LEGAL
KVKK notice
Last updated: September 28, 2026
This notice is provided under Article 10 of Türkiye's Personal Data Protection Law No. 6698 ("KVKK") for users of the Caffculator app and caffculator.com. For full details, see our Privacy Policy.
1. Data controller
Öncü Hazar Gürgün
Address: İzmir, Türkiye
Email: support@caffculator.com
2. Personal data processed
| Category | Data |
|---|---|
| Identity and contact (only if you link an account) | Email address, Apple or Google account ID; with Google sign-in, the name and profile photo address Google sends (not used) |
| Customer transactions | Drink and water logs, favorites, custom drinks, badges, goals, cups per day, usual drinks, coffee times, sleep quality, bedtime and wake time, limit and water preferences, theme and units, notification settings, last day the app was opened, account deletion survey answer (not linked to you) |
| Physical characteristics | Weight, height, birth year, sex |
| Health (special category) | Pregnancy or breastfeeding, doctor restriction, caffeine sensitivity; version and date of your explicit consent |
| Transaction security | Anonymous user ID, one-way hash of the recovery key, device attestation (App Check) tokens, IP address, server logs, push token, device language, time zone, app version, installation ID, one-way hash of IP and email address (abuse counters) |
3. Purposes
- Providing the app's core features: calculating your personal caffeine limit, the caffeine in your body and your water goal, and storing your logs
- Sending the reminders you request
- Protecting your account, restoring it after a reinstall or on another device, and handling sign-in
- Sending transactional emails
- Ensuring information security and fixing errors
- Responding to your requests and support messages
- Meeting legal obligations
4. Legal grounds
- KVKK Art. 5/2-c: Necessary for the performance of a contract (providing the app)
- KVKK Art. 5/2-f: Legitimate interest (information security, error fixing)
- KVKK Art. 5/2-ç: Compliance with legal obligations
- KVKK Art. 6/2: Your explicit consent for health data (collected in the app; you can withdraw it any time with Settings › Data & privacy › Withdraw health data consent)
- KVKK Art. 9: Your explicit consent and the appropriate safeguards set out in the law for transfers abroad
5. How data is collected
Electronically and automatically, through the information you enter in the app, your use of the app, Apple/Google sign-in services and server logs.
6. Transfers
To provide the service, your personal data is transferred to these providers located abroad:
- Google LLC / Google Ireland Ltd. (Firebase: authentication, database, server operations, security, web hosting; data stored on servers in Europe)
- Resend, Inc. (email delivery; Ireland)
- Apple Inc. (Sign in with Apple)
- Google LLC (Sign in with Google; Gmail for support correspondence)
Transfers abroad rely, under KVKK Article 9, on your explicit consent and the appropriate safeguards set out in the law (standard contracts and the providers' security commitments). Your data is not shared with any other third party, sold or used for advertising. It may be disclosed to competent public authorities only when required by law.
7. Retention
Your data is kept until you delete your account. When you do, all of it is permanently deleted. Server logs are kept for up to 30 days and abuse counters for 1 hour. Account deletion survey answers are kept separately from your identity for 24 months. If an account you haven't protected (anonymous) isn't opened at all for 24 months, the account and all its data are deleted automatically. We don't keep a separate backup of your data.
8. Your rights under KVKK Article 11
You have the right to learn whether your data is processed; request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties it is transferred to in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction under Article 7; request that corrections and deletions be notified to third parties; object to outcomes against you arising solely from automated analysis; and claim compensation for damages caused by unlawful processing.
You can export your data (Settings › Data & privacy › Export my data) and delete it (protected account: Settings › Account › Delete account; anonymous: Settings › Data & privacy › Delete my account and data) yourself in the app. Send any other request to support@caffculator.com. We will respond free of charge within 30 days.