Privacy notice (KVKK Aydınlatma metni)

PratikYedek's privacy notice fulfills the disclosure obligation of KVKK Article 10 — informing data subjects about how their personal data is processed.

Canonical URLs

• Turkish (authoritative): https://pratikyedek.com/tr/legal/aydinlatma
• English (parity v1.1): https://pratikyedek.com/en/legal/aydinlatma

Note: The Turkish version is the legal source. The English version is a parity translation maintained for international clarity. If the two differ, the Turkish version prevails.

What the privacy notice covers

The privacy notice has 10 sections:

1. Data controller identity — PratikYedek Yazılım (Berhan Tecer); contact details
2. Categories of personal data — identity, contact, financial, transactional, device, location (mobile), KVKK consent records
3. Purpose of processing — service delivery, KVKK consent management, security, legal compliance
4. Legal grounds — KVKK § 5/2 (contract, legal obligation, legitimate interest), § 6 (explicit consent for special categories)
5. Security measures — AES-256-GCM, Argon2id, TLS 1.3, WAL + PITR, audit-share Ed25519 signatures
6. Retention periods — service data 10 years (VUK), audit logs 10 years (TTK), consent records 5 years post-account-deletion (KVKK § 12 evidence)
7. Data subject rights — full KVKK § 11 (9 rights with 30-day response, cooldown notice)
8. Third parties — payment processors (PaynKolay), e-archive (Foriba), SMS providers, hosting (VDS in Turkey)
9. Cross-border transfer — only with explicit consent (BYOS Google Drive/OneDrive); tax-advisor plan never transfers
10. Application channels — in-app form, email, registered mail (KEP)

When you'll see it

• During sign-up — explicit consent checkbox + per-section ConsentModal
• Before connecting BYOS — additional § 9 consent
• When adding a tax-advisor client (mukellef) — separate consent for client data
• In the footer of every page — link to canonical URL

Version history

• v1.0 — 29 Apr 2026 — initial publication (Turkish)
• v1.1 — 11 May 2026 — mobile-specific additions (Device ID, FCM token, Android API level disclosure), EN parity translation

How to file a KVKK § 11 request

You have 9 rights under KVKK § 11 (information, access, correction, deletion, restriction, portability, automation, complaint, damages).

To exercise any of them:

1. In-app — Settings → Account → "KVKK Application Form" (preferred; auto-fills your identity)
2. Email — kvkk@pratikyedek.com (PGP key on https://pratikyedek.com/tr/legal/pgp)
3. Registered mail (KEP) — pratikyedek@hs01.kep.tr

Response time: 30 days from receipt (KVKK § 13). A 30-day cooldown applies between repeated requests on the same right.

See also:

• Data deletion request
• Data residency
• Security FAQ