Privacy Policy
Last updated: 1 January 2025
1. Data Controller
Pet Activities is the data controller responsible for your personal data.
- Trade name: Pet Activities
- Website: petactivities.com.tr
- Email: privacy@petactivities.com.tr
- Country: Turkey
This Privacy Policy is prepared in compliance with the Turkish Personal Data Protection Law (KVKK – Kişisel Verilerin Korunması Kanunu, Law No. 6698).
2. What Personal Data We Collect
| Category | Data | Purpose |
|---|---|---|
| Account data | Name, email address, password (hashed) | Account creation and authentication |
| Pet data | Pet name, species, breed, birthday, photo, health notes | Providing the core service |
| Family data | Names and emails of invited family members, timezone | Family group and notification coordination |
| Usage data | App events, screen views, crash reports | Service improvement and bug fixing |
| Payment data | Billing name, card last 4 digits (tokenised via iyzico) | Subscription management |
| Device data | Device type, OS version, push notification token | Sending reminders and notifications |
We do not collect sensitive personal data as defined under KVKK Article 6.
3. Legal Basis for Processing
- Performance of a contract – Processing necessary to provide the service you subscribed to (KVKK Art. 5/2-c).
- Legitimate interests – Analytics and service improvement, fraud prevention (KVKK Art. 5/2-f).
- Legal obligation – Tax records, invoice retention as required by Turkish law (KVKK Art. 5/2-ç).
- Explicit consent – Marketing communications, if you opt in (KVKK Art. 5/1).
4. How We Use Your Data
- To create and manage your account and subscription
- To deliver pet activity reminders and notifications at the correct time in your timezone
- To enable family coordination features
- To process payments through iyzico
- To respond to support requests
- To improve the app through aggregated, anonymised analytics
- To comply with Turkish tax law and consumer protection regulations
5. Data Sharing and Third Parties
We do not sell your personal data. We share data only with the following processors, under strict data processing agreements:
| Processor | Purpose | Location |
|---|---|---|
| iyzico Ödeme Hizmetleri A.Ş. | Payment processing | Turkey |
| Firebase (Google LLC) | Push notifications, crash analytics | EU (Standard Contractual Clauses) |
| Cloud hosting provider | Data storage and infrastructure | Turkey / EU |
Where data is transferred outside Turkey, we ensure appropriate safeguards in accordance with KVKK Article 9.
6. Data Retention
- Account data: Retained for the duration of your subscription, plus 90 days after cancellation.
- Payment records: Retained for 10 years as required by Turkish Tax Procedure Law (VUK).
- Usage/analytics data: Anonymised within 24 months.
- Deleted accounts: Removed within 30 days of deletion request, except data required by law.
7. Your Rights Under KVKK (Article 11)
- To learn whether your personal data is being processed
- To request information about processing if it has been processed
- To learn the purpose of processing and whether data is used appropriately
- To know third parties to whom data has been transferred domestically or abroad
- To request correction of incomplete or inaccurate data
- To request deletion or destruction of your data
- To object to automated processing that results in unfavourable outcomes
- To claim compensation for damages arising from unlawful processing
To exercise your rights, email privacy@petactivities.com.tr. We will respond within 30 days. If denied, you may file a complaint with the Personal Data Protection Authority at kvkk.gov.tr.
8. Cookies and Tracking
- Strictly necessary: Session management and security. Cannot be disabled.
- Analytics (optional): Anonymised usage statistics. You may opt out via cookie settings.
The mobile app does not use browser cookies. Push notification tokens are stored solely for delivering reminders.
9. Data Security
- TLS encryption for all data in transit
- Encryption at rest for sensitive fields
- Bcrypt hashing for passwords
- Access controls limiting data access to authorised personnel only
- Regular security reviews
In the event of a personal data breach, we will notify the Personal Data Protection Authority within 72 hours and affected users without undue delay.
10. Children's Privacy
Our service is intended for users aged 18 and over. We do not knowingly collect personal data from children under 18. Contact privacy@petactivities.com.tr if you believe a child has provided us with data.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a notice in the app at least 30 days before the changes take effect.
12. Contact
- Email: privacy@petactivities.com.tr
- Website: petactivities.com.tr