Privacy Policy

Effective Date: [15.06.2025]

1. General Provisions
The Sanartci: Breakin’Lab mobile application (“Application”) places great importance on the privacy of its users. This policy explains how your personal data is collected, used, stored, and protected.

2. Data Controller
Vavesoft Yazılım ve Mobil Uygulamalar
Address: Maltepe Mah. Küçük Çiğli-Çiğli / İzmir
E-Mail: [email protected]

3. Collected Data and Purposes

 

Data TypeCollection PurposeRetention PeriodLegal Basis
Height, weight, genderPerformance analysis, personalized trainingUntil account deletionUser’s explicit consent (GDPR Art. 6/1 a)
Test/quiz question and answer categoriesEducation progress trackingUntil account deletionUser’s explicit consent
E-mail addressAccount verification, notificationsDuring subscription + 1 yearService agreement (GDPR Art. 6/1 b)
Device info, IP addressSecurity, debugging, analytics1 yearLegitimate interest (GDPR Art. 6/1 f)

4. Data Collection Methods

  • Direct User Input: Registration form, profile editing.
  • Automatic Collection: Device ID, IP, cookies, and analysis tools (Firebase Analytics).

5. Data Processing and Sharing

  • All data is stored on secure servers using the Firebase infrastructure.
  • Third-Party Service Providers: Google Authentication, Firebase, App Store/Google Play reporting tools. These providers only access data necessary for processing; use for other purposes is prohibited.
  • Sharing: Your data will not be sold or transferred to third parties without a legal obligation, court order, or user consent.

6. Cookies and Tracking Technologies

  • Cookies and similar technologies are used for performance and error analysis.
  • You can manage your privacy preferences within the application or through your device settings.

7. User Rights
Under the EU GDPR and KVKK:

  • Right of Access: Learn which data of yours is being processed.
  • Right to Rectification: Correct inaccurate data.
  • Right to Erasure (“Right to be Forgotten”): Request the deletion of your data.
  • Right to Restriction of Processing: Restrict certain processing activities.
  • Right to Data Portability: Receive your data in a structured format.
  • Right to Object: Object to processing for direct marketing purposes.
    You can submit your requests to [email protected]. The response time is a maximum of 30 days.

8. Data Security
Industry-standard encryption (TLS) and access control mechanisms are used.
Regular security tests and backup procedures minimize the risk of data loss and breaches.

9. Children’s Privacy
The application is not intended for children under 16 years of age. We do not process personal data of users under 16 without parental consent.

10. International Data Transfer
Your data may be transferred to servers outside the European Economic Area (EEA); in such cases, protection mechanisms such as GDPR “Adequacy Decisions” or Standard Contractual Clauses (SCC) will be applied.

11. Policy Changes
Updates to the Privacy Policy will be announced via in-app notifications or e-mail. User consent may be required before a new policy takes effect.

12. Contact
For questions regarding the Privacy Policy or your data rights: