Skip to content

KVKK Notice

Last updated: February 2, 2026
Quick links: Privacy Policy · Terms of Service · Account & Data Deletion · Contact & Support

This notice is provided for users in Türkiye under the Personal Data Protection Law No. 6698 (“KVKK”). It explains how Bulurang processes personal data, for which purposes, and what rights you have.

1. Data controller

For the purposes of KVKK, Bulurang acts as the data controller for personal data processed in connection with the Service, unless stated otherwise.

You can reach us at dataprotection@bulurang.com for KVKK-related inquiries and requests.

2. Categories of personal data

  • Identity and contact information (if you provide it via support requests).
  • Account/profile information (if you sign in): identifiers and profile fields (for example name/email when provided by Google Sign-In via Firebase Authentication).
  • Content you add to Bulurang (photos, notes, items, categories, reminders, lists) stored on your device.
  • Advertising data related to ads shown in the App (including Android Advertising ID (AD_ID) where available, ad impressions/interactions, and typical device/network signals for ad delivery and fraud prevention).
  • Technical and usage information (device/app data, logs, diagnostics).

3. Purposes of processing

  • Providing and maintaining the Service and its features.
  • Improving performance, quality, and user experience.
  • Ensuring security, preventing misuse, and detecting fraud.
  • Managing support requests and communicating with users.
  • Displaying and measuring ads in the App (Google AdMob).
  • Complying with legal obligations and resolving disputes.

4. Legal grounds

Personal data may be processed in accordance with Articles 5 and 6 of KVKK, including where processing is necessary for the establishment or performance of a contract, for compliance with a legal obligation, for the legitimate interests of the data controller (provided fundamental rights and freedoms are not harmed), or based on your explicit consent where required.

5. Transfers

We do not sell personal data. We may share limited data with service providers solely to operate the Service, including Google (Firebase Authentication for login and AdMob for ads), subject to confidentiality and security obligations. Transfers may also occur if required by law or competent authorities.

Where cross-border transfer is required (for example, when using global infrastructure providers), we aim to apply appropriate safeguards in line with KVKK and related guidance.

6. Retention

We retain personal data only for the period necessary for the purposes described above and for the retention periods required by applicable legislation.

7. Your rights under KVKK (Article 11)

KVKK grants you rights including:

  • Learn whether your personal data is processed and request information.
  • Learn the purpose of processing and whether it is used in accordance with its purpose.
  • Know third parties to whom personal data is transferred domestically or abroad.
  • Request correction, deletion, or destruction under KVKK conditions.
  • Object to outcomes against you resulting from automated analysis.
  • Request compensation if you suffer damage due to unlawful processing.

8. How to contact us

You can submit KVKK requests by emailing dataprotection@bulurang.com. We may ask you to verify your identity before responding.

We will respond within the legal time limits and may request additional information to confirm your identity and scope your request.