Privacy Policy

This English text is a translation provided for convenience. The Turkish version prevails.

This text has been prepared to fulfill our duty to inform under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and to explain how your personal data is processed when you use the Kendinle app.

1. Identity of the Data Controller

The Kendinle app is published individually (by a natural person developer) by Burak Ersever, operating under the trade name "VOBUSA". App stores may show either our trade name or our real name as the publisher; in both cases, the responsible party is the person named here. The data controller under the KVKK is Burak Ersever ("Kendinle", "we").

• Trade name: VOBUSA
• Address: Adnan Kahveci Mah. Anadolu Cad. No: 17/1 Daire: 9, 34528 Beylikdüzü / İstanbul
• Email: destek@kendinle.com.tr

2. Personal Data We Process and How We Collect It

The data below is collected electronically while you use the app, either directly from you or through the app's automatic records:

• Identity and contact: email address, display name and profile photo, if any. If you sign in with Google or Apple, we receive only your email and name from that provider (when signing in with Apple, you can choose to hide your email).
• Usage data: the episodes you listen to, listening time, the series you complete, where you left off, your library and the content you download. We also record, as events, which screens you see and which steps you complete in the app (for example, opening the subscription screen or starting an episode) for aggregated statistics.
• Gamification data: experience points, daily streak, badges, cocoon level and your butterfly collection.
• Onboarding answers and interest profile: your answers to the survey, the growth areas derived from them, the interest categories you choose and your personal roadmap. Records created before August 30, 2026 may also include personality axis and archetype information; these fields are no longer generated.
• Your insight notes: the time-stamped personal notes you save while listening.
• Device data: operating system type, app version, the device push token for notifications, device model name and a random device identifier generated by the app. This identifier is used for two purposes: to apply the rule that an account is used on only one device at a time, and to measure, in aggregate, how far the onboarding steps are completed. The advertising ID (IDFA on iOS, AAID on Android) is processed only to measure our own advertising campaigns, as described below under third-party providers; on iOS, only if you allow the App Tracking Transparency prompt.
• Subscription data: subscription status, plan, start/end date and purchase events. We never access or store payment details such as your card number or expiry date; payment is handled entirely through the App Store / Google Play.
• Cancellation reason: if you use the in-app flow to cancel your subscription, we record the preset answer you give to the single question we ask (for example, price, content, time, a technical problem), along with your subscription status and plan at the time. Free text is NOT requested. You can also cancel your subscription directly from your App Store / Google Play account without using this step at all.
• Coupon use: the promo code you use and when you use it.
• Reward shipping details: your full name, phone number and delivery address, if you complete your butterfly collection and request a physical gift.
• Technical logs: error and crash logs, security-related activity logs and the IP address kept by our infrastructure provider during the connection.

We do NOT REQUEST and do NOT KNOWINGLY PROCESS special categories of personal data under KVKK Art. 6, such as health data, biometric data, religion or political opinions. We recommend that you do not write this kind of information in your insight notes.

3. Purposes of Processing and Legal Grounds

We process your data only for the purposes below and on the legal grounds stated next to each:

• Creating your account, verifying your identity, and managing your subscription and your access to content. Legal ground: establishment and performance of the contract (KVKK Art. 5(2)(c)).
• Saving your progress and managing your library and offline downloads. Legal ground: performance of the contract (KVKK Art. 5(2)(c)).
• Deriving a personality profile from your onboarding answers and personalizing content recommendations. Legal ground: your explicit consent (KVKK Art. 5(1)). You can decline to fill in the survey, and you can end this processing at any time by deleting your account; in that case, you can keep using the app without personalized recommendations.
• Running the gamification features (streak, badges, cocoon, butterflies). Legal ground: performance of the contract (KVKK Art. 5(2)(c)).
• Shipping physical rewards. Legal ground: performance of the contract (KVKK Art. 5(2)(c)); only if you request the reward.
• Preventing account sharing and unauthorized use (single device rule). Legal ground: legitimate interest (KVKK Art. 5(2)(f)) and performance of the contract.
• Fixing errors and ensuring security and continuity of the service. Legal ground: legitimate interest (KVKK Art. 5(2)(f)).
• Improving the service and the content catalog with aggregated statistics. Legal ground: legitimate interest (KVKK Art. 5(2)(f)).
• Measuring the effectiveness of our advertising campaigns (which campaign brings in members and subscribers). Legal ground: explicit consent for the advertising ID on iOS (App Tracking Transparency prompt), and legitimate interest for other events (KVKK Art. 5(2)(f)).
• Aggregating cancellation reasons to understand which aspects of the service need to be fixed. Answers are assessed as aggregate counts, not one by one. Legal ground: legitimate interest (KVKK Art. 5(2)(f)).
• Sending you notifications and promotional messages. Legal ground: your explicit consent (KVKK Art. 5(1)) and your approval under Law No. 6563.
• Fulfilling our legal obligations and responding to requests from competent authorities. Legal ground: legal obligation (KVKK Art. 5(2)(ç)) and establishing/protecting a right (KVKK Art. 5(2)(e)).

