Privacy Policy

Last updated: August 16, 2026

Data Controller

The Şehrim Cepte app is operated by Tuskun. For the purposes of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR), the data controller is:

• Legal name: Tuskun (Mücahit Enes Yurtlu)
• Address: Yozgat
• Email: info@tuskun.com
• Web: www.tuskun.com

Scope of This Policy

This policy explains which personal data we process when you use the Şehrim Cepte mobile app and related website, why and on what legal basis we process it, who we share it with, and what rights you have. The app includes a city guide, a social feed, private messaging, business accounts and advertising features.

Data We Collect

Account information:

• Name, username, email address, password (stored in an irreversible form).
• Optional: profile photo, cover image, biography, phone number.
• Account preferences: language, private account setting, city and district selection.

Content you create:

• Posts and the photos and videos attached to them.
• Comments, likes, follow and follow-request relationships.
• Routes you create, place suggestions and reviews.
• If you open a business account: business name, category, address, location, contact details, menu and pricing information, events, campaigns and reservation records.

Messages:

• The content, timestamps and participants of your private conversations are stored on our servers so the service can function. Private messages are not end-to-end encrypted and may be reviewed following an abuse report.

Location data:

• While you use the app: to show nearby places, directions, the map view, weather and on-call pharmacy information.
• While the app is closed or in the background: only if you grant permission, for the geofence feature that notifies you when you approach selected places. You can withdraw this permission at any time in your device settings; the rest of the app continues to work.
• Approximate location may also be derived from your IP address.

Device and technical data:

• Device model, brand, manufacturer, operating system and version, app version, build identifier, screen and hardware information, supported architectures, total memory and storage capacity.
• A device-specific identifier, carrier information, device language, and the push token used to deliver notifications.
• Basic server logs required to operate the service and prevent abuse.

Crash and error logs:

• When the app closes unexpectedly, the error message, stack trace, device model, operating system and app version are sent to our own servers. These records are not shared with a third-party analytics service.

Payment and wallet data:

• If in-app advertising purchases are enabled: the top-up amount, sender name, reference code, the bank account you selected and the receipt image you upload.
• We do not collect or store card details.

Permissions the App Requests

• Location: for nearby content, maps and directions.
• Background location: only for geofence notifications; you may decline it.
• Camera and microphone: when you choose to capture photos or video for a post.
• Photo library: to select images you want to share and to save media.
• Notifications: for follows, comments, messages and city announcements.

All permissions are optional and can be withdrawn at any time in your device settings.

Purposes and Legal Bases

• Performance of a contract (KVKK art. 5/2-c, GDPR art. 6(1)(b)): creating your account, sharing content, messaging, business and reservation operations.
• Legal obligation (KVKK art. 5/2-ç, GDPR art. 6(1)(c)): statutory retention and reporting duties.
• Legitimate interests (KVKK art. 5/2-f, GDPR art. 6(1)(f)): security, prevention of fraud and abuse, content moderation, improving the service.
• Consent (KVKK art. 5/1, GDPR art. 6(1)(a)): use of location data, delivery of notifications and display of personalised advertising.

You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before then.

Advertising

The app may display advertising through Google AdMob. AdMob may access your device advertising identifier and limited technical data in order to serve and measure ads.

• Users in the European Economic Area, the United Kingdom and Switzerland are asked for consent before personalised ads are shown. You can change your choice at any time from the advertising preferences screen in the app.
• If you do not consent, ads are shown without personalisation.
• You can reset your advertising identifier or disable personalisation in your device settings.

For details on how Google processes advertising data, see the Google Privacy Policy.

Parties We Share Data With

We do not sell your personal data. It is shared only to the extent needed for the service to work:

• Google AdMob: ad delivery and measurement.
• Google Firebase Cloud Messaging: push notification delivery.
• Mapbox: map rendering and route drawing.
• Our hosting and infrastructure providers: storing and serving data.
• Competent public authorities: where required by law.

International Transfers

Because advertising, notification and mapping services run through providers with servers outside Türkiye, data within that scope may be transferred abroad. Transfers are carried out in line with the international transfer provisions of the KVKK and with standard contractual clauses under the GDPR.

Visibility of Your Content

• Your profile, posts, comments and public routes can be seen by other users.
• If you switch your account to private, only followers you approve can see your content.
• Business profiles, events and campaigns are published publicly and may be indexed by search engines.
• Private messages are shown only to the participants of the conversation.

Retention Periods

• Account and content data are kept while your account is active.
• When you delete your account, it and its associated content are permanently deleted within 30 days at the latest.
• Crash logs are kept for a maximum of 12 months.
• Reports, blocks and moderation records may be retained in anonymised form after account deletion in order to prevent repeated abuse.
• Records we are legally required to keep (for example financial records) are retained for the applicable statutory period.

Children's Data

The app is not directed at children under 13 and we do not knowingly collect data from users under 13. If we learn that we hold data belonging to a user under 13, we close the account and delete the data. If you believe your child created an account without permission, contact us at info@tuskun.com.

Data Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss and alteration: encryption in transit, irreversible password storage, role-based access control and regular updates. No system can be guaranteed to be completely secure.

Your Rights

Under KVKK art. 11 and the GDPR you have the right to:

• Learn whether your personal data is processed and request information about it.
• Learn the purpose of processing and whether the data is used accordingly.
• Request correction of incomplete or inaccurate data.
• Request erasure or destruction of your data.
• Request restriction of, and object to, processing.
• Receive your data in a structured, commonly used format (data portability).
• Object to decisions produced solely by automated analysis that adversely affect you.
• Claim compensation for damage arising from unlawful processing.

Send requests to info@tuskun.com. We respond within 30 days at the latest. If you are not satisfied with the outcome, you may lodge a complaint with the Turkish Personal Data Protection Authority or the supervisory authority in your country.

Deleting Your Account and Data

You can delete your account in two ways:

• In the app: Settings > Account > Delete Account.
• On the web: from the "/hesap-sil" page on the app's website, where you can submit a deletion request without signing in.

Deletion permanently removes your account, profile, posts, comments, routes, messages and wallet records. Records we are legally required to retain, and anonymised moderation records kept to prevent abuse, are outside this scope.

Changes

This policy may be updated from time to time. We will notify you in the app about significant changes and update the date at the top of this page.

Contact

For any privacy matter, contact us at info@tuskun.com.