1. Giris ve Veri Sorumlusu

Bu Gizlilik Politikasi, Buddy Dating uygulamasini ("Buddy", "Uygulama", "biz") kullaniminiz sirasinda kisisel verilerinizin nasil toplandigi, islendigi ve korundugunun aciklanmasi amaciyla hazirlanmistir.

Veri Sorumlusu: Buddy Dating
E-posta: privacy@buddy.dating
Web: buddy.dating

Uygulamayi kullanarak bu politikada belirtilen kosullari kabul etmis sayilirsiniz.

2. Toplanan Veriler

2.1 Hesap Bilgileri

• Ad, soyad, e-posta adresi
• Dogum tarihi, cinsiyet
• Telefon numarasi (opsiyonel)
• Apple ID / Google hesabi (sosyal giris)

2.2 Profil Bilgileri

• Profil fotograflari
• Biyografi, ilgi alanlari
• Burc bilgisi (gunes, ay, yukselen burcu)
• Konum tercihleri
• Is unvani ve egitim bilgisi
• Boy bilgisi
• Yasam tarzi tercihleri (sigara, alkol, egzersiz, diyet, evcil hayvan, uyku duzeni)
• Profil prompt yanitlari (kullanici tarafindan girilen kisa metinler)

2.3 Ses Verileri

• Sesli tanitim kayitlari (maksimum 30 saniye)
• Sesli notlar (mesajlasma icinde)
• Ses kimyasi uyumluluk sonuclari (cihaz uzerinde hesaplanir)
• Sesli bulusma (voice date) kayitlari
• Ses meydan okuma (voice challenge) yanitlari

2.4 Konum Verileri

• Yaklasik konum (eslestirme amacli)
• Konum izni kullanici tarafindan kontrol edilir

2.5 Cihaz ve Teknik Veriler

• Cihaz modeli, isletim sistemi
• Uygulama versiyonu
• IP adresi
• Firebase instance ID

2.6 Odeme Verileri

• Abonelik durumu ve tipi
• Satin alma gecmisi (Apple/Google uzerinden)
• Kredi karti bilgileri tarafimizca saklanmaz (Apple/Google isler)

2.7 Dogrulama Verileri

• E-posta dogrulama durumu
• Sosyal giris dogrulama durumu (Apple ID / Google)

2.8 Analitik Veriler

• Uygulama kullanim istatistikleri
• Ekran goruntulenme sayilari
• Etkilesim verileri (begeni, eslesmeler)

2.9 Mesajlasma Verileri

• Mesaj icerikleri (metin ve sesli not)
• Yazma gostergeleri (typing indicators)
• Okundu bilgisi (read receipts)
• Mesaj gonderim zamanlari

2.10 Etkilesim Verileri

• Begeni ve begenilmeme (like/dislike) kayitlari
• Super begeni (super like) kullanimi
• Swipe istatistikleri ve gunluk limitler
• Gunluk streak (ardisik kullanim serisi) verileri
• Geri alma (undo) islemleri
• Profil ziyaretleri (ziyaretci kimlik, ziyaret edilen kimlik, zaman damgasi)

2.11 Muzik Profili

• Muzik tercihleri ve favori turler
• Favori sanatcilar (kullanici tarafindan girilen bilgiler)
• Muzik zevki uyum verileri (eslestirme amacli)

2.12 Hediye Verileri

• Sanal hediye gonderme ve alma kayitlari
• Hediye turu, gonderen ve alici bilgisi
• Hediye gonderim zamanlari

2.13 Bildirim Verileri

• Firebase Cloud Messaging (FCM) token
• Bildirim tercihleri (eslesmeler, mesajlar, sesli notlar vb.)
• Cihaz kayit belirteci (push notification kaydi)

3. Verilerin Kullanim Amaci

Kisisel verilerinizi asagidaki amaclarla kullaniriz:

• Hesap olusturma ve kimlik dogrulama
• Eslestirme algoritmasi (ses kimyasi + burc uyumlulugu + muzik uyumu)
• Uygulama icindeki iletisim (mesaj, sesli not, sesli bulusma)
• Abonelik ve odeme yonetimi
• Guvenlik ve dolandiricilik onleme
• Push bildirim gonderimi
• Urun gelistirme ve iyilestirme
• Yasal yukumluluklerin yerine getirilmesi
• Musteriye destek saglama

4. Hukuki Dayanak (GDPR Madde 6)

Isleme Amaci	Hukuki Dayanak
Hesap yonetimi	Sozlesmenin ifasi (m.6(1)(b))
Eslestirme ve ses karsilastirmasi	Acik riza (m.6(1)(a))
Guvenlik ve dogrulama	Mesru menfaat (m.6(1)(f))
Analitik	Mesru menfaat (m.6(1)(f))
Yasal yukumlulukler	Hukuki yukumluluk (m.6(1)(c))
Pazarlama	Acik riza (m.6(1)(a))

5. Ses Verisi Isleme

Buddy'nin temel ozelligi ses oncelikli tanismadir. Ses verileriniz ozel bir oneme sahiptir:

• Sesli tanitimlar: Profilinizde gorunur ve diger kullanicilar tarafindan dinlenebilir. Kayit suresi maksimum 30 saniye ile sinirlidir.
• Ses kimyasi karsilastirmasi: Ses tonunuz, enerjiniz ve konusma stiliniz tamamen cihaziniz uzerinde karsilastirilarak uyumluluk puani hesaplanir. Bu islemde Apple Accelerate framework (vDSP) kullanilir; hicbir ses verisi harici bir sunucuya veya ucuncu taraf servise gonderilmez.
• Sesli bulusmalar (Voice Dates): Eslesen kullanicilar arasinda gercek zamanli sesli gorusme ozelligidir. Bu gorusmeler kayit altina alinmaz; yalnizca baglanti meta verileri (sure, zaman) saklanir.
• Ses meydan okumalari (Voice Challenges): Kullanicilar belirli konularda sesli yanitlar olusturabilir. Bu yanitlar profilinizde goruntulenebilir.
• Saklama: Ses kayitlari, eslesen kullanicilarin birbirlerinin ses profillerini dinleyebilmesi amaciyla Firebase Cloud Storage uzerinde saklanir. Hesap silme isleminde tum ses kayitlari kalici olarak silinir.
• Ucuncu taraf erisimi: Ses verileriniz ucuncu taraflarla paylasilmaz ve reklam amacli kullanilmaz.

6. Veri Paylasimi ve Ucuncu Taraflar

Kisisel verilerinizi asagidaki sinirli durumlar disinda ucuncu taraflarla paylasmayiz:

Hizmet Saglayici	Amac	Veri Turu
Google Firebase (Auth, Firestore, Storage)	Altyapi, veritabani, kimlik dogrulama	Hesap, profil, teknik
Firebase Cloud Messaging	Push bildirim gonderimi	FCM token, bildirim tercihleri
Firebase Remote Config	Uzaktan yapilandirma	Cihaz ozellikleri (anonimlestirilmis)
Firebase Cloud Functions	Sunucu tarafi islemler	Istek verileri (islem bazli)
Apple / Google	Odeme isleme	Abonelik bilgileri
Apple StoreKit	Uygulama ici satin alma dogrulama	Satin alma makbuzu, islem kimlik
Firebase Analytics	Uygulama analitigi	Anonimlestirilmis kullanim
Firebase Crashlytics	Hata raporlama	Cihaz, hata bilgileri

Verilerinizi reklam amasiyla ucuncu taraflara satmayiz veya paylasmayiz.

7. Uluslararasi Veri Transferi

Firebase altyapisi Google Cloud uzerinde calisir ve veriler AB/ABD veri merkezlerinde islenebilir. Bu transferler GDPR kapsamindaki standart sozlesme maddeleri (SCC) ile korunur.