4. Personality Profile and Automated Assessment

We run your onboarding answers through an automated model to produce an interest profile (growth areas and category interests); we use it only to rank the content shown to you and to build your roadmap. This assessment is NOT a diagnosis of any kind or a psychological test, and it is not presented as a scientific scale.

This profile is never used as the basis for any decision that has legal effects for you or significantly affects you (credit, insurance, hiring and so on), and it is not sold or transferred to third parties for marketing. You keep the right to object to the result of the automated assessment (KVKK Art. 11(1)(g)).

5. Parties We Transfer Data To

We do not sell or rent your personal data, and we do not share it with third parties for marketing. Your data is transferred to the service providers below only to the extent necessary for us to provide the service:

• Supabase: authentication, database and file infrastructure.
• Cloudflare R2: hosting and delivery of audio and image files.
• RevenueCat: managing and verifying subscription status.
• Apple App Store / Google Play: purchases, billing, refunds and subscription management.
• Expo (Expo Push Notification Service): delivering notifications to your device.
• Sentry: monitoring error and crash logs.
• Mixpanel: in-app usage statistics (which screens are viewed, which steps are completed). Your name, email or phone number is NOT SENT to Mixpanel; only usage events and your user/device number, which does not directly reveal your identity, are sent. The data is processed on servers in the European Union.
• Meta (Facebook) SDK and Conversions API, and the TikTok Business SDK: measuring our own advertising campaigns. The events sent are install/open, sign-up, trial start and purchase; on Android, the advertising ID (AAID), and on iOS, the advertising ID (IDFA) only if you allow it. Your name, email and listening history are NOT SENT. If you do not allow it, measurement is done without identifiers, at an aggregate level.
• Shipping/logistics companies: only if you request a physical reward, and only your delivery details.
• Competent public authorities and institutions, and law firms: only when and to the extent required by law.

Our contracts with these providers require them to process the data only on our instructions and for the purpose of the service. There is no ad network SDK in the app that SHOWS ads. To measure whether our own advertising campaigns work, we use the Meta (Facebook) SDK, the Meta Conversions API and the TikTok Business SDK: the information that the app was installed and opened, along with sign-up, trial start and purchase events, is sent to Meta and TikTok. The purpose is to understand which ad actually brings in members and subscribers; your data is not combined with other companies' data, and it is not used to show you targeted ads. Your name, email and the content you listen to are not sent to Meta or TikTok. The analytics tools used are Mixpanel, listed above, and the Meta and TikTok SDKs, limited to this measurement.

6. Transfers Abroad

The servers of the providers above may be located abroad; as a result, your personal data is transferred abroad. Under KVKK Art. 9, the transfer is carried out on the basis of an adequacy decision announced by the Personal Data Protection Board, appropriate safeguards (standard contracts, binding corporate rules, a letter of undertaking) or, where these are not available, the exceptions in the Law or your explicit consent. You can request a copy of the appropriate safeguard documents.

7. Notifications and Commercial Electronic Messages

We send notifications about new content, reminders and campaigns only if you give notification permission on your device. You can turn off notifications at any time in the app (Profile → Notifications) or in your device's system settings; this counts as exercising your right to refuse messages and is free of charge.

Mandatory informational messages, such as those about account security, password resets or subscription status, are not commercial messages, so they may be sent even if you turn off notifications.

8. Ads and Sponsorships

We may show ads and sponsored content in the app. These are always clearly marked with an "Ad" or "Sponsored" label and can be told apart from the content.

• NO THIRD-PARTY AD NETWORKS ARE USED. Google AdMob, Meta Audience Network and similar ad networks are not included; all ads come directly from brands we have agreements with and are served only through our own system.
• NO behavioral targeting or cross-device tracking is used for ads in the app. Your personal data is NOT SHARED with advertisers; they receive only aggregated impression and click counts and are not told who you are. The advertising ID is processed only to measure our own campaigns, as described above.
• Ad formats: visual spaces in the app and short audio ads played at the start of an episode or between episodes.
• Which kinds of use show ads (free use and/or the Pro subscription) may change over time. The Pro subscription DOES NOT PROMISE AN AD-FREE EXPERIENCE, and the purchase screens make no such promise either; not showing ads to subscribers today is not a promise but a practice that may change.

9. Cookies and Similar Technologies

The mobile app does not use cookies; your session and preferences are kept in your device's local storage. Our website uses only cookies that are necessary (essential) for the site to work; we do not place marketing or profiling cookies.

10. Retention Periods

• Account, usage, gamification and profile data: for as long as your account is active; deleted or irreversibly anonymized within 30 days at the latest after you request account deletion.
• Your insight notes: deleted together with your account.
• Device record and push token: deleted when you sign out or delete your account.
• Reward shipping details: 1 year after delivery is completed (for possible delivery disputes), then deleted.
• Subscription and transaction records: for the limitation and retention periods set by the relevant legislation (as a rule, 10 years).
• Cancellation reason records: linked to your account and deleted along with it when you delete your account.
• Error and crash logs: up to 90 days.

You can permanently delete your account at any time in the app (Profile → Delete my account). Deleting your account DOES NOT AUTOMATICALLY CANCEL your subscription, which runs through the store; you must cancel the subscription separately from your App Store / Google Play account.

11. Data Security

Your data is encrypted with TLS in transit and protected on the server by access control rules (row level security); only you can access the records that belong to your account. Access to the admin panel is limited to authorized personnel, and passwords are stored in a non-reversible form. Even so, please keep in mind that no transfer over the internet can be guaranteed to be 100% secure.

12. Data Breach Notification

If we find that your personal data has been obtained unlawfully by others, we notify the Personal Data Protection Board as soon as possible and in any case within 72 hours, and we notify the people concerned within the shortest reasonable time.

13. Your Rights (KVKK Art. 11)

You have the following rights regarding your personal data:

• To learn whether your personal data is processed.
• To request information about it, if it has been processed.
• To learn the purpose of the processing and whether the data is used in line with that purpose.
• To know the third parties it is transferred to, domestically or abroad.
• To ask for it to be corrected if it is incomplete or inaccurate.
• To ask for it to be erased or destroyed under KVKK Art. 7.
• To ask for corrections, erasures and destructions to be notified to the third parties the data was transferred to.
• To object to an outcome against you that arises from analysis carried out exclusively by automated systems.
• To claim compensation if you suffer damage because of unlawful processing.

You can also withdraw the explicit consent you have given at any time; withdrawal does not affect the lawfulness of processing carried out up to that point.

14. How to Apply

To exercise your rights, you can send your requests, together with information that identifies you, in writing to destek@kendinle.com.tr or to Adnan Kahveci Mah. Anadolu Cad. No: 17/1 Daire: 9, 34528 Beylikdüzü / İstanbul. We resolve your request free of charge within 30 days at the latest, in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller"; if the process requires an additional cost, a fee may be charged according to the tariff set by the Board. If your application is rejected or not answered in time, you can file a complaint with the Personal Data Protection Board.

15. Children's Privacy

The app is not intended for children under 13, and we do not knowingly collect data from this age group. If you are between 13 and 18, you may use the app only with the knowledge and consent of your parent or guardian. If we find that we are processing data belonging to a user under 13, we delete the record without delay; parents who notice such a case can contact us.

16. Changes

We may update this policy due to changes in legislation or new features. The current text is always published in the app and on our website; for material changes, we also inform you with an in-app notification.

17. Contact

For all your privacy questions and requests: destek@kendinle.com.tr