Privacy Policy

1) Controller & Contact

Controller: hitapp
Contact: [email protected]

2) Data We Collect

• Account Data: nickname/name, email address, password (stored in cryptographic hash form).
• User Content: stories you write, titles, cover images, comments, likes, and (if available) messages.
• Device & Technical Data: device model, OS, app version, language preference, IP address (for security and debugging), crash logs, and performance metrics.
• Usage Data: in-app navigation, read/write interactions, and feature usage statistics (may be analyzed in aggregate and anonymized).
• Cookies & Similar Technologies (web): essential cookies for session, functional cookies for preferences.
• Permission-based Data (optional):
  • Notifications (for announcements and account activity).
  • Camera/Gallery access (if you choose to upload a profile or cover image).

Note: We do not systematically collect data categorized as Body and Surroundings. If you choose to upload visual content (e.g., a profile picture), it is processed only for account management and content moderation.

3) Purposes of Processing

• Providing the service and managing your account
• Hosting content, recommendations, and improving discovery
• Security, abuse detection, and prevention of violations
• Measuring performance and fixing issues
• Compliance with legal obligations
• Responding to your requests and communications

4) Legal Bases

We process your data primarily based on contract performance (providing the service), our legitimate interests (security and product improvement), and your consent (optional permissions/ communications).

5) Sharing

Your data may be shared with trusted service providers for hosting, content delivery, analytics, and crash/performance monitoring, only as necessary for the stated purposes. Data may be disclosed to authorities where legally required.

6) Retention

We retain your data while your account remains active. Upon account deletion, limited data may be kept for a reasonable period where required by law or our legitimate interests. Your deleted content is removed from public view.

7) Your Rights

• Access and information
• Rectification and update
• Erasure and account deletion
• Objection and withdrawal of consent
• Data portability (where applicable)

Contact: [email protected]

8) Children’s Privacy

The App is not directed to children under 13, and we do not knowingly collect data from this age group. Accounts and data identified in violation will be deleted.

9) Security

We implement appropriate technical and organizational measures. Passwords are stored securely using cryptographic hashing; access is limited to authorized personnel.

10) Changes

This policy may be updated from time to time. For material changes, we will provide notice through appropriate channels. The latest version is always available on this page.

11) KVKK & International Transfers

We comply with applicable Turkish data protection laws (KVKK). Data may be processed or transferred outside Türkiye via service providers; appropriate safeguards are applied in such cases.