KVKK Information Notice
Notice under article 10 of the Turkish Personal Data Protection Law No. 6698.
1. Data controllers
Under the Turkish Personal Data Protection Law No. 6698 ("KVKK") the data controllers are Onur Sercan Yılmaz and Serkan Taşlıçay, who build and run CoffeeMeet together as joint controllers. Email: sostechlabs@gmail.com. Onur Sercan Yılmaz publishes the app on the App Store and Google Play. Send any request under KVKK to this address and we will answer it together.
2. Categories of personal data
- Identity: name, age, gender.
- Contact: email address (from your Apple / Google account).
- Location: live location while the App is open, the café and time of check-ins.
- Visual: profile photos.
- Customer transactions: likes, requests, matches, messages, drink preferences, order history at cafés, cafés visited, café ratings and comments, filter preferences, subscription status.
- Transaction security: user ID, push token, sign-in records, blocked-content records.
- Legal: reports, blocks, message evidence attached to reports.
- Special category data: gender preferences for who you see and who can see you may allow inferences about sexual orientation, so they are treated as special category data and processed only with your explicit consent.
3. Purposes and legal grounds
| Purpose | Legal ground (KVKK) |
|---|---|
| Account, sign-in, showing your profile, check-ins, matching and messaging | Art. 5/2-c: performance of the contract |
| Verifying subscriptions and purchases | Art. 5/2-c: performance of the contract |
| Enforcing the 18+ limit, answering lawful requests | Art. 5/2-ç: legal obligation |
| Reviewing reports, keeping evidence | Art. 5/2-e: establishing, exercising or defending a right |
| Preventing abuse and spam, content filter, service security | Art. 5/2-f: legitimate interest |
| Calculating taste match from favourites, current and past orders, ordering the list | Art. 5/2-c: performance of the contract |
| Filtering by gender preference | Art. 6/3: explicit consent |
4. How data is collected
Electronically, by automated or partly automated means: from what you enter in the App, from your device’s location service (with your permission), from Apple / Google sign-in and from the app stores.
5. Transfers
For the purposes above only, data may be transferred to hosting (Supabase, EU-Frankfurt), sign-in and payment (Apple, Google), subscription verification (RevenueCat) and push delivery (Expo) providers, and to authorised public bodies. By the nature of the App, your profile is shown to other users at the same café.
Transfers abroad are made under KVKK art. 9 with appropriate safeguards, such as signing the standard contracts published by the Board and notifying the Board.
6. Your rights (KVKK art. 11)
- Learn whether your data is processed and request information about it,
- Learn the purpose of processing and whether it is used accordingly,
- Know the third parties it is transferred to in Turkey or abroad,
- Request correction of incomplete or inaccurate data,
- Request deletion or destruction under KVKK art. 7,
- Request that corrections and deletions are notified to third parties,
- Object to a result against you arising solely from automated analysis,
- Claim compensation for damage caused by unlawful processing.
7. How to apply
Send requests from the email registered in the App to sostechlabs@gmail.com. Include your name, contact details and your request. We answer within 30 days, free of charge unless the request involves extra cost under the Board’s tariff. If your request is refused or unanswered you can complain to the Personal Data Protection Board.
Last updated: 2026-10-04
Last updated: 2026-10-04