LOJIWAY – KVKK Information Notice

Effective Date: July 20, 2025

Last Updated: August 10, 2025

 

In accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”), we, as the data controller, hereby inform you about the processing of your personal data provided to us when you use the Lojiway mobile application (“Application”).

 

1. Data Controller

Lojiway is operated by Eren Özkan, conducting business in the Republic of Turkey.

Email: support@lojiway.com

Mailing Address: Ataşehir Merkez PTT Branch, Küçükbakkalköy Mah. Kayışdağı Cad. No:87/A, 34750 Ataşehir/İstanbul, Turkey

 

2. Personal Data Processed

The following categories of personal data may be processed:

- Account/Profile: name, surname, email address, date of birth, gender (optional), preferences, settings, profile photos (if uploaded)

- Location: only the most recent location is stored to match nearby users; no location history is kept

- Messages: user-to-user message content (automatically deleted after 24 hours)

- Device/Usage: IP address, device/operating system, app version, crash logs, performance and interaction data

- Images: user-uploaded content (if any)

- Payments: currently, no payment/transaction records are processed

 

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

- Provision of application services (nearby matching, profile, and messaging functions)

- Ensuring security, preventing fraud/abuse, and investigating complaints

- Improving performance, fixing errors, and enhancing user experience (analytics/crash data)

- Fulfilling legal obligations

 

4. Collection Method and Legal Bases

Your data is obtained electronically via the Application and related technical infrastructures and processed based on the legal grounds in Article 5 of KVKK:

- Performance of a contract (Art. 5/2-c): account creation and provision of core services

- Legitimate interest (Art. 5/2-f): ensuring security, fraud prevention, and service improvement

- Legal obligation (Art. 5/2-ç): compliance with requests and records under relevant legislation

- Explicit consent (Art. 5/1): marketing communications (if any), sensitive/background location, and non-essential analytics

 

We do not request sensitive personal data. If needed in the future, explicit consent will be obtained in accordance with Article 6 of KVKK.

 

5. Data Transfers (Recipient Groups) and International Transfers

Your personal data may be shared with service providers acting as data processors under our instructions, including:

- Firebase/Google (authentication, push notifications, Crashlytics, Analytics, database/storage)

- Map/Location Providers (e.g., Google Maps, Apple Maps)

- Apple (platform services)

- Necessary email, support, or CDN services

 

Data may also be shared with authorized public institutions where required by law.

 

Some service providers may process data outside of Turkey. In accordance with Article 9 of KVKK, we rely on explicit consent and/or safeguards approved by the Turkish Data Protection Authority; where necessary, in-app notices will be provided.

 

6. Data Retention Periods

- Account/Profile: retained while the account is active; deleted within 30 days after a deletion request; may remain in backups for up to 90 days

- Messages: automatically deleted after 24 hours (users may delete earlier)

- Location: no logs are kept; only the most recent location is stored for service purposes; deleted when the account is removed

- Analytics/Crash Logs: raw logs for approximately 90 days; aggregated metrics for 12–24 months

- Security/Fraud Logs: 6–24 months depending on risk and legal requirements

- Payments: not applicable (no payment/transaction data currently collected)

 

7. Your Rights (KVKK Art. 11)

You have the right to:

- Learn whether your personal data is being processed

- Request information and access/copies if it has been processed

- Request correction, deletion, or anonymization (where conditions are met)

- Object to certain processing activities

- Request restriction of processing where permitted by law

- Request data portability (where technically feasible)

- Lodge a complaint with the Turkish Data Protection Authority

 

8. Application Method

To exercise your rights, you can write to support@lojiway.com with the subject line “KVKK Request.” We may need to verify your identity. Requests will be finalized within 30 days. A reasonable fee may be charged for repetitive or excessive requests, as permitted by law.

 

9. Updates

This notice may be updated from time to time. Changes will be published within the Application. Continuing to use the Application constitutes acceptance of the updated notice.

 

Thank you.