KVKK Information Notice

Controller and contact

Controller: Barış Durmaz. Address: 9165/2 Sok. No:16 D:4 Doğanay Mh. Karabağlar/İzmir/Türkiye. Privacy requests: privacy@vuff.app.

How we collect data

Electronically: from what you enter in the app and on vuff.app, from the Apple or Google sign-in you choose, and from your device when you use a feature that needs it (for example location or notifications).

Account and security

We collect name, username, email, login-provider identifiers, profile details and photos, your date of birth (for accounts opened before 25 October 2026, your versioned 18+ self-declaration and its time instead), device/security records and notification choices. General sign-up does not verify age with a document. We use these to open and protect your account, check the 18+ age requirement, deliver requested features and send account notices. The relevant KVKK Article 5(2) conditions are performance of our agreement, compliance with legal duties where applicable, and proportionate legitimate interests for security. Account and infrastructure providers receive only the information needed for their roles.

Community

You provide dog profiles, messages, group chats, routes, group walks and their photos, map alerts, lost pet and adoption listings and reviews. We process these to show content to the audience you choose, connect members and carry out your requests. This relies on performance of the service agreement under Article 5(2)(c). Related members and infrastructure providers receive data according to the feature.

Location

With device permission and your use of the relevant feature, we process location for Walking Mode, routes, nearby lost pet alerts and rain reminders. Rain reminders send an approximate location (about 1 km) to Apple WeatherKit and keep it for at most 3 hours. Group walks, listings and map alerts use a point you pick on the map. A published route or selected map point is shown according to your choice. We rely on Article 5(2)(c), as the processing is necessary for the feature you request; you can stop it at any time by turning the feature or the device permission off.

Safety and support

Reports, moderation evidence, automatic word filters and appeals are processed to prevent misuse and establish or protect rights, under proportionate legitimate interests and, where applicable, Article 5(2)(e). Support messages, email delivery and push tokens are used to answer requests and perform the service. Authorized staff, relevant providers and legally empowered authorities may receive the minimum needed data.

Suggestions and service statistics

We use your followers, city and whether you have a dog to suggest people to follow, and who you follow to order search results. Our team also sees statistics calculated from account data, such as sign-ups, account types, cities, dog breeds, memberships and support response times, without a third-party analytics service. We rely on legitimate interests under Article 5(2)(f), to run and improve the service.

International transfers

Supabase processes account, content, location and message data for Vuff. Resend delivers account emails. Cloudflare hosts the website, routes contact email and provides bot protection; it also acts as a controller for signals used to improve Turnstile. Apple provides sign-in, push delivery, maps and weather (WeatherKit, for rain reminders); Google provides optional sign-in, Maps links and the Gmail inbox receiving website contact messages. GIF search (KLIPY) is off in this version. Provider roles and processing countries depend on the service.

Supabase hosts our database, authentication and files in Frankfurt, Germany. Its contracting entity is in Singapore; support, CDN and other processing may occur in further countries. Resend, Cloudflare, Apple and Google also process data outside Türkiye. The safeguards and any required contract or notification documentation for these services’ international transfers have not yet all been verified. For the current status or to exercise your data rights, contact privacy@vuff.app.

Retention

Feature-specific periods, account deletion and exceptions are explained in our Privacy Policy. In short: content stays until you remove it or delete your account; short-lived location and notification records are deleted automatically; after an account deletion request you have 30 days to change your mind.

Your rights under Article 11

• To learn whether your personal data is processed and to request information about it.
• To learn the purpose of processing and whether it is used for that purpose.
• To know the third parties in Türkiye or abroad to whom it is transferred.
• To request correction of incomplete or inaccurate data, and its deletion or destruction under Article 7, and that these are notified to the third parties who received it.
• To object to a result against you that arises solely from automated analysis.
• To claim compensation for damage caused by unlawful processing.

How to apply

Apply in the app or email privacy@vuff.app from the address on your account. If you write from another address, we will ask you to confirm the request from the app or from that address; we don’t ask for a copy of an ID document. Applications are free and we answer within 30 days at the latest. If your application is refused, the answer is inadequate or we don’t answer in time, you may complain to the Personal Data Protection Board within 30 days of learning our answer and in any case within 60 days of your application (Article 14).