8. Veri Saklama Sureleri

Veri Turu	Saklama Suresi
Hesap bilgileri	Hesap aktif oldugu surece + 30 gun
Profil bilgileri	Hesap aktif oldugu surece
Ses kayitlari	Hesap aktif oldugu surece
Mesajlar	Hesap aktif oldugu surece
Etkilesim verileri (begeni/swipe)	Hesap aktif oldugu surece
Profil ziyaretleri	Son 90 gun
Muzik profili	Hesap aktif oldugu surece
Hediye kayitlari	Hesap aktif oldugu surece
Bildirim verileri (FCM token)	Cihaz kaydi aktif oldugu surece
Engel/rapor kayitlari	Hesap aktif oldugu surece + 1 yil
Dogrulama verileri	Hesap aktif oldugu surece
Analitik veriler	14 ay (anonimlestirilmis)
Yedekler	Silme sonrasi 30 gun icinde

9. Haklariniz (GDPR)

AB/AEA'da ikamet ediyorsaniz asagidaki haklara sahipsiniz:

• Erisim hakki: Hakkinizdaki kisisel verilere erisim talep edebilirsiniz.
• Duzeltme hakki: Yanlis veya eksik verilerinizin duzeltilmesini isteyebilirsiniz.
• Silme hakki (unutulma hakki): Kisisel verilerinizin silinmesini talep edebilirsiniz.
• Islemenin kisitlanmasi: Belirli durumlarda veri islemenin kisitlanmasini isteyebilirsiniz.
• Veri tasinabilirligi: Verilerinizi yapilandirilmis bir formatta alabilirsiniz.
• Itiraz hakki: Mesru menfaat dayanagiyla yapilan islemeye itiraz edebilirsiniz.
• Riza geri cekme: Rizaniza dayanan islemelerde rizanizi istediginiz zaman geri cekebilirsiniz.

Haklarinizi kullanmak icin privacy@buddy.dating adresine e-posta gonderebilir veya uygulama ici ayarlardan talepte bulunabilirsiniz.

10. KVKK Haklari (Madde 11)

Turkiye'de ikamet ediyorsaniz, 6698 sayili Kisisel Verilerin Korunmasi Kanunu kapsaminda:

• Kisisel verilerinizin islenip islenmedigini ogrenme
• Islenmisse buna iliskin bilgi talep etme
• Isleme amacini ve amacina uygun kullanilip kullanilmadigini ogrenme
• Yurt icinde veya yurt disinda aktarildiqi ucuncu kisileri bilme
• Eksik veya yanlis islenmisse duzeltilmesini isteme
• KVKK'nin 7. maddesindeki kosullar cercevesinde silinmesini veya yok edilmesini isteme
• Duzeltme/silme islemlerinin aktarildiqi ucuncu kisilere bildirilmesini isteme
• Islenen verilerin islenmesiyle aleyhinize bir sonucun ortaya cikmasina itiraz etme
• Kanuna aykiri isleme sebebiyle zarara ugramaniz halinde zararin giderilmesini talep etme

KVKK basvurulari icin: kvkk@buddy.dating

11. Cocuklarin Gizliligi

Buddy yalnizca 18 yas ve uzeri kullanicilar icindir. 18 yasindan kucuk kisilerin verileri bilerek toplanmaz. Bir cocugun bilgilerini toplamis oldugumuzu ogrendigimizde, bu verileri derhal sileriz.

12. Cerezler

Web sitemiz (buddy.dating) asagidaki cerezleri kullanir:

• Zorunlu cerezler: Site islevselliqi icin gerekli (dil tercihi, tema)
• Analitik cerezler: Ziyaret istatistikleri (anonim)

Reklam cerezleri kullanilmaz. Cerez tercihlerinizi tarayici ayarlarinizdan yonetebilirsiniz.

