Privacy Policy and Privacy Notice

This is a translation of the Turkish original. If the two differ, the Turkish version prevails.

This policy applies to the KortPro app.

Data controller: Feyza Can
Contact: [email protected]

This policy also serves as the privacy notice required by the Turkish Personal Data Protection Law No. 6698 (KVKK).

1What data do we collect?

Account details

• Your email address — to sign you in, and to send verification and password reset codes.
• Your password — stored only in a form that cannot be reversed (a hash); we cannot see it either.
• If you use an older version of the app without an account, no email is kept; only an anonymous ID is created. The current version is used with an account only.

Profile details

• Your display name.
• Your gender (female, male or "prefer not to say") — so that we can offer tournaments split by gender in the future, such as women's and men's leagues. The current version of the app shows your gender to no one. Older versions may show it on your player card to the people who can see that card (section 2). If you choose "prefer not to say", it is shown nowhere.
• Your username (e.g. @makikali) — so others can find you and add you as a friend. It is made from your display name; you can change it in the Profile tab.
• Your profile photo — optional (details in section 4).
• Your language (Turkish, English or Spanish) — so notifications and emails reach you in your language.

Content you enter

• Your match records: opponent names, set scores, date, time, court name and your match notes.
• Your friends, friend requests and match proposals (day, time, place).
• Clubs: club name, club photo (optional), members and admins, the date you joined, and the club invites you send and receive.
• Tournaments and leagues: tournament name, tournament photo (optional), participants, pairings, play-offs, match times, scores and join requests.

Notifications

• If you allow notifications, your device's notification address (push token) and your notification preference.

Usage data (you can turn it off in Profile → Privacy and support → "Usage statistics")

• Which screens you open and what you do in the app (for example logging a match, starting a tournament, sharing an invite); the app version, device model and operating system.
• It is linked only to your account's random ID. Your name, email, friends and scores are never sent.

Safety records

• Photo reports you make and that are made about you, with their outcome, and the people you block.
• Photo moderation results (accepted/rejected and scores — not the photo itself).

What we don't collect: your location, your contacts, your photo library as a whole, your advertising ID. KortPro has no advertising, we don't track you across other apps and websites, and your data is not sold.

2Who can see your information?

You have no profile page outside the app, on the web for example. A KortPro user with an account can search for you by typing at least the first 3 letters of your username or of a word in your display name. Search results list your display name and username (at most 20 people per search), and they can send you a friend request. Your profile photo appears in search results only if you allowed it (Profile → Preferences → "Show my photo to everyone"; off by default). Your player card and stats are shown only to your friends and to people in the same tournament or club as you.

You can turn off appearing in search in Profile → Preferences → "Show me in search results"; then you don't appear in search, but people you share your invite link with can still add you, and you can still add friends yourself. People you have blocked, or who have blocked you, can never find you.

Visibility works like this:

People you block cannot see your profile photo, and cannot send you friend requests, match proposals or club invites. They don't appear in your lists either.

If either of you deletes a match recorded together with a friend, it is deleted from both your lists. If you remove a friend, your shared matches stay in their list; with "Delete with matches" they are deleted from your list only.

Clubs: You join a club with its code, an invite link, or by accepting a member's invite; nobody is added to a club without accepting. Only a friend, or someone in the same tournament or club as you, can invite you to a club; the invite shows you the club's name and who sent it. Someone who opens a club's code or link sees its name, photo, member count and its members' names before deciding whether to join. A club's members see each other's names, photos and the club ranking, and can see the club's tournaments before joining them. You can leave a club at any time.

Share cards: You can share a match, your stats or your score against a friend as a picture. The card shows your name and photo, your opponent's name and the scores. Your opponent's photo appears only if they allowed it (Profile → Preferences → "Show my photo to everyone"; off by default — the same consent covers the photo in search results). A picture you share can be seen by others wherever you share it.

