Privacy Policy
1. Data Controller
Under Law No. 6698 on the Protection of Personal Data ("KVKK," Turkey's data protection law), the personal data described in this Privacy Policy is processed by Berk Çolak as data controller. You can reach the data controller at the email address in the "Contact Us" section of this policy.
2. What This Policy Covers
This Privacy Policy explains which personal data is collected when you use the Whisperio app (the "App", "we"), how it is used, who it is shared with, and what your rights are. By using the App, you accept this policy.
3. Data We Collect
When creating an account: email address, password (stored encrypted/hashed — we cannot see your plain-text password either), username.
Profile information: gender, date of birth, interests, your chosen avatar icon.
Usage data: messages you send, feed posts and comments, kindness messages, friend requests, wallet (token) transactions, notification preferences, push notification token (so we can send notifications to your device).
Automatically collected data: IP address, device/app version information, connection timestamps (to show your online/offline status).
Diagnostic/crash data: When the App crashes unexpectedly or encounters an error, technical information (the error message and the screen/action where it occurred, device and OS information) is automatically collected so we can identify and fix the issue.
4. How We Use Your Data
• To match you with other users and run the chat/feed features
• To verify and secure your account
• To run your messages through automated (AI-assisted) content moderation in order to detect harmful, harassing, or unlawful content
• To send push notifications (based on your on/off preference)
• To process wallet/token transactions
• To prevent abuse, fraud, and violations of the Terms of Service
• To fulfill our legal obligations
5. Important Note About Content Moderation
For platform safety, messages you send may be evaluated by an automated AI system for harassment, abuse, hate speech, or unlawful content. This evaluation is performed on the message content sent to a third-party AI provider (OpenAI). This process does not mean your messages are routinely read by humans — it is only an automated classification.
6. About the Word "Anonymous"
The App shows other users a username rather than your real name, and in that sense offers an "anonymous" experience. However, this does not mean your data is unknown to us — your email address, IP address, and account activity are recorded in our systems and may be used in response to a legal request or a violation of the Terms of Service.
7. Sharing of Data
We do not sell your data. Your data may be shared with the following parties, solely for the purpose of providing the service:
• Firebase (Google) for push notification infrastructure
• Firebase Analytics (Google) for app usage statistics (e.g. which features are used) — aggregate/statistical usage data that does not directly reveal your identity
• OpenAI (AI provider) for automated content moderation
• Cloudflare for photo/media storage
• Resend for sending account verification and password reset emails
• Sentry for diagnosing and fixing app errors
• Google AdMob for displaying ads
• Competent authorities, where required by law, a court order, or to protect user safety
Some of these service providers may process your data on servers located outside Turkey (e.g. the EU, the US). Under KVKK Article 9, this transfer of your personal data abroad is based on the explicit consent you provide by checking the consent box accepting the Terms of Service and this Privacy Policy when creating your account.
Whether ads are personalized depends on the consent Google collects through its user consent management platform (UMP). You can change this preference at any time from Settings > Legal > Ad Preferences (this option is only shown where legally required in your region).
8. Data Retention and Account Deletion
Your data is retained for as long as your account is active. You can permanently delete your account from the Settings screen — this action cannot be undone, and all your data, including your messages, posts, and wallet history, is removed from our systems. Some data (e.g. records related to a legal dispute or fraud prevention) may be retained for a limited additional period due to legal obligations.
9. Your Rights
Under KVKK Article 11, you may apply to the data controller to:
a) Learn whether your personal data is being processed,
b) Request information about it if it has been processed,
c) Learn the purpose of processing and whether the data is used in accordance with that purpose,
d) Know the third parties, domestic or abroad, to whom your personal data is transferred,
e) Request correction of your personal data if it is incomplete or inaccurate,
f) Request the deletion or destruction of your personal data,
g) Request that the actions taken under (e) and (f) be notified to the third parties to whom your personal data has been transferred,
h) Object to a result that is to your detriment arising from analysis of your data exclusively through automated systems,
i) Request compensation for damages arising from the unlawful processing of your personal data.
To exercise these rights, you may apply to the data controller at the email address in the "Contact Us" section of this policy. You can also update your profile information directly from the Settings screen, and delete your account from there as well.
10. Age Restriction
The App is designed for users aged 18 and over. If we detect that you are under 18, your account may be suspended or deleted.
11. Security
We apply technical measures such as encryption (including TLS/HTTPS encryption in transit) and access controls to protect your data. However, no system is 100% secure; despite taking reasonable measures, we cannot guarantee absolute security.
12. Changes
We may update this policy from time to time. You will be notified within the App of any material changes.
13. Contact Us
For privacy-related questions or requests under KVKK Article 11: [email protected]