13. Guvenlik Onlemleri

• AES-256 ile sifreleme (aktarimda ve depolamada)
• SSL/TLS ile guvenli veri iletimi
• Firebase Security Rules ile erisim kontrolu
• Icerik moderasyonu ile sahte profil onleme
• Duzeli guvenlik denetimleri
• Minimum veri toplama ilkesi
• Calisanlara sinirli veri erisimi
• Keychain ile hassas verilerin (kimlik dogrulama tokenlari) cihazda guvenli saklanmasi
• SwiftData ile yerel onbellek verilerinin sifrelenmis depolanmasi
• Jailbreak/root tespit mekanizmasi ile guvensiz cihazlarda koruma

14. Politika Degisiklikleri

Bu Gizlilik Politikasini zaman zaman guncelleyebiliriz. Onemli degisikliklerde uygulama ici bildirim ve/veya e-posta ile sizi bilgilendiririz. Devam eden kullaniminiz, guncellenmis politikayi kabul ettiginiz anlamina gelir.

15. Iletisim

Gizlilikle ilgili sorulariniz icin:

• E-posta: privacy@buddy.dating
• KVKK: kvkk@buddy.dating
• Genel destek: support@buddy.dating

16. Veri Disa Aktarma

GDPR 20. madde (veri tasinabilirligi hakki) kapsaminda, kisisel verilerinizin bir kopyasini talep edebilirsiniz:

• Uygulama ici disa aktarma: Ayarlar > Gizlilik > Verilerimi Disa Aktar bolumunden verilerinizin makine tarafindan okunabilir (JSON) formatinda bir kopyasini indirebilirsiniz.
• Kapsam: Disa aktarma dosyasi profil bilgilerinizi, ses kaydi meta verilerini, etkilesim gecmisinizi, mesaj gecmisinizi ve tercihlerinizi icerir.
• Islem suresi: Disa aktarma talebi en gec 30 gun icinde islenir.
• Format: Veriler JSON formatinda, sifrelenmis bir dosya olarak sunulur.

17. Yerel Depolama

Buddy, cihazinizda asagidaki yerel depolama yontemlerini kullanir:

• SwiftData (Yerel Onbellek): Profil bilgileri ve sohbet gecmisinin hizli yuklenebilmesi icin cihazdaki sifrelenmis veritabaninda onbelleklenir. Bu veriler yalnizca performans amaciyla kullanilir ve sunucu verileriyle senkronize edilir.
• Keychain (Hassas Veriler): Kimlik dogrulama tokenlari ve oturum bilgileri, Apple Keychain ile donanim duzeyli sifreleme altinda saklanir. Bu verilere yalnizca Buddy uygulamasi erisebilir.
• UserDefaults (Tercihler): Dil tercihi, tema secimi, bildirim ayarlari gibi hassas olmayan kullanici tercihleri saklanir.
• Temizleme: Hesap silme isleminde tum yerel veriler (SwiftData, Keychain, UserDefaults) cihazdnan kalici olarak temizlenir.

1. Introduction & Data Controller

This Privacy Policy explains how Buddy Dating ("Buddy", "App", "we", "us") collects, processes, and protects your personal data when you use our application.

Data Controller: Buddy Dating
Email: privacy@buddy.dating
Website: buddy.dating

By using the App, you agree to the terms described in this policy.

2. Data We Collect

2.1 Account Information

• Name, email address
• Date of birth, gender
• Phone number (optional)
• Apple ID / Google account (social sign-in)

2.2 Profile Information

• Profile photos
• Bio, interests
• Zodiac information (sun, moon, rising signs)
• Location preferences
• Job title and education
• Height
• Lifestyle preferences (smoking, alcohol, exercise, diet, pets, sleep schedule)
• Profile prompt responses (short texts entered by the user)

2.3 Voice Data

• Voice prompt recordings (maximum 30 seconds)
• Voice notes (within messaging)
• Voice chemistry compatibility results (computed on-device)
• Voice date recordings
• Voice challenge responses

2.4 Location Data

• Approximate location (for matching purposes)
• Location permission is user-controlled

2.5 Device & Technical Data

• Device model, operating system
• App version
• IP address
• Firebase instance ID

2.6 Payment Data

• Subscription status and type
• Purchase history (via Apple/Google)
• Credit card information is not stored by us (processed by Apple/Google)

2.7 Verification Data

• Email verification status
• Social sign-in verification status (Apple ID / Google)

2.8 Analytics Data

• App usage statistics
• Screen view counts
• Interaction data (likes, matches)

2.9 Messaging Data

• Message content (text and voice notes)
• Typing indicators
• Read receipts
• Message timestamps

2.10 Interaction Data

• Like and dislike records
• Super like usage
• Swipe statistics and daily limits
• Daily streak (consecutive usage series) data
• Undo actions
• Profile visits (visitor ID, visited ID, timestamp)

2.11 Music Profile

• Music preferences and favorite genres
• Favorite artists (user-entered information)
• Music taste compatibility data (for matching purposes)

2.12 Gift Data

• Virtual gift sending and receiving records
• Gift type, sender, and recipient information
• Gift sending timestamps

2.13 Notification Data

• Firebase Cloud Messaging (FCM) token
• Notification preferences (matches, messages, voice notes, etc.)
• Device registration token (push notification registration)

3. How We Use Your Data

We use your personal data for the following purposes:

• Account creation and identity verification
• Matching algorithm (voice chemistry + zodiac compatibility + music taste)
• In-app communication (messages, voice notes, voice dates)
• Subscription and payment management
• Security and fraud prevention
• Push notification delivery
• Product development and improvement
• Compliance with legal obligations
• Customer support

4. Legal Basis (GDPR Article 6)

Processing Purpose	Legal Basis
Account management	Performance of contract (Art.6(1)(b))
Matching & voice comparison	Consent (Art.6(1)(a))
Security & verification	Legitimate interest (Art.6(1)(f))
Analytics	Legitimate interest (Art.6(1)(f))
Legal obligations	Legal obligation (Art.6(1)(c))
Marketing	Consent (Art.6(1)(a))

5. Voice Data Processing

Voice-first dating is Buddy's core feature. Your voice data is treated with special care:

• Voice prompts: Visible on your profile and can be listened to by other users. Recording duration is limited to a maximum of 30 seconds.
• Voice chemistry comparison: Your tone, energy, and speaking style are compared entirely on your device to calculate compatibility scores. This process uses Apple's Accelerate framework (vDSP); no audio data is sent to any external server or third-party service.
• Voice dates: Real-time voice conversations between matched users. These conversations are not recorded; only connection metadata (duration, time) is stored.
• Voice challenges: Users can create voice responses on specific topics. These responses may be displayed on your profile.
• Storage: Voice recordings are stored on Firebase Cloud Storage so that matched users can listen to each other's voice profiles. All voice recordings are permanently deleted upon account deletion.
• Third-party access: Your voice data is not shared with third parties and is not used for advertising.

6. Data Sharing & Third Parties

We do not share your personal data with third parties except in these limited circumstances:

Service Provider	Purpose	Data Type
Google Firebase (Auth, Firestore, Storage)	Infrastructure, database, authentication	Account, profile, technical
Firebase Cloud Messaging	Push notification delivery	FCM token, notification preferences
Firebase Remote Config	Remote configuration	Device characteristics (anonymized)
Firebase Cloud Functions	Server-side operations	Request data (per-operation)
Apple / Google	Payment processing	Subscription info
Apple StoreKit	In-app purchase verification	Purchase receipt, transaction ID
Firebase Analytics	App analytics	Anonymized usage
Firebase Crashlytics	Error reporting	Device, error info

We do not sell or share your data with third parties for advertising purposes.

7. International Data Transfers

Firebase infrastructure runs on Google Cloud, and data may be processed in EU/US data centers. These transfers are protected by Standard Contractual Clauses (SCC) under GDPR.

8. Data Retention

Data Type	Retention Period
Account information	While account is active + 30 days
Profile information	While account is active
Voice recordings	While account is active
Messages	While account is active
Interaction data (likes/swipes)	While account is active
Profile visits	Last 90 days
Music profile	While account is active
Gift records	While account is active
Notification data (FCM token)	While device registration is active
Block/report records	While account is active + 1 year
Verification data	While account is active
Analytics data	14 months (anonymized)
Backups	Within 30 days after deletion

9. Your Rights (GDPR)

If you reside in the EU/EEA, you have the following rights:

• Right of access: Request access to your personal data.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure (right to be forgotten): Request deletion of your personal data.
• Right to restriction: Request restriction of processing in certain circumstances.
• Right to data portability: Receive your data in a structured format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw your consent at any time for consent-based processing.

To exercise your rights, email privacy@buddy.dating or use the in-app settings.

10. KVKK Rights (Turkish Law)

If you reside in Turkey, under Law No. 6698 on Protection of Personal Data (KVKK), you have the right to:

• Learn whether your personal data is being processed
• Request information about processing if data has been processed
• Learn the purpose of processing and whether data is used accordingly
• Know the third parties to whom data is transferred domestically or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction under Article 7 of KVKK
• Request notification of corrections/deletions to third parties
• Object to results arising from processing of your data against you
• Claim compensation for damages resulting from unlawful processing

For KVKK applications: kvkk@buddy.dating

11. Children's Privacy

Buddy is for users aged 18 and over only. We do not knowingly collect data from anyone under 18. If we learn that we have collected information from a child, we will delete it immediately.

12. Cookies

Our website (buddy.dating) uses the following cookies:

• Essential cookies: Required for site functionality (language, theme preferences)
• Analytics cookies: Visit statistics (anonymous)

Advertising cookies are not used. You can manage cookie preferences through your browser settings.

13. Security Measures

• AES-256 encryption (in transit and at rest)
• SSL/TLS secure data transmission
• Firebase Security Rules for access control
• Content moderation to prevent fake profiles
• Regular security audits
• Minimum data collection principle
• Limited employee data access
• Keychain for secure on-device storage of sensitive data (authentication tokens)
• SwiftData for encrypted local cache storage
• Jailbreak/root detection mechanism for protection on compromised devices

14. Policy Changes

We may update this Privacy Policy from time to time. For significant changes, we will notify you via in-app notification and/or email. Your continued use means acceptance of the updated policy.

15. Contact

For privacy-related questions:

• Email: privacy@buddy.dating
• KVKK: kvkk@buddy.dating
• General support: support@buddy.dating

16. Data Export

Under GDPR Article 20 (right to data portability), you can request a copy of your personal data:

• In-app export: You can download a machine-readable (JSON) copy of your data from Settings > Privacy > Export My Data.
• Scope: The export file includes your profile information, voice recording metadata, interaction history, message history, and preferences.
• Processing time: Data export requests are processed within 30 days.
• Format: Data is provided in JSON format as an encrypted file.

17. Local Storage

Buddy uses the following local storage methods on your device:

• SwiftData (Local Cache): Profile information and chat history are cached in an encrypted on-device database for faster loading. This data is used only for performance purposes and is synchronized with server data.
• Keychain (Sensitive Data): Authentication tokens and session information are stored under hardware-level encryption via Apple Keychain. Only the Buddy app can access this data.
• UserDefaults (Preferences): Non-sensitive user preferences such as language preference, theme selection, and notification settings are stored.
• Cleanup: Upon account deletion, all local data (SwiftData, Keychain, UserDefaults) is permanently cleared from the device.