KVKK Disclosure Notice
Monogam App · Last updated: 10 August 2026
Pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (‘KVKK’), as the data controller of the Monogam application, we wish to inform you as follows regarding the processing of your personal data.
1. Identity of the Data Controller
Title: Taha Dülgar Email: [email protected] Application channels: email
2. Personal Data Processed, Purposes, and Legal Bases
Your personal data is processed within the framework of the following categories, purposes, and legal bases:
| Data Category | Purpose of Processing | Legal Basis (KVKK Art. 5) |
|---|---|---|
| Identity: First name, last name, date of birth, gender, pronouns | Account creation, age verification, service provision | Performance of a contract (Art. 5/2-c) |
| Contact: Email address | Account verification (Firebase Authentication), notification, password reset | Performance of a contract (Art. 5/2-c) |
| Contact: Phone number | Identity authentication via SMS OTP (AWS SNS or Firebase Authentication), single-account control | Performance of a contract (Art. 5/2-c) |
| Profile photo (mandatory, at least 1) | Profile creation and matching service | Performance of a contract (Art. 5/2-c) |
| Gender preference (whom they wish to see) | Matching algorithm | Explicit consent (Art. 5/1) — special category data scope |
| Optional profile information: Relationship preference, hometown, location, occupation, school, sports, music, alcohol/smoking, height, zodiac sign | Profile enrichment, improving match quality | Explicit consent (Art. 5/1) |
| Special category data: Belief, political views, sexual orientation, health habits | Profile enrichment (only if the user chooses to share) | Explicit consent (Art. 5/1) — KVKK Art. 6 |
| Profile prompt responses: Favorite movie, date preference, favorite food, etc. | Profile personalization and matching | Explicit consent (Art. 5/1) |
| Chat question responses: Optional responses to lifestyle, personal, and dating questions opened via the ‘Get a Question’ feature | Enriching communication between matches; shared only with the relevant match | Explicit consent (Art. 5/1) |
| Location data (approximate) | Matching with nearby users | Explicit consent (Art. 5/1) |
| All in-app activity, log records, interactions, and private chat (messaging) content | Ensuring in-platform security, content moderation, complaint review, protection of company rights, and detection of necessary circumstances | Performance of a contract (Art. 5/2-c), Legitimate interest (Art. 5/2-f), and Establishment, exercise, or protection of a right (Art. 5/2-e) |
| Payment transaction records | Subscription management, tax and accounting obligations | Legal obligation (Art. 5/2-ç) |
| Technical data: IP, device, logs | Security, error tracking, performance | Legitimate interest (Art. 5/2-f) |
| Marketing preferences | Delivery of campaigns via email and push notification | Explicit consent (Art. 5/1) |
Note: Special categories of personal data (belief, political views, sexual orientation, health habits) are processed only if the user optionally chooses to share them and explicit consent is obtained. Such data can under no circumstances be made mandatory.
3. Methods of Collecting Personal Data
Your personal data is collected through the following methods:
- During registration, phone number SMS OTP verification (via AWS SNS or Firebase Authentication) and email verification (via Firebase Authentication)
- Through in-app forms during the profile creation and update process
- Optionally via the ‘Get a Question’ feature on the matching screen
- Through purchase transactions carried out via the Apple App Store or Google Play Store
- Technical data collected automatically via Firebase Analytics
- Interaction and communication data generated during use of the application
4. Parties to Whom Personal Data Is Transferred and Purposes of Transfer
Your personal data may be transferred domestically and abroad to the following recipient categories:
| Recipient | Data Transferred | Purpose and Location |
|---|---|---|
| AWS (Amazon Web Services) | All application data; technical logs for SMS verification (SNS) and email verification (SES) | Server infrastructure, SMS and email verification — Germany (Frankfurt) |
| Google Firebase | Technical and analytics data; email and phone number for authentication | Application performance and authentication (Authentication) — USA |
| RevenueCat Inc. | Subscription and purchase data | Subscription management — USA |
| Apple App Store | Payment and application distribution data | Application distribution and payment — Apple infrastructure |
| Google Play Store | Payment and application distribution data | Application distribution and payment — Google infrastructure |
| Competent public authorities | Relevant data as requested | Legal obligation — only upon court order or official request |
Cross-border data transfers are carried out with appropriate safeguard mechanisms within the scope of the Explicit Consent you have provided pursuant to Article 9 of the KVKK. Outside of these transfers, your personal data is not shared with any third party — in particular, advertising platforms.
5. Retention Periods for Personal Data
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity and contact information | While the account is active + 30 days after deletion | Performance of a contract |
| SMS and email verification logs | 30 days after verification is completed | Performance of a contract |
| Profile information (mandatory and optional) | While the account is active + 30 days after deletion | Performance of a contract / explicit consent |
| Profile prompt and chat question responses | While the account is active + 30 days after deletion | Explicit consent |
| Location data | While the account is active + 30 days after deletion | Explicit consent |
| Messages and interaction data | While the account is active + 30 days after deletion | Legitimate interest |
| Moderation and complaint records | 1 year after the investigation is closed; for serious violations referred to judicial authorities, for the applicable legal statute of limitations period | Establishment, exercise, or protection of a right (Art. 5/2-e) |
| Payment records | 10 years (pursuant to tax legislation) | Establishment, exercise, or protection of a right (Art. 5/2-e) |
| Technical logs and analytics | 12 months | Legitimate interest |
| Marketing preferences | Until consent is withdrawn | Explicit consent |
6. Your Rights under KVKK Article 11
Pursuant to Article 11 of the KVKK, you have the following rights:
- To learn whether your personal data is being processed
- If processed, to request information relating thereto
- To learn the purpose of processing and whether it is used in accordance with its purpose
- To know the third parties to whom it is transferred domestically or abroad
- To request correction if processed incompletely or inaccurately
- To request deletion or destruction under KVKK Art. 7
- To request that correction and deletion requests be notified to third parties
- To object to a result against you arising from analysis of processed data exclusively by automated systems
- To claim compensation if you suffer damage due to unlawful processing
To exercise these rights:
- Email: [email protected]
Your applications will be concluded within no later than 30 days depending on the nature of the request, pursuant to Article 13 of the KVKK. If the application is rejected, the response is found inadequate, or no response is given within the time limit, you retain the right to lodge a complaint with the Personal Data Protection Board.
7. Withdrawal of Your Explicit Consent
For personal data processed on the basis of your explicit consent, you may withdraw your consent at any time. Withdrawal of your consent does not affect the lawfulness of processing carried out before withdrawal. You may submit consent withdrawal requests through the application’s contact channels.
8. Changes
This disclosure notice may be updated in line with legislative changes or application updates. The current text will always be accessible within the application.
This notice entered into force on 10 August 2026.