TR EN ← Home
Legal — KVKK

Privacy Notice on the Processing of Personal Data

Last updated: 12 July 2026

This Privacy Notice has been prepared to inform users of the Ruconn mobile app about the processing of their personal data, within the scope of Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”).

This document is not a Privacy Policy, terms of use, contract, or explicit-consent text. Reading this notice or using the service does not mean that you have given general explicit consent to the processing of your personal data.

1. Identity of the Data Controller

Your personal data is processed as data controller under the KVKK by Ruconn Teknoloji Yazılım Limited Şirketi.

2. Scope

This Privacy Notice covers users who register for the Ruconn mobile app, event participants, organization/club members, organization/club administrators or users in an authorized role, group and event chat users, and users who create support requests.

Ruconn is designed to serve only the Turkish market and is intended for persons aged 18 and over.

3. Categories of Personal Data Processed

The following categories of personal data may be processed within Ruconn:

A) Identity data

B) Contact data

C) Profile and user preferences

D) Transaction security / device / session data

E) Event and participation data

F) Organization and club data

G) User content and communication

H) Moderation and security

I) Support data

J) Notification data

Data not processed: Within Ruconn V1, health data, payment/credit card information, ID or passport documents, biometric data, and advertising identifiers are not processed.

4. Purposes and Legal Bases for Processing Personal Data

Your personal data is processed for the purposes summarized in the table below and based on the legal bases specified.

Data category / processing Purpose of processing Legal basis
Identity and contact data (name, surname, username, email, phone, account status) Account creation, login, identity verification, and provision of the core Ruconn service KVKK Art. 5/2-c — being directly related to the conclusion or performance of a contract
Password verification data Identity verification and ensuring account security KVKK Art. 5/2-c
Date of birth Account and profile management; assessment of age eligibility KVKK Art. 5/2-c
Basic profile data (profile photo, city, biography) Profile creation, display, and account management KVKK Art. 5/2-c
Sport preferences and level data Profile completion, discovery, and provision of the club/event experience KVKK Art. 5/2-c
Notification preferences Management of the delivery channels for service notifications KVKK Art. 5/2-c
Session logs Session management and providing authenticated access KVKK Art. 5/2-c
Device data Device registration, session matching, and secure provision of the service KVKK Art. 5/2-c
Security logs Ensuring account and platform security, preventing abuse KVKK Art. 5/2-f — legitimate interest of the data controller
Push notification identifiers Technical delivery of service notifications to the device KVKK Art. 5/2-c
Email and SMS verification processes Delivery of verification codes within the scope of registration, login, and account security KVKK Art. 5/2-c
Event and participation data Event creation, participation, check-in (attendance verification), and attendance management KVKK Art. 5/2-c
Event location data Determining, displaying, and providing the event location KVKK Art. 5/2-c
Organization/club membership, role, authority, and invitation data Carrying out membership, role, authority, and invitation processes KVKK Art. 5/2-c
Club follow data Carrying out follow actions initiated by the user KVKK Art. 5/2-c
Group and event chat content Enabling the club and event communication used by the user KVKK Art. 5/2-c
User content (posts, photos) Providing the event content shared by the user KVKK Art. 5/2-c
Notification records Delivery of service, security, and transactional notifications KVKK Art. 5/2-c
Block, report, and account restriction records Platform security, protection of users, and moderation operations KVKK Art. 5/2-f
Support requests Receiving, reviewing, and responding to support requests submitted by the user KVKK Art. 5/2-c
Aggregated organization statistics Providing limited operational performance metrics to authorized club members KVKK Art. 5/2-f
Legal obligation records Fulfillment of the data controller’s legal obligations KVKK Art. 5/2-ç — being mandatory for the data controller to fulfill its legal obligation
Dispute and right-protection records Resolution of disputes; establishment, exercise, or protection of a right KVKK Art. 5/2-e

Distinction between the notice and explicit consent: The duty to inform is independent of explicit consent. Since Ruconn does not carry out marketing communications, advertising tracking, or similar activities, no general explicit consent is requested for the processing activities above. The push notification permission you grant from your device is an operating-system permission required for notifications to be technically delivered to your device; it does not replace a separate explicit consent under the KVKK. Where a separate data processing activity requiring explicit consent arises, the relevant explicit consent is requested separately and explicitly.

5. Method of Collecting Personal Data

Your personal data is collected;

by fully or partially automated means, or by non-automated means provided that it is part of a data recording system.

6. Transfer of Personal Data

Your personal data may be transferred, only to the extent necessary, to the following groups of recipients:

A) Other users

B) Organizations and organizers

C) Service providers

Provider Purpose of transfer Categories of data that may be transferred
Supabase Group and event chat and real-time messaging infrastructure Chat messages, room membership, read status, related user identifiers
Google Firebase Cloud Messaging Push notification delivery Push notification identifier, notification title/body, related routing and technical information
Twilio SMS verification Phone number, verification message content
Email delivery provider Email verification and transactional emails Email address, transactional email content
Cloudflare R2 Media storage Uploaded profile photos, event images, and other media files
Google Maps Platform Map display and location selection Map requests, selected location coordinates

D) Authorized public institutions and authorities

Your personal data is not sold or rented for advertising purposes.

7. International Data Transfer

Because some of the service providers used (for example, Supabase, Google Firebase Cloud Messaging, Twilio, Cloudflare R2, Google Maps Platform, and email delivery infrastructure) process data outside Türkiye, your personal data may be transferred abroad.

Where international data transfer is involved, the relevant transfer activities are subject to the conditions set out in Article 9 of the KVKK, and the applicable transfer mechanism is assessed according to the relevant service provider and the nature of the data flow. In this context, personal data transfers are carried out within the framework of the conditions prescribed by applicable legislation.

8. Retention and Deletion of Personal Data

Your personal data is retained in a limited manner within the scope of the period necessary for the purpose of processing, legal obligations, the establishment/exercise/protection of a right, and security and dispute requirements.

When the purpose and legal basis requiring retention of the personal data cease to exist, deletion, destruction, or anonymization processes are applied to the relevant data within the framework of applicable legislation.

You can start deleting your account from within the app via Settings → Delete Account; you may also request deletion by exercising your rights under the KVKK. After account deletion, your directly identifying profile information is removed or made inaccessible; some records may be retained only to the extent and for the duration genuinely necessary.

9. Your Rights Under the KVKK and Application Method

Under Article 11 of the KVKK, you have the rights to: learn whether your personal data is being processed, request information, learn the purpose of processing, know the third parties to whom it is transferred, request correction, request deletion/destruction, request notification of transfers, object to analysis by automated systems, and request compensation for damages.

To exercise your rights under the KVKK, you can submit your requests using one of the methods set out in the applicable Communiqué on the Procedures and Principles of Application to the Data Controller. In this context, you can submit your requests in writing to the address of our company stated above; using a registered electronic mail (KEP), secure electronic signature, or mobile signature if available; or from the email address you have previously notified to us and which is registered in our systems, to privacy@ruconn.com. If other electronic methods specifically developed for applications exist, these methods may also be used within the framework of applicable legislation.

Your application must contain the information necessary to verify your identity and to evaluate your request.

Your applications are concluded as soon as possible depending on the nature of the request and, in any case, within the period prescribed by the KVKK, at the latest within 30 days. If you are not satisfied with your application, you reserve the right to file a complaint with the Personal Data Protection Authority: https://www.kvkk.gov.tr

Where processing is based on your explicit consent, you may withdraw your consent at any time.

10. Contact

For questions regarding privacy and personal data processing activities:

Current Privacy Policy: ruconn.com/en/privacy-policy