Your friends' tournaments: For a tournament that hasn't started yet, its name, format (knockout or league), its organiser's name, the number of players and the names of your friends playing in it are shown on the screen for joining a tournament, to the friends of its organiser and of its players. The other players' names are not shown. The organiser can turn this off with "Tournament visibility" on the tournament screen, and it is never shown to people you have blocked or who have blocked you. When you ask to join, your display name and username (and your photo, only if you allowed it) go to the organiser; if they accept, you join the tournament.

3Why do we process it? (Legal grounds)

• To provide the service — creating your account, keeping your matches, connecting you with friends, running clubs and tournaments, sending notifications. KVKK Art. 5/2-c (establishing and performing a contract).
• Safety and preventing abuse — automatic photo moderation, photo reports and passing them on to an admin, blocking. KVKK Art. 5/2-f (legitimate interest).
• Improving the app — seeing which features are used (usage data; you can turn it off in the settings) and keeping your gender so that we can offer tournaments split by gender in the future (you can choose "prefer not to say"). KVKK Art. 5/2-f (legitimate interest).
• Legal obligations — removing unlawful content and requests from public authorities. KVKK Art. 5/2-ç.

Your data is not used for advertising, profiling or facial recognition.

4Profile, club and tournament photos

• Uploading a photo is optional. Your photo library is not accessed; the app only sees the photo you choose.
• On your phone, the photo is resized to 512×512 pixels and saved again. In the process, the information embedded in it (where it was taken, the device, the date) is removed.
• Every photo is checked automatically for inappropriate content (nudity, violence and so on) before it goes live. For this, the photo is sent to the content moderation service of our provider OpenAI. A photo that fails the check is deleted immediately.
• Photos are kept in a private store and shown only to the people listed in section 2, through links that are valid for a short time.
• An inappropriate photo can be reported from the app. The person who reports it never sees it again; the photo is hidden from everyone and an admin reviews it. If it is found acceptable, it is shown again and later reports don't hide it; if not, it is removed. A report from someone whose reports have often turned out unfounded doesn't hide a photo.
• When you remove or change your photo, or delete your account, it is deleted from the server too. Club and tournament photos are deleted when the club or tournament is deleted.

5Service providers and transfers abroad

OpenAI does not use data sent through its API to train its models; it may keep it for up to 30 days to monitor abuse.

Because these providers' servers are outside Türkiye, using KortPro means your data is transferred abroad within the meaning of KVKK Art. 9.

We keep these transfers limited:

• Only the data that is needed is sent. Each provider receives only what it needs for the job listed in the table. OpenAI receives only the photo you upload — not your name, your email or your matches. Resend receives only the name of the reported photo's owner, or of the club or tournament — not the photo itself, and not who reported it. PostHog receives only the usage data described in section 1.
• Your database is in the European Union (Germany), in a data centre subject to EU data protection rules.

For questions and requests about transfers abroad, write to [email protected].

6How long do we keep it?

• Your account and content: until you delete your account.
• Photos: until you remove or change them, or delete your account.
• Records of sent notifications: 30 days.
• Photo moderation records: separated from your identity when your account is deleted.

7Deleting your account

Profile → Delete account. Your account, profile, photos, match records, opponent list, friendships, club memberships and proposals are deleted permanently.

• Your friends keep the matches they played with you in their lists; you stay in their lists as a name only, not linked to an account.
• Matches played in tournaments remain for the other players; "Left the tournament" is shown in place of your name. Your unplayed tournament matches are awarded to your opponents as walkovers.
• A tournament you organised passes to another player or, for a club's tournament, to the club's admins; if nobody else is in it, it is deleted.
• If you are a club's only admin, another member becomes admin; if there are no other members, the club is deleted.

8Your rights

Under KVKK Art. 11 you have the right to learn whether your data is processed, to request information, to ask for it to be corrected or deleted, to learn who it has been transferred to, to object, and to claim compensation for damages. Write to [email protected] with your requests; we reply within 30 days at the latest.

9Security

Connections are encrypted (TLS). In the database every record is protected by row-level access rules: you cannot read or change anyone else's data. Photos are kept in a private store.

10Children

KortPro is not designed for children under 13. If you are under 18, use the app with your parent's or guardian's knowledge and consent.

11Changes

We may update this policy. We announce important changes in the app.

12Contact

[email protected]