HasletTürkçe

Haslet

KVKK Privacy Notice

Version 2026-10-01 · Last updated: 1 October 2026

This notice is provided under Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (the “Law”) to inform users who create an account in the Haslet app. See the Privacy Policy for details. If the Turkish version differs, the Turkish version prevails.

1. Data controller

Your personal data is processed by the data controller Alperen Sevinç (fraxlabs). Contact: [email protected]

2. Personal data processed

When you use the app without an account, no personal data reaches us; your records stay only on your device. When you create an account, the following is processed:

  • Identity and contact: email address; Google account identifier if you sign in with Google.
  • Profile: name (optional), date of birth, age of puberty, when you started praying and fasting, gender, notification preferences.
  • Sensitive personal data: prayer, fasting, qada, dhikr and Quran records that may reveal religious beliefs; menstrual records and cycle length, which are health data.
  • Transaction security: digests of session keys and of sign-in/deletion codes, IP address and access logs.
  • Consent record: version and date of the accepted text.

If you use the contact form on haslet.frax.tr, your name, email address and message are processed even without an account; to prevent spam, your IP address is kept as a counter for at most 24 hours.

3. Purposes

Your personal data is processed to create your account and verify your identity, back up your records and sync them across your devices, send service emails (sign-in code, new sign-in notice, deletion confirmation), reply to messages sent through the contact form or by email, ensure information security and prevent abuse, meet legal obligations and answer data subject requests.

Your personal data is collected electronically and automatically, through the information you enter in the app, the app’s synchronisation with our server and the forms on haslet.frax.tr.

  • Providing the account service: directly related to the establishment or performance of a contract (Art. 5/2-c).
  • Security logs, abuse prevention and replying to contact messages: the controller’s legitimate interest (Art. 5/2-f).
  • Legal obligations: Art. 5/2-ç.
  • Sensitive personal data: your explicit consent (Art. 6). Without it no account can be created; you can keep using the app without an account.

5. Transfers

Your personal data is transferred only for the purposes above, and only as far as necessary, to:

  • Oracle Cloud: the infrastructure provider hosting our server (Frankfurt, Germany). This is a transfer abroad under Art. 9 of the Law and is carried out in line with the safeguards set out in the Law.
  • Google: only if you choose to sign in with Google, for authentication.
  • Competent public authorities: only where legally required.

Your data is never sold or shared with third parties for marketing or advertising.

6. Your rights under Article 11

By applying to the controller you may: learn whether your personal data is processed; request information if it is; learn the purpose of processing and whether it is used accordingly; know the third parties in Türkiye or abroad to which it is transferred; request correction if it is incomplete or inaccurate; request deletion or destruction under the conditions of Article 7; request that correction and deletion be notified to the third parties it was transferred to; object to a result against you arising solely from automated analysis; and claim compensation for damage caused by unlawful processing.

7. How to apply

Send your request from the email address registered to your account to [email protected]. Requests are concluded free of charge as soon as possible and within 30 days at the latest. You do not need to apply to delete your account or data: you can do it instantly in the app (Settings → Delete my account (“Ayarlar → Hesabımı Sil”)) or at haslet.frax.tr/en/delete-account.