Karşılaş
Privacy Policy
Information about how your personal data is collected, processed, and protected in the Karşılaş mobile application.
1. Introduction
This Privacy Policy explains how Parevo ("Company", "we", "us") collects, uses, stores, and protects your personal data in connection with the Karşılaş mobile application (iOS and Android, Bundle ID: com.karsilas.app).
Karşılaş is a social platform that helps users in Turkey find companions for concerts and social events. This policy has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and applicable legislation.
By using the application, you are deemed to have read and understood this Privacy Policy.
2. Data Controller
The data controller of your personal data is Parevo.
Contact: [email protected]
Address: Fenerbahçe Mah. İğrip Sk. No: 13 İç Kapı No: 1, Kadıköy / Istanbul, Turkey
3. Personal Data We Collect
Through the Karşılaş application, the following categories of personal data may be collected and processed:
| Category | Data Types | Collection Method |
|---|---|---|
| Identity & Account | Email, full name, username, date of birth, gender | Registration form, OAuth (Google/Apple) |
| Profile | Profile photo, bio, city/country, interests, event preferences, social media links | User input |
| Location | GPS location (only while the app is in use) | Device permission (while in use) |
| Music Profile | Spotify account connection, top artists/tracks, music compatibility score | Spotify OAuth (optional) |
| Social & Communication | Match requests, messaging content, group chats, event participation | App usage |
| Listings & Events | Saved events, ride-share listings, ticket listings | App usage |
| Technical | Device information, app usage data, push notification token, session tokens | Automatic collection |
4. Purposes of Processing
- Account creation and authentication (Google Sign-In, Apple Sign-In)
- User profile creation and personalization
- Displaying nearby events and map features (location data)
- Calculating music taste compatibility scores (Spotify connection)
- Providing matching, messaging, and group communication services
- Operating event participation, ride-share, and ticket listing features
- Sending push notifications (event reminders, messages, matches)
- Platform security, abuse detection, and reporting
- Fulfilling legal obligations
- Improving service quality and analytics
5. Legal Bases
Your personal data is processed on the following legal bases:
- Performance of a contract (KVKK Art. 5/2-c): Account creation and service delivery
- Explicit consent (KVKK Art. 5/1): Location data, Spotify connection, push notifications
- Legitimate interest (KVKK Art. 5/2-f): Platform security, fraud prevention, service improvement
- Legal obligation (KVKK Art. 5/2-ç): Compliance with legal requests
6. Third-Party Services
Karşılaş works with the following third-party service providers to deliver its services:
| Service | Provider | Purpose | Shared Data |
|---|---|---|---|
| Authentication | Google Sign-In | Account creation and sign-in | Email, name, profile photo |
| Authentication | Apple Sign-In | Account creation and sign-in | Email (may be hidden), name |
| Music Profile | Spotify API | Music taste compatibility | Listening history, top tracks/artists |
| Infrastructure | Firebase (Google) | Database, storage, authentication | All application data |
| Notifications | Expo Push Notifications | Push notifications | Device token |
| Event Data | Ticketmaster | Event synchronization | No user data shared |
7. Data Transfers
Your personal data may be stored outside Turkey on servers operated by service providers such as Firebase (Google), Apple, Spotify, and Expo. These transfers are carried out under KVKK Art. 9 to countries offering adequate protection or through appropriate safeguards (Standard Contractual Clauses, explicit consent).
Your data is not sold or rented to third parties except where required by law.
8. Data Retention Periods
| Data Type | Retention Period |
|---|---|
| Account and profile data | While the account is active + 30 days after account deletion |
| Messaging content | While the account is active or until deleted by the user |
| Location data | For the duration of the session; not stored permanently |
| Usage and technical logs | Up to 12 months |
| Legal compliance data | As required by applicable legislation |
9. Data Security
Industry-standard measures are taken to protect your personal data:
- Data transmission via SSL/TLS encryption
- Secure storage of session tokens
- Access control through Firebase security rules
- Regular security assessments
- Technical and administrative measures against unauthorized access
10. Your Rights
Under KVKK Art. 11, you have the following rights:
- To learn whether your personal data is being processed
- To request information if your data has been processed
- To learn the purpose of processing and whether data is used accordingly
- To know third parties to whom your data is transferred domestically or abroad
- To request correction if your data is incomplete or inaccurate
- To request deletion or destruction under KVKK Art. 7
- To request notification of correction and deletion to third parties
- To object to results arising solely from automated processing that are adverse to you
- To claim compensation for damages arising from unlawful processing
11. How to Exercise Your Rights
To exercise your rights, you may email [email protected] or use the in-app account deletion feature.
Your requests will be concluded free of charge within 30 days at the latest. If the process requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Authority.
Your right to lodge a complaint is reserved; you may apply to the Personal Data Protection Authority (kvkk.gov.tr).
12. Children's Privacy
Karşılaş is not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If such a situation is detected, the relevant account will be deleted immediately.
13. Policy Changes
This Privacy Policy may be updated from time to time. Material changes will be announced via in-app notification or email. The current policy is always published on this page.