Privacy Policy

1. Data controller

Your personal data is processed by [COMPANY NAME] ([ADDRESS], MERSIS: [MERSIS NO], VERBIS: [VERBIS REGISTRATION NO]) as data controller under Turkish Personal Data Protection Law no. 6698 (KVKK).

This text also fulfils our duty to inform under article 10 of the KVKK.

2. The data we process

• Account data: email address, an irreversible digest of your password, account type, account status.
• Profile data: username, display name, biography, profile photo, sport, career information, portfolio items, and athlete details such as height and weight where provided.
• Content data: posts, reels, stories, comments, likes, follow relationships, private messages and their media files.
• Team data: roster membership, roles, attendance, training and programme records, assignments and submissions, tactics boards, video feedback, and documents uploaded by the club.
• Matchmaking data: listings, the province and district you choose, match records, result declarations, and per-sport statistics.
• Usage and measurement data: profile views, post impressions, follower gains and losses, weekly league points.
• Subscription data: subscription status, product identifier, period information and transaction identifiers received from the store. We do not process card or payment details.
• Advertising data: credit balance and movements, campaign settings, and the total impression and click counts of a campaign.
• Moderation data: automated scan results and violation records. We do not store the blocked text itself.
• Technical data: IP address, device and app version information, notification token, error records.
• Support correspondence.

3. Special categories of data (health)

Team features allow notes and documents to be uploaded that may contain health information such as injuries, treatment or nutrition. Health data is a special category of personal data under article 6 of the KVKK and may be processed only with the explicit consent of the person concerned or where the law provides another ground.

A club or staff member who uploads such content is obliged to obtain the athlete's explicit consent and to share the content only with those who need it.

We store this data encrypted on the server, limit access by role and scope, and keep access records. You may withdraw your consent at any time; when you do, you can ask us or your club to delete the content concerned.

4. Purposes and legal grounds

• Creating your account, managing your session, publishing your content and showing it to you; operating the team, matchmaking, marketplace and messaging features — formation and performance of a contract.
• Determining subscription and ad credit entitlements and applying the status received from the store — performance of a contract.
• Security measures against fraud, abuse, spam and account takeover; rate limiting and record keeping — legitimate interest and legal obligation.
• Content moderation, violation records and assessment of reports — legal obligation and legitimate interest.
• Feed and discovery ranking, statistics and league calculations, and improving the product — legitimate interest.
• Health data — explicit consent.
• Responding to requests from competent authorities and pursuing legal claims — legal obligation and establishment of rights.

5. Automated assessment and moderation

Images and videos you upload are analysed by an automated model that detects explicit sexual content. Content with a high score is rejected automatically; content with an intermediate score goes to human review. Text you write is checked automatically against a list of inappropriate expressions, and submission is blocked on a match.

You have the right to object to the outcome of an automated decision. When you contact [SUPPORT EMAIL] the decision is reconsidered by a person.

Your content is processed during automated analysis; only the decision and the violation record are retained afterwards.

6. Ranking and profiling

The home and discovery ranking is calculated automatically. The calculation uses the number of likes and comments an item has received, the age of the item, the author's account type and package, the weekly league result, and your own behaviour (who you follow, the sport in your profile, and items you have seen in recent days).

This processing determines which content is shown to you earlier; it does not produce a decision with legal consequences. Ranking parameters may change over time.

7. Advertising

The only advertising shown in the App is users boosting their own content. We do not use third-party ad networks, we do not track you across apps, and we do not collect an advertising identifier for that purpose.

Targeting is based only on the sport in your profile. Your identity is not disclosed to the advertiser; only aggregated measurements such as total impressions, reach, profile visits and messages started are provided.

The number of times you can see the same advertisement in a day is limited.

8. Statistics and visibility

We do not show any user who viewed their profile. The statistics screen contains only counts and aggregated distributions; the audience breakdown is not shown while the number of viewers is below five.

Your username, profile photo and public content are visible to other users in the App. If you make your account private, only followers you approve can see your content. Whether you appear in rankings and league lists depends on the feature concerned, and you do not appear in those lists when you are not using it.

9. Sharing and transfers

We do not sell your personal data.

Your data is shared, to the extent needed to operate the service, with service providers in the following categories: hosting and storage, the subscription verification provider, the push notification provider, the error tracking provider, and the email delivery provider.

Data may also be shared, to the extent the legislation requires, in order to respond to requests made in due form by competent public authorities, to protect our rights, and to use in legal claims.

Some of the providers we use may have servers outside Turkey. In that case the transfer is carried out in accordance with the conditions set out in article 9 of the KVKK. You can request information about the current list of providers and the basis for those transfers from [SUPPORT EMAIL].

10. Retention periods

• Account and content data: for as long as your account is open.
• Person-level view and impression records: 13 months; they are then deleted and only aggregated counts remain.
• Moderation violation records and audit trails: for the periods required by security and legal obligations.
• Records relating to subscriptions and payments: for the periods the legislation requires.
• When an account is deleted: your profile and content are removed from view and your identifying information is anonymised; your username is closed to reuse for a period to prevent confusion. Anonymised aggregate counts continue to be kept.
• Records in technical backups are deleted when the backup cycle completes.

11. Your rights under the KVKK

Under article 11 of the KVKK you have the right to learn whether your personal data is processed; to request information if it has been; to learn the purpose of processing and whether it is used in accordance with that purpose; to know the third parties to whom it is transferred in Turkey or abroad; to request correction if it is incomplete or incorrect; to request erasure or destruction within the conditions of the law; to request that correction and erasure be notified to the third parties to whom the data was transferred; to object to a result against you arising from analysis carried out exclusively by automated systems; and to claim compensation if you suffer damage because of unlawful processing.

You can send your requests to [SUPPORT EMAIL] or in writing to [ADDRESS]. Your application must be made in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, together with information establishing your identity. We respond to applications within thirty days at the latest. If you find the response insufficient you may complain to the Personal Data Protection Board.

You can delete your account and your content directly from the settings inside the App.

12. Children's data

The App does not collect dates of birth and is not designed for children. Users under eighteen must use the App with the permission of a parent or guardian.

If you are a parent or guardian and you want your child's data deleted, you can contact [SUPPORT EMAIL]; we treat such requests as a priority.

13. Security

The measures we take to protect your data include encryption in transit, encrypted storage of sensitive documents on the server, role and scope based access control, audit records for critical operations, session and token management, and rate limiting.

No system can provide absolute security. If you notice a vulnerability, report it to [SUPPORT EMAIL]. If we determine that personal data has been obtained unlawfully, we notify the Personal Data Protection Board and the individuals concerned as the legislation requires.

14. Cookies and information stored on your device

In the mobile app your session information is stored in the secure area of your device; settings such as your language preference are also kept on the device.

Our administration panels use cookies that are strictly necessary to maintain a session. We do not use third-party cookies for advertising or tracking.

15. Changes

We may update this policy. When there is a material change we will inform you inside the App before it takes effect. The current text is always available on this screen in the App.

16. Contact

For privacy questions and KVKK applications: [SUPPORT EMAIL]

[COMPANY NAME], [ADDRESS]