Blurize
Information Notice on the Processing of Personal Data
This translation is provided for convenience only. The binding version of this notice is the Turkish text; if they differ, the Turkish text prevails.
This notice has been prepared under Article 10 of Türkiye's Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, to inform people who use the Blurize mobile application (the "App"). It is separate from the Privacy Policy.
1. Data controller
Blurize is developed and provided by Okan Atabağ as an individual developer.
- Data controller: Okan Atabağ (natural person)
- KVKK applications and notices: kvkk@blurize.app
- Support: support@blurize.app
2. Your photos and videos never leave your device
The photos and videos you choose, the positions of faces and licence plates in them, your projects and the audio in your videos are processed only on your device. They are never sent to us or to any server, and the data controller has no access to them. Face detection only finds where a face is in the picture; it does not recognise anyone and creates no face template or biometric data. The App does not use the microphone.
3. Personal data processed, purposes and legal grounds
The data below is collected automatically when you use the App, and from the information you enter when you report a problem or make a purchase.
Identity (online identifier)
- Data processed: Anonymous user ID (support ID)
- Purpose: Connecting the App to its configuration and verification services; matching purchases to your account; establishing that support requests are yours
- Legal ground: KVKK Art. 5(2)(c), establishment or performance of a contract
Transaction security
- Data processed: App verification token (App Check)
- Purpose: Blocking requests from fake or modified apps
- Legal ground: KVKK Art. 5(2)(f), legitimate interest
Usage and device
- Data processed: In-app events (e.g. import, scan, export, opening the purchase screen), device model, operating system version, language, country/city-level location derived from the IP address, app instance ID. The advertising ID is used only if you allow tracking on iOS
- Purpose: Measuring statistically which features of the App are used, and improving it. You can stop this processing at any time with the Account → Share usage statistics switch in the App
- Legal ground: KVKK Art. 5(2)(f), legitimate interest; explicit consent for the advertising ID (iOS tracking permission)
Error logs
- Data processed: Technical trace at the time of a crash, device model, operating system, memory state, installation ID
- Purpose: Detecting and fixing App errors
- Legal ground: KVKK Art. 5(2)(f), legitimate interest
Customer transaction (problem report)
- Data processed: Your message in a problem report, your support ID, device information (platform, manufacturer, model, hardware, processor architecture, operating system and version, language), app version; if the report concerns a media item, only that item's type, size and duration
- Purpose: Investigating and resolving the problem you reported
- Legal ground: KVKK Art. 5(2)(f), legitimate interest
Contact
- Data processed: The e-mail address you optionally enter in a problem report
- Purpose: Replying to you; it is used for no other purpose (including marketing)
- Legal ground: KVKK Art. 5(2)(f), legitimate interest
Marketing (advertising)
- Data processed: Advertising ID, IP address, device and connection information, ad impression and click information
- Purpose: Showing and measuring ads in the free version. If you allow "Tracking" on iOS, ads are personalised to your interests; if you don't, and on Android, ads are not personalised
- Legal ground: Explicit consent for personalised ads (iOS tracking permission); KVKK Art. 5(2)(f), legitimate interest, for non-personalised ads
Customer transaction (purchase)
- Data processed: Product purchased, subscription status and term, store transaction information, anonymous user ID. Your card details never reach us
- Purpose: Unlocking premium features, managing and restoring the subscription
- Legal ground: KVKK Art. 5(2)(c), establishment or performance of a contract
4. Transfer of personal data
Your personal data is transferred, limited to the purposes above, to the following groups of recipients whose services we use. Their servers are outside Türkiye:
Google LLC / Google Ireland Ltd. (Firebase)
- Service: Anonymous authentication, app verification, remote configuration, usage statistics (Analytics), error logs (Crashlytics), problem report storage (Cloud Firestore)
- Data transferred: The identity, transaction security, usage, error and problem report data in section 3
- Location: USA; problem reports on servers in the