KVKK Information Notice
Last updated: 15 October 2026
This notice is provided under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") to inform users of the Privyu app and website about the processing of their personal data. This English version is for information; the Turkish text prevails.
1. Data Controller
Company: [ŞİRKET UNVANI]
Address: [ŞİRKET ADRESİ]
MERSIS: [MERSİS NO] · KEP: [KEP ADRESİ]
Email: kvkk@privyu.com
2. Categories of Personal Data
- Identity: name, brand name
- Contact: phone number
- Visual records: product photos and images of people in them, AI-generated images
- Customer transactions: follow relationships, favourites, order requests, subscription and credit history
- Transaction security: verification code logs, session data, IP address, device notification token
- Third-party data: names and phone numbers of contacts uploaded by producers from their address book
- Marketing: (only if permitted) commercial message preference
- Legal: consent records, complaint and request records
3. Purposes
- Running membership and identity verification
- Publishing and sharing products and collections and presenting them to followers
- Providing AI-assisted image editing and product analysis
- Delivering order requests and notifications
- Managing subscriptions, trials and credits
- Statistics and service improvement
- Information security, preventing abuse and unlawful content
- Handling requests and complaints, providing information to authorities
4. Legal Bases and Collection Method
Your personal data is collected electronically, by automated or partly automated means, via the mobile app, website, email and store (App Store / Google Play) notifications. Legal bases:
- Directly related to the conclusion or performance of a contract (KVKK Art. 5/2-c)
- Compliance with a legal obligation (Art. 5/2-ç)
- Establishment, exercise or protection of a right (Art. 5/2-e)
- Legitimate interest, provided it does not harm your fundamental rights (Art. 5/2-f)
- Explicit consent (Art. 5/1): contact upload, transfer to AI providers abroad, marketing messages
5. Transfers
Your personal data may be transferred, limited to the purposes above, to our hosting, storage, notification, SMS/WhatsApp, subscription management and AI providers; to Apple and Google for payments; to producers you follow or send a follow request to (name, phone, company name if any, and country); and to competent public authorities. Provider categories and their countries are listed in the Privacy Policy.
Transfers abroad are made under KVKK Art. 9, relying on appropriate safeguards (such as standard contracts) where available and otherwise on your explicit consent.
6. Your Rights under KVKK Art. 11
- Learn whether your personal data is processed and request information if so
- Learn the purpose of processing and whether data is used accordingly
- Know the third parties in Türkiye or abroad to whom data is transferred
- Request rectification of incomplete or inaccurate data
- Request erasure or destruction under KVKK Art. 7
- Request that rectification and erasure be notified to third parties who received the data
- Object to a result against you arising from analysis exclusively by automated systems
- Claim compensation if you suffer damage due to unlawful processing
7. How to Apply
You can submit requests about your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:
- by email to kvkk@privyu.com,
- by signed letter to [ŞİRKET ADRESİ],
- by registered electronic mail (KEP) to [KEP ADRESİ].
Your application must include your full name, registered phone number, the subject of your request and your contact details. Requests are concluded free of charge within 30 days. To delete your account you can also use "Delete My Account" in the app or https://www.privyu.com/hesap-silme.
In case of any conflict between translations, the Turkish text prevails.