This notice is given under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and explains how the personal data of people using the Tichodex mobile app and tichodex.com (“Tichodex”) is processed. Website visitors are also covered. This English version is provided for convenience; if there is any conflict, the Turkish version prevails.

1. Data Controller

Your personal data is processed by Tichodex (Istanbul, Türkiye) as data controller. For all requests: support@tichodex.com or the contact form (topic: Personal Data).

2. Personal Data We Process

Category	Data	From
Identity and account	Username, email address, irreversible hash of your password, sign-in type (Email & Password or Google), account creation date, app language	Registered users
Profile	Gender; optionally profile photo, city, age, profession, bio; “I Need to Talk / I Help Out” mode; “Solved My Problem” counter	Registered users
User content	Posts, comments, likes, view statistics, shared images, stories	App users
Messaging	Message content and media are sent over an encrypted connection (HTTPS/TLS) and stored on our servers; only the parties to the chat see them. Authorised moderators access them only in case of a report, a security review or a legal obligation. Messaging metadata (who, with whom, when) is recorded.	App users
Reported chat	When a chat is reported, the reported part of the chat is made available to authorised moderators for moderation.	The reporting user
Transaction security and traffic	IP address, installation-based device ID, sign-in/sign-out times, activity logs	App users
Contact form	Name, email address, username (if any), subject and message; an irreversible hash of the IP address to prevent abuse	People who submit the form
Website visit statistics	Only if you consent to cookies: the page visited, the referring site’s name, device type (phone/tablet/computer) and an irreversible hash of the random visitor ID in the analytics cookie. Raw IP addresses are not stored in statistics. If you don’t consent, nothing is recorded.	Website visitors who give cookie consent
Legal transactions and consent	KVKK and agreement consent times, reports, complaint and request records	App users
Customer transactions	VIP subscription status, expiry date, Google Play purchase ID. Your card details are never sent to Tichodex; Google Play takes the payment.	VIP purchasers

Special categories of data: Tichodex does not ask you for special categories of personal data such as health, religion or sex life. You may choose to write such information when sharing what is on your mind; this data is processed only on the basis of your explicit consent under the Explicit Consent text. Posts can be seen by other users — please be careful before sharing.

3. Purposes and Legal Grounds

Purpose	Legal ground (KVKK Art. 5 / 6)
Creating your account, signing in, providing your profile and app features	Formation and performance of a contract (Art. 5/2-c)
Messaging, posts, likes, comments and “Solved My Problem”	Performance of a contract (Art. 5/2-c)
Keeping IP, device ID, sign-in/out and traffic records; responding to judicial and administrative requests	Expressly provided for by law and legal obligation (Art. 5/2-a, ç) — Law No. 5651
Reviewing reports, removing content, preventing abuse, account and site security (including reCAPTCHA)	Legitimate interest (Art. 5/2-f), legal obligation (Art. 5/2-ç), establishment and protection of a right (Art. 5/2-e)
Answering contact-form and email requests	Legitimate interest (Art. 5/2-f), legal obligation (Art. 5/2-ç)
Measuring which website pages are used with the analytics cookie	Explicit consent (Art. 5/1) — cookie consent window
Managing VIP subscriptions	Performance of a contract (Art. 5/2-c), legal obligation (Art. 5/2-ç)
Hosting special-category data that the user chooses to share	Explicit consent (Art. 6/3)

Tichodex does not sell your personal data, does not share it with third parties for marketing and does not use it for ad targeting. Ads shown in the app are not personalised.

4. How We Collect Data

Your data is collected electronically through the mobile app and the website: via sign-up, profile and contact forms, records created automatically while you use the app and site, the email address verified by Google if you sign in with Google, and subscription information sent by Google Play.

5. Recipients and International Transfers

Competent public authorities and courts: Tichodex never hands your information to any authority on its own initiative. Only if a lawful, official and written request (such as a court order or prosecutor’s request) is received, and limited to the account named in the request, the following may be shared:
- the IP addresses and device from which the account signed in and out, and when;
- with whom and when messages were exchanged (messaging metadata — “who, with whom, when”);
- account information (username, registration email, registration date) and public posts.
The content of your messages is never shared on our own initiative. Messages travel over an encrypted connection (HTTPS/TLS) and are stored on our servers with restricted access. Content may be shared only if there is a decision, such as a court order, that expressly requires access to it, and only within the account and time range specified. For reported chats, the reported part appears in the moderation record, and that record may also be shared on an official request.
Infrastructure providers: server, database and file-storage providers in Türkiye or abroad, only as needed to provide the service.
Google LLC / Google Ireland Ltd.: for Sign in with Google, Google Play billing, showing non-personalised ads in the app (AdMob), push notifications (Firebase) and reCAPTCHA robot checks on the contact form and sign-up, as far as these services require.

Google services may require data to be processed abroad. These transfers are made in line with Article 9 of the KVKK — with appropriate safeguards such as the standard contracts announced by the Board, as occasional transfers where those are not possible, and on the basis of your explicit consent where necessary.

6. Retention Periods

Data	Period
Account and profile data, posts	Until the account is deleted. Removed immediately on deletion; removed from backups within 30 days.
Messages	Until the chat or the account is deleted.
View-once media	Shown to the recipient once; the file is deleted from the server 30 days after it is opened.
Stories	Live for 24 hours; then kept in the sharer’s archive for 30 days, and stories added to highlights until the account is deleted.
Notifications	90 days.
IP address history	6 months from last use.
IP, device ID, sign-in/out and traffic records, messaging metadata	2 years under Law No. 5651 (including deleted accounts), then destroyed.
Contact-form messages	Up to 2 years after the request is resolved.
Website visit statistics	Up to 13 months; the analytics cookie lasts 12 months in your browser.
Report and moderation records	2 years, or until any ongoing legal proceeding ends.
Subscription records	For the retention periods required by law.

7. Your Rights under Article 11 of the KVKK

By applying to the data controller, you have the right to learn whether your personal data is processed; to request information if it is; to learn the purpose of processing and whether it is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction if it is incomplete or inaccurate; to request deletion or destruction under Article 7 of the KVKK; to request that these actions be notified to third parties to whom the data was transferred; to object to a result against you arising exclusively from automated analysis; and to claim compensation if you suffer damage due to unlawful processing. If you live in the EU/EEA or the UK, you also have the rights given by the GDPR / UK GDPR.

8. How to Apply

Send your request — with information that verifies your identity (name, username, the email registered to your account, the subject of your request) — from the email address registered to your account to support@tichodex.com, or via the contact form with the topic “Personal Data (KVKK)”. Your request is answered free of charge within 30 days at the latest. If the process requires an additional cost, the fee set by the Personal Data Protection Board may apply. If your request is rejected, the answer is insufficient or you receive no answer in time, you may file a complaint with the Board.

9. Users Under 18

Only people aged 13 or over may use Tichodex. Users between 13 and 18 must use the app with the knowledge and consent of their parent or guardian. Accounts we find to belong to someone under 13 are deleted.