KVKK Privacy Notice

Last updated: November 14, 2026

This notice explains the processing of personal data in the Elandra app under Article 10 of Türkiye's Personal Data Protection Law No. 6698 (KVKK).

Data controller: Simurg Apps (Ömer Koç, individual developer).
Contact: simurgapp@gmail.com.

1. Data and collection methods

We collect data electronically through information you enter in the app, responses from Apple or Google sign-in, our servers and Firebase analytics services, purchase notifications from app stores or RevenueCat, technical records generated through app use, and support correspondence.

• Account and profile: email address, profile name, sign-in provider, and user ID.
• Birth details and content: date, time, and place of birth; coordinates of the selected place; birth chart and readings; chats, fortune results (coffee cup photos are processed only while the reading is generated and are not stored), journal and mood records, friend information, and reports.
• Transactions: subscription status, product and transaction IDs, balance, and transactions. We do not receive payment card numbers or security codes.
• Technical records: device and app information, installation IDs, notification tokens, security verification signals, error records, and connection information processed by service providers.
• Preferences and communications: permission and consent choices, usage analytics when allowed, and support requests.

2. Purposes and legal grounds

• Account creation, authentication, birth charts and readings, content features, and purchase and subscription management: processing necessary for entering into or performing a contract, KVKK Article 5(2)(c).
• App security, abuse prevention, and troubleshooting: legitimate interests that do not harm your fundamental rights and freedoms, Article 5(2)(f).
• Legally required records and obligations toward competent authorities: Articles 5(2)(a) or 5(2)(ç), as applicable; establishing, exercising, or protecting rights: Article 5(2)(e).
• Optional analytics and marketing: explicit consent, Article 5(1). Additional uses requiring consent need separate information and choice.

Providing a privacy notice and obtaining consent are separate steps. Showing or accepting this notice does not by itself obtain any explicit consent that may be required.

3. Recipients and processing outside Türkiye

Necessary data goes to Cloudflare for accounts, database, server functions, and security; to Google Firebase for error records, performance monitoring, and analytics when allowed; to RevenueCat for purchase and subscription management; and to Apple and Google for the selected sign-in and store payment services. Relevant birth chart context, text, and, when needed, coffee cup photos are sent to DeepSeek for AI features. The recipients and data uses are explained further in the Privacy Policy.

These services involve processing outside Türkiye. DeepSeek states in its policy that it processes data in China. Other providers' locations may vary by service. Transfers abroad must be assessed separately under KVKK Article 9; this notice or a general consent checkbox does not by itself establish a lawful transfer mechanism. You may contact the data controller to ask about transfers and safeguards.

We do not sell data for advertising. Where needed for legal obligations or the protection of rights, limited information may be shared with competent authorities and legal advisers.

4. Retention and deletion

Account data and content are retained while the account is open. Coffee cup photos are not retained. Technical logs, analytics, and support records are retained according to necessity, service settings, and any applicable legal duties. Records that must be kept longer are used only for the relevant purpose. The Privacy Policy explains the scope of deletion.

5. Your rights and how to apply

Under KVKK Article 11, you may ask whether your data is processed and, if it is, request information about the processing, its purpose, and whether it is used for that purpose. You may ask to whom it has been transferred in Türkiye or abroad; request correction of incomplete or inaccurate data and, where the legal conditions are met, deletion or destruction; and request that correction or deletion be communicated to recipients. You may object to a result against you arising solely from automated analysis and seek compensation for damage caused by unlawful processing.

Send your request from the email address associated with your account to simurgapp@gmail.com. Include enough information to identify your request and account; do not send your password or payment card details. If you cannot access the account email address, explain this so we can verify your request safely. Other application methods available under the law remain available.

Requests are resolved as soon as possible and within 30 days at the latest, depending on their nature. Requests are free unless processing requires an additional cost, in which case the fee set by the Turkish Personal Data Protection Board may apply. You can delete your account in the app or start a request through the account deletion page.