KVKK Privacy Notice and Explicit Consents

This notice is given under Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”) to people who use Weddo. The Turkish version is binding. Last updated: 2026-10-05.

1. Data controller

The data controller is Hulaguhan Labs. Contact: info@hulaguhanlabs.com.tr.

2. Personal data we process

• Identity and contact: name, date of birth, gender, phone number or Sign in with Apple identifier.
• Profile: city, height, education, job, marital status, children, smoking, marriage timeline and marriage-vision answers, about text, prompts, photos, 15-second voice intro, compatibility-card answers.
• References: texts people close to you write for you and that you approve.
• Communication: messages with your matches, date proposals, icebreaker answers, reports and blocks.
• Biometric data (only with your explicit consent): live selfies taken for verification.
• Religious belief (only with your explicit consent and if you choose to answer): how important faith is to you.
• Transaction security: session data, in-app activity records, subscription status (card details never reach us; Apple or Google process them).

3. Purposes and legal bases

• Membership, choosing daily candidates, compatibility scores, matching and messaging: performance of the contract (KVKK 5/2-c).
• Preventing fake profiles, fraud and harassment, automated screening of messages, reviewing reports: legitimate interest (5/2-f) and legal obligation (5/2-ç).
• Subscriptions and purchases: performance of the contract (5/2-c).
• Biometric verification: explicit consent (6/2).
• Faith answer: explicit consent (6/2).
• Transfer to servers abroad: explicit consent (9/1).

4. Transfers

We share data only as needed with the providers that run the service:

• Supabase (database, file storage, authentication; servers in the European Union).
• An SMS verification provider (only your phone number and the code).
• Anthropic (USA): automated classification of sent messages for insults, harassment and fraud. The message text is sent for classification; the provider does not use it to train its models.
• RevenueCat (USA), Apple and Google: subscription and purchase records.

Your profile is shown only to other Weddo members under the service rules. Data may be disclosed to authorities when legally required.

5. How data is collected

Electronically, from what you enter in the app, the photos and voice you record or upload, the reference form your friends fill in, and your use of the app.

6. Retention

While your account is open. When you delete your account, your profile, photos, voice intro and messages are deleted. Verification selfies are deleted within 30 days after review. Report and safety records may be kept for the period required by law.

7. Your rights

Under KVKK Article 11 you may ask whether your data is processed, request information, learn the purpose and recipients, ask for correction or deletion, object, and claim compensation. Write to info@hulaguhanlabs.com.tr; we answer within 30 days. You can withdraw explicit consents at any time in Settings > Consents.

Explicit consent: transfer abroad

I consent to my profile, message and account data being transferred to Weddo’s servers and providers abroad (Supabase – EU; Anthropic and RevenueCat – USA) for the purposes above. This consent is required to provide the service; if you withdraw it you will need to delete your account.

Explicit consent: biometric verification

I consent to live selfies being taken, compared with my profile photos to confirm that the profile belongs to a real person, and stored until review is complete and deleted within 30 days. Optional: without it you can use the app without the verified badge.

Explicit consent: faith

I consent to my answer on the importance of faith being shown on my profile and used for compatibility. Optional: withdrawing it deletes the answer.