KVKK notice

Last updated: 3 October 2026

This is an English translation of the Turkish original. If the two differ, the Turkish version applies.

Data controller

Data controller: Abdullah Bozdağ (trading as RadKod). Contact: [email protected]

Under Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK), this notice explains how your personal data is processed when you use the biselam app and the biselam.me website.

Personal data processed

  • Identity: username, date of birth, gender.
  • Contact: email address.
  • Visual and audio recordings: profile photos, stories, photos, videos and voice recordings you send in chats, voice intro.
  • User content: messages, bio, tags, profile songs, poll votes, reactions, report and feedback texts.
  • Location: country and city. Coordinates aren’t kept.
  • Customer transactions: coin purchases and spending, Plus subscription.
  • Transaction security: the irreversible form of your password (hash), session details, IP address, device and app version, notification key, report and moderation records.
  • Interaction data: records of follows, likes, blocks, hellos, profile visits and story views.
  • Call records: who called whom, voice or video, start, answer and end times. The audio and video themselves aren’t recorded.
  • Question box: questions sent to a user and the user’s answers (answered ones are public on the web profile). For people who ask without an account: the question text, when it was sent, and a keyed hash of the IP address (30 days); no name, email or cookies are taken.
  • Consent records: the version of the terms of use and privacy policy accepted, and when.

We don’t ask you for special categories of personal data (such as health, religion, ethnic origin or biometric data). If you share such information yourself in your bio or messages, it is processed only to deliver it to the people you share it with and, if needed, to review it for moderation.

Purposes of processing

  • Establishing the membership contract and managing your account
  • Delivering your profile, stories and messages to the people you choose
  • Connecting voice and video calls
  • Preparing Discover and Bi Selam suggestions based on country, city, age, gender and tags
  • Sending notifications and account emails (verification and deletion codes)
  • Verifying purchases and keeping your coin balance
  • Detecting content that breaks the rules, reviewing reports, and preventing harassment, spam and fraud
  • Ensuring information security and preventing abuse
  • Meeting legal obligations and responding to requests from competent authorities

We don’t process your personal data for advertising and we don’t sell it.

Collection method and legal basis

Your personal data is collected electronically, partly by automated means, through the biselam app and biselam.me: some of it you enter yourself, some of it is created as you use the app.

Your data is processed on the following legal grounds in Article 5(2) of the KVKK:

  • Establishing and performing a contract (Art. 5(2)(c)): account, profile, messaging, stories, Discover, purchases.
  • Complying with a legal obligation (Art. 5(2)(ç)): keeping purchase records, requests from authorities.
  • Establishing, exercising or protecting a right (Art. 5(2)(e)): keeping evidence for reports.
  • Legitimate interest (Art. 5(2)(f)): security, moderation, preventing abuse, processing IP addresses, keeping an irreversible fingerprint (keyed hash) of the email address and Apple/Google account of an account closed for breaking the rules, to prevent it from being opened again with them, and keeping the asker’s IP fingerprint for 30 days to prevent abuse of the question box.
  • Explicit consent (Art. 5(1)): measuring how the app is used (PostHog) in the European Union, the European Economic Area, the United Kingdom, Switzerland and Türkiye. You can withdraw your consent in Settings at any time.

Who data is transferred to, and why

Your personal data is transferred to the following companies we work with to provide the service, only as far as they need it to do their job:

  • Cloudflare: delivering website and app traffic, storing media files and backups.
  • Expo and Apple: delivering notifications to your device.
  • Apple: App Store purchases, previews of profile songs, managing Sign in with Apple.
  • RevenueCat: verifying purchases (only your user number and purchase details).
  • Hostinger: hosting the app server, database and call media server.
  • Yandex: sending account emails (verification, password reset, deletion codes).
  • Giphy: showing GIFs added to stories (your phone downloads the GIF image directly from Giphy).
  • PostHog: measuring how the app is used (your user number, usage events, device information and an approximate location derived from your IP address, which is not stored; the data is stored in the European Union; in the European Union, the European Economic Area, the United Kingdom, Switzerland and Türkiye only with your consent).

Our app server and database are in Hostinger’s data centre in Germany.

When there is a legal request, your personal data may be transferred to competent public institutions and judicial authorities to the extent the law requires.

Transfers abroad

All of the companies above (Cloudflare, Expo, Apple, RevenueCat, Hostinger, Yandex, Giphy, PostHog) are based outside Türkiye. Transfers to them count as transfers abroad.

Your rights under Article 11 of the KVKK

Under Article 11 of the KVKK, you can apply to the data controller to:

  • Find out whether your personal data is processed
  • Request information if it has been processed
  • Find out the purpose of processing and whether it is used for that purpose
  • Know the third parties it is transferred to in Türkiye or abroad
  • Request correction if it is incomplete or inaccurate
  • Request deletion or destruction under the conditions in Article 7 of the KVKK
  • Request that corrections, deletions and destructions be notified to third parties the data was transferred to
  • Object to a result against you that comes solely from analysis by automated systems
  • Claim compensation if you suffer damage from unlawful processing

You can use some of these rights directly in the app: get a copy of your data with “Download my data” in Settings, correct your details in Edit profile, and delete your account with “Delete account”.

How to apply

In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your application in writing, or by registered electronic mail (KEP), secure electronic signature, mobile signature, or from the email address registered to your biselam account.

We conclude your application free of charge within 30 days at the latest. If the process involves an additional cost, a fee set by the Board’s tariff may be charged.

Email address for applications: [email protected]. Sending it from the email address registered to your biselam account makes it easier for us to verify your identity.

← Home