Privacy Notice Under the Law on the Protection of Personal Data
Monogam App | September 21, 2026
Pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (“KVKK”), we, Monotech Bilişim Teknoloji Anonim Şirketi, in our capacity as data controller, would like to inform you about the processing of your personal data as follows.
1. Identity of the Data Controller
- Company name: Monotech Bilişim Teknoloji Anonim Şirketi
- Tax No: 6211334496
- MERSIS No: 0621133449600001
- Email: [email protected]
- Application channels: Email or in-app form (Profile > Support > Privacy Request)
2. Personal Data Processed, Purposes and Legal Bases
Your personal data is processed within the framework of the following categories, purposes and legal bases:
| Data Category | Purpose of Processing | Legal Basis (KVKK Art. 5) |
|---|---|---|
| Identity: First name, last name, date of birth, gender, pronouns | Account creation, age verification, service provision | Performance of a contract (Art. 5/2-c) |
| Contact: Email address | Notifications, password reset | Performance of a contract (Art. 5/2-c) |
| Contact: Phone number | Identity verification via SMS OTP (NetGSM, AWS SNS and/or Firebase Authentication), single-account check | Performance of a contract (Art. 5/2-c) |
| Profile photo (mandatory, at least 1) | Profile creation and matching service | Performance of a contract (Art. 5/2-c) |
| Gender preference (who the user wants to see) | Matching algorithm | Explicit consent (Art. 5/1) — within the scope of special category data |
| Optional profile information: Relationship preference, hometown, location, occupation, school, sports, music, alcohol/tobacco, height, zodiac sign | Profile enrichment, improving match quality | Explicit consent (Art. 5/1) |
| Special category data: Religious belief, political views, sexual orientation, health habits | Profile enrichment (only if the user chooses to share) | Explicit consent (Art. 5/1) — KVKK Art. 6 |
| Profile prompt answers: Favorite film, date preference, favorite food, etc. | Profile personalization and matching | Explicit consent (Art. 5/1) |
| Chat question answers: Optional answers to questions on lifestyle, personal and dating topics opened via the “Get a Question” feature | Enriching communication between matches; shared only with the relevant match | Explicit consent (Art. 5/1) |
| Location data (approximate) | Matching with nearby users | Explicit consent (Art. 5/1) |
| All in-app activity, log records, interactions and private chat (messaging) content | Ensuring in-platform safety, content moderation, review of reports, protection of company rights and detection of necessary situations | Performance of a contract (Art. 5/2-c), Legitimate interest (Art. 5/2-f) and Establishment, exercise or protection of a right (Art. 5/2-e) |
| Payment transaction records | Subscription management, tax and accounting obligations | Legal obligation (Art. 5/2-ç) |
| Technical data: IP, device, logs | Security, error tracking, performance | Legitimate interest (Art. 5/2-f) |
| Marketing preferences | Delivery of campaigns via email and push notification | Explicit consent (Art. 5/1) |
Note: Special category personal data (religious belief, political views, sexual orientation, health habits) is processed only if the user optionally chooses to share it and their explicit consent is obtained. This data can never be made mandatory.
3. Methods of Collecting Personal Data
Your personal data is collected through the following methods:
- During registration, via phone number SMS OTP verification (through NetGSM, AWS SNS and/or Firebase Authentication)
- Through in-app forms during profile creation and updates
- Optionally, through the “Get a Question” feature on the match screen
- Through purchases made via the Apple App Store or Google Play Store
- Technical data collected automatically via Firebase Analytics
- Interaction and communication data generated while using the app
4. Parties to Whom Personal Data Is Transferred and Purposes of Transfer
Your personal data may be transferred to the following categories of recipients in Türkiye and abroad:
| Recipient | Data Transferred | Purpose and Location |
|---|---|---|
| AWS (Amazon Web Services) | All application data; technical logs for SMS verification (SNS) | Server infrastructure, SMS verification — Germany (Frankfurt) |
| NetGSM (Genel Mobil Telekomünikasyon Hizmetleri A.Ş.) | Phone number and SMS verification code | SMS OTP verification — Türkiye |
| Google Firebase | Technical and analytics data; phone number for identity verification | App performance and identity verification (Authentication) — USA |
| RevenueCat Inc. | Subscription and purchase data | Subscription management — USA |
| Apple App Store | Payment and app distribution data | App distribution and payment — Apple infrastructure |
| Google Play Store | Payment and app distribution data | App distribution and payment — Google infrastructure |
| Competent public authorities | Relevant data requested | Legal obligation — only upon a court order or official request |
Transfers of data abroad are carried out with appropriate safeguard mechanisms and within the scope of the Explicit Consent you have given pursuant to Article 9 of the KVKK. As NetGSM is based in Türkiye, it does not fall within the scope of transfers abroad. Apart from these transfers, your personal data is not shared with any third party — in particular, advertising platforms.
5. Retention Periods of Personal Data
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity and contact information | While the account is active + 30 days after deletion | Performance of a contract |
| SMS verification logs | 30 days after verification is completed | Performance of a contract |
| Profile information (mandatory and optional) | While the account is active + 30 days after deletion | Performance of a contract / explicit consent |
| Profile prompt and chat question answers | While the account is active + 30 days after deletion | Explicit consent |
| Location data | While the account is active + 30 days after deletion | Explicit consent |
| Messages and interaction data | While the account is active + 30 days after deletion | Legitimate interest |
| Moderation and report records | 1 year after the investigation is closed; for serious violations referred to judicial authorities, for the statutory limitation period | Establishment, exercise or protection of a right (Art. 5/2-e) |
| Payment records | 10 years (as required by tax legislation) | Establishment, exercise or protection of a right (Art. 5/2-e) |
| Technical logs and analytics | 12 months | Legitimate interest |
| Marketing preferences | Until consent is withdrawn | Explicit consent |
6. Your Rights Under Article 11 of the KVKK
Pursuant to Article 11 of the KVKK, you have the following rights:
- To learn whether your personal data is being processed
- If it has been processed, to request information about it
- To learn the purpose of processing and whether the data is used in accordance with that purpose
- To know the third parties to whom it is transferred in Türkiye or abroad
- To request correction if it has been processed incompletely or inaccurately
- To request its erasure or destruction under Article 7 of the KVKK
- To request that correction and erasure requests be notified to third parties
- To object to an outcome against you resulting from the analysis of processed data exclusively by automated systems
- To claim compensation if you suffer damage due to unlawful processing
To exercise these rights:
- Email: [email protected]
Pursuant to Article 13 of the KVKK, your applications will be concluded within 30 days at the latest, depending on the nature of the request. If your application is rejected, the response is found insufficient, or no response is given in time, you retain the right to file a complaint with the Personal Data Protection Board.
7. Withdrawal of Your Explicit Consent
You may withdraw your consent at any time for personal data processed on the basis of your explicit consent. Withdrawing your consent does not affect the legal validity of processing carried out before the withdrawal. You may submit consent withdrawal requests through the app’s contact channels.
8. Changes
This privacy notice may be updated in line with legislative changes or app updates. The current text will always be accessible within the app.
This notice entered into force on September 21, 2026.