Privacy Policy

Last updated: 18 August 2026 · v1.0

1. Data Controller

This Privacy Policy explains how your personal data is processed in the UniQoo mobile application (the "App").

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is Mustafa Kadir Ağca. You can send any question, request or application to destek@uniqooapp.com.

2. What Data We Collect

Identity and contact details

• First and last name
• Email address
• Date of birth
• Gender
• Username

Your password is stored irreversibly hashed by Firebase Authentication; we cannot see it in plain form.

Education and profile details

• University, department and year of study
• The province you live in
• Profile photo, bio and interests

You decide who can see this information from the Privacy Settings screen in the App.

Content you create

• Posts, campus posts and comments
• Photos and videos
• Events, plans and your responses to them
• Your marketplace listings
• Your direct and group messages

Usage data

• Posts you like, save and see
• How long you spend on a post, and the interest scores derived from it
• The users you follow and who follow you
• Who visits your profile and whose profiles you visit
• Your last active time and online status

This data is used to show you more relevant content in the Explore section.

Technical data

• The push notification identifier for your device
• App version and operating system information
• Error and crash records

Location

If you use the weather feature, your device's approximate location is obtained with your permission and used to fetch weather data. Your location is not stored on our servers. You can revoke the location permission at any time from your device settings.

Camera and photo library access

Camera and photo library access is requested so that you can share photos and videos. This access is used only for the files you select; your library is not read in full or transmitted to us.

What we do not collect

The App does not collect an advertising identifier, does not share data with third-party advertising networks, does not access your contacts, and neither sees nor stores payment card details.

3. Why We Process Your Data

• To create your account, verify your identity and maintain your session
• To provide core features such as posting, messaging, and creating events and plans
• To recommend content matching your interests in the Explore section
• To send you notifications (you can turn these off in settings)
• To keep the App secure and detect rule violations and abuse
• To review reports and apply the necessary measures
• To respond to support requests
• To improve the App and fix defects
• To meet our legal obligations and respond to requests from competent authorities

4. Legal Bases

We process your data on the following legal bases set out in Article 5 of the KVKK:

• Formation and performance of a contract: creating your account, storing and displaying content, enabling messaging
• Compliance with a legal obligation: keeping records required by legislation, responding to authorities
• Establishment, exercise or protection of a right: retaining violation records and complaint reviews
• Legitimate interest: ensuring security, preventing abuse, improving the service
• Explicit consent: operations that depend on your clear approval, such as using your location for weather

Where processing relies on consent, you may withdraw it at any time.

5. Who We Share Data With

We never sell or rent your data to third parties for advertising or marketing.

We use the following service providers so that the service can function:

• Google (Firebase): authentication, database, server-side operations and notification infrastructure
• Cloudflare: storage and delivery of the photos and videos you upload
• OpenAI: automated moderation of the text you share
• Sightengine: automated moderation of the images you share
• Open-Meteo: retrieving weather information for an approximate location
• Apple and Google: delivering notifications to your device and distributing the app

These providers process data solely to provide services to us and in accordance with our instructions.

In addition, where legally required, information may be shared with the relevant authorities upon a court order or a request from a competent authority.

6. International Transfers

The servers of the service providers listed above are located outside Türkiye. Your data is therefore transferred abroad to the extent necessary to provide the service.

Transfers are carried out within the framework of Article 9 of the KVKK and only to the extent required for performance of the service. The service providers are subject to contractual undertakings regarding data protection.

7. Retention

Your data is retained for as long as your account is active.

When you delete your account, your account record, profile details, posts and comments, listings, events and plans, and the photos and videos you uploaded are deleted.

There are two exceptions. First, messages you sent in a conversation may continue to appear in the other party's own chat history. Second, records that legislation requires us to keep, and records that are the subject of an ongoing legal dispute or investigation, are retained for the relevant period.

Copies in backup systems may persist for a short additional period until the backup cycle completes.

Limited records relating to accounts closed for rule violations may be retained in order to prevent the same person from circumventing the ban with a new account.

8. Data Security

Your data is encrypted in transit and at rest. Server-side access is limited by authorisation rules, so a user can only see data they are entitled to access.

Even so, no transmission over the internet or electronic storage is one hundred percent secure. We recommend choosing a strong password that you do not use anywhere else.

If unlawful access to your data is detected, we will inform you and the Personal Data Protection Board as required by legislation.

9. Your Rights

Under Article 11 of the KVKK you have the right to:

• Learn whether your personal data is being processed
• Request information about it if it has been processed
• Learn the purpose of processing and whether the data is used in line with that purpose
• Know the third parties to whom your data is transferred, in Türkiye or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of your data within the conditions set out in law
• Request that correction, deletion and destruction be notified to third parties to whom the data was transferred
• Object to an adverse outcome arising from the analysis of your data solely by automated means
• Claim compensation if you suffer loss due to unlawful processing

To exercise these rights, write to destek@uniqooapp.com. We will conclude your application within thirty days at the latest. If your application is rejected or goes unanswered, you retain the right to complain to the Personal Data Protection Board.

You can update most of your profile information directly from the Account Info screen in the App, and delete your account from the same screen.

10. Cookies and Similar Technologies

The App uses local storage on your device to keep you signed in and remember your preferences (such as theme, language and chat background). This data stays on your device and is removed when you uninstall the App.

The App does not use third-party advertising or tracking cookies.

11. Children's Privacy

The App is not directed at people under the age of 15, and we do not knowingly collect data from anyone below that age. If we learn that we have collected data belonging to such a person, we close the account and delete the data. If you become aware of such a case, please report it to destek@uniqooapp.com.

12. Special Categories of Data

We do not aim to collect special categories of personal data such as health, religion, political opinion or ethnic origin, and we do not request such data at sign-up. If you choose to include such information in your posts, we process that content within the privacy settings you have chosen. We recommend caution when sharing information of this kind.

13. Changes to This Policy

This Privacy Policy may be updated from time to time. Substantial changes are announced in the App before they take effect. The most current version is always available from the Settings screen.

14. Contact

For all privacy questions and requests: destek@uniqooapp.com