | Limited to the scope of the request |
The database, the search infrastructure and the image-analysis model run on our own servers; no data is transferred to a third party for those.
Data is held on servers located in Germany. Transfers to the providers above are made under KVKK art. 9, on standard contractual clauses and your explicit consent.
5. Method and legal grounds of collection
Data is collected electronically through the mobile application, either because you provide it or because it is generated automatically as you use the app.
| Activity | Ground under KVKK art. 5 |
|---|---|
| Membership and delivery of the service | Necessary for a contract (5/2-c) |
| Security records, abuse detection | Legitimate interest (5/2-f) |
| Personalisation | Legitimate interest (5/2-f) |
| Sending notifications | Explicit consent (5/1) |
| Statutory retention and reporting | Legal obligation (5/2-ç) |
6. Retention
| Data | Kept for |
|---|---|
| Account and content | While the membership continues |
| After a deletion request | 30 days (cancellation window) |
| Session records | Cleared once expired |
| Security activity | 90 days |
| Backups | At most 30 days |
At the end of these periods data is deleted, destroyed or anonymised.
7. Your rights under KVKK art. 11
- Learn whether your data is processed
- Request information about it if it is
- Learn the purpose and whether it is used accordingly
- Know the third parties it is transferred to, at home or abroad
- Have incomplete or inaccurate data corrected
- Have it erased or destroyed under the conditions of art. 7
- Have corrections and erasures notified to those it was transferred to
- Object to a result reached solely by automated analysis
- Claim compensation for damage caused by unlawful processing
8. How to apply
Send requests to [email protected]. We answer as soon as possible and within thirty days at the latest, free of charge; where the action carries a cost, the tariff set by the Board may apply.
Access and deletion you can exercise yourself: Settings → Account holds data export and account deletion.
If a request is refused, you may complain to the Personal Data Protection Board.