Data Protection Notice
Last updated: 31 July 2026 · Personal Data Protection Law No. 6698 (KVKK)
This notice has been prepared under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK") regarding the processing of personal data of users of the FalaBak mobile application.
1. Data Controller
Your personal data is processed by TESS TASARIM DANISMANLIK MEDYA INSAAT LIMITED SIRKETI in its capacity as data controller, within the framework described below. Contact: [email protected]
2. Categories of Personal Data Processed
- Identity and contact: Name, username, email address
- Profile and demographic: Date, time and place of birth, gender, relationship status
- Visual data: Coffee cup, palm and face photographs
- User content: Dream descriptions, reading questions, selected topics
- Transaction security: IP address, device information, session and login records
- Usage data: Screens viewed, features used, notification preferences
- Financial data: Subscription status and purchase records (card details are not processed by us; payment is handled by the app stores)
3. Purposes of Processing
- Providing the fortune, horoscope, numerology and dream reading services you request
- Creating and managing your account
- Personalising readings
- Operating subscription and purchase processes
- Carrying out notification and communication activities
- Operating information security processes and preventing abuse
- Improving services and performing analytics
- Providing information to authorised persons and institutions and fulfilling legal obligations
4. Legal Grounds
Your personal data is processed on the following legal grounds under Articles 5 and 6 of the KVKK:
- Necessary for the conclusion or performance of a contract (Art. 5/2-c): account creation, service delivery, subscription management
- Compliance with a legal obligation (Art. 5/2-ç): statutory retention and disclosure obligations
- Legitimate interest (Art. 5/2-f): information security, fraud prevention, service quality
- Explicit consent (Art. 5/1 and 6/2): analysis of face and palm photographs, and marketing notifications
On special categories of data: Analysis carried out on images uploaded for face and palm readings may, by its nature, be considered special category personal data. Such data is processed only with your explicit consent and solely to produce the reading you requested. You may withdraw your consent at any time, in which case you will not be able to use that particular service.
5. Transfer of Personal Data
Within the framework of Articles 8 and 9 of the KVKK and limited to the purposes stated above, your personal data may be transferred to:
- Hosting, database and cloud infrastructure providers
- Push notification and analytics providers
- Subscription verification and payment infrastructure providers
- AI-based content generation providers
- Authorised public institutions upon request
Some of these providers may be located abroad. Transfers abroad are carried out in accordance with the conditions set out in Article 9 of the KVKK and, where required, on the basis of your explicit consent.
6. Method of Collection
Your personal data is collected electronically and by partially automated means through information you enter directly in the mobile application, records generated automatically during your use of the app, and purchase verification information obtained from the app stores.
7. Retention Period
Your personal data is retained for as long as the purpose of processing requires, taking into account the limitation periods laid down in applicable legislation. When the purpose ceases to exist or you delete your account, data other than that subject to a statutory retention obligation is deleted, destroyed or anonymised.
8. Your Rights as a Data Subject
Under Article 11 of the KVKK you have the right to:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether the data is used in line with that purpose
- Know the third parties to whom data is transferred domestically or abroad
- Request correction if the data is incomplete or inaccurate
- Request deletion or destruction under the conditions set out in legislation
- Request that correction, deletion and destruction be notified to third parties to whom data was transferred
- Object to an adverse outcome arising from analysis carried out exclusively by automated systems
- Claim compensation for damage suffered due to unlawful processing
9. How to Apply
You may submit requests concerning your rights, together with information verifying your identity, to [email protected]. Applications are concluded free of charge within 30 days at the latest, depending on the nature of the request. Where the process entails an additional cost, the fee set out in the tariff determined by the Board may be charged.
For account and data deletion requests you may also follow the steps on the Account & Data Deletion page.