KVKK information notice

Data controller

The data controller is:

• Title: [Legal entity name]
• Address: [Registered address]
• Email: [kvkk@stillfeed.app]
• KEP: [KEP address]
• MERSIS: [MERSIS no.]

Data we process

Only if you create an account. The extension alone sends us no personal data.

• Identity and contact: email address.
• Customer transaction: subscription status, interval and dates.
• Transaction security: session, device records, IP address and server logs.
• Usage: daily time totals and number of blocked items per platform. No browsing history, URLs or content.
• Partner: the email address of the person you invite, the reason you write for each request, and their answer with its time.
• Email preferences: your weekly summary choice, time zone, and a one-way hash of addresses that unsubscribed or bounced.

Purposes

• Creating your account and verifying your identity.
• Syncing settings and daily time totals between your devices.
• Running your subscription.
• Keeping our systems secure.
• Meeting legal obligations.
• Answering your requests and complaints.
• Sending invites and unlock requests to your accountability partner and recording their answer.
• Sending the weekly summary, only if you turn it on.

Collection method and legal grounds

Data is collected electronically through the extension and this website, by automated means. We rely on Article 5(2) of the KVKK:

• (c) it is necessary to set up or perform a contract;
• (ç) it is necessary to meet a legal obligation;
• (e) it is necessary to establish, exercise or protect a right;
• (f) it is necessary for our legitimate interests, without harming your fundamental rights.

We do not rely on explicit consent. If that ever changes, consent will be asked for separately, not inside this notice.

The weekly summary stays off until you turn it on and can be turned off at any time; the switch is a preference, and the summary is sent as part of the service under (c). Your partner's email address and answers are processed under (f) so the partner feature you asked for works. Because their data reaches us from you, your partner is informed under Article 10 in the invite email and on the invite page, and can stop our emails at any time.

Who we share data with

For the purposes above, data is shared with our hosting, database, sign-in, email delivery and payment providers, and with authorised public bodies when the law requires.

Transfers abroad

Our providers (Supabase, region [Supabase region]; Vercel and Lemon Squeezy in the United States; Google for Google sign-in) store data outside Turkey. As there is no adequacy decision, transfers rely on the standard contracts set by the Personal Data Protection Board, under Article 9 as amended by Law No. 7499.

Emails (partner invites, unlock requests and the weekly summary) are delivered through Resend in the United States, under the same safeguard.

Standard contracts are notified to the Authority within five business days of signing.

Retention

Data is kept while your account exists and deleted within 30 days of your account deletion request (sent by email to [kvkk@stillfeed.app]). Daily totals are deleted automatically after about 13 months (400 days). Data needed for legal obligations is kept for the period the law sets.

Partner data is kept while the partnership exists and deleted with your account. A removed partner is deleted 30 days after removal, and an unaccepted invite 30 days after it expires; closed requests are deleted 90 days after they close. Records of sent weekly summaries are kept for 120 days. Addresses that unsubscribed or bounced are kept only as a one-way hash, for as long as needed to honour the opt-out, so they are never emailed again.

Your rights under Article 11

You have the right to:

• learn whether your personal data is processed;
• request information if it has been processed;
• learn the purpose of processing and whether data is used for that purpose;
• know the third parties in Turkey or abroad to whom data is transferred;
• ask for incomplete or inaccurate data to be corrected;
• ask for data to be deleted or destroyed under Article 7;
• ask for corrections or deletions to be notified to third parties who received the data;
• object to a result against you that arises solely from automated analysis;
• claim compensation for damage caused by unlawful processing.

How to apply

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can apply in writing to [Registered address], by KEP to [KEP address], with a secure electronic signature, or by email to [kvkk@stillfeed.app] from the address registered with us.

We answer free of charge within 30 days at the latest.

If your application is rejected or the answer is insufficient, you can complain to the Personal Data Protection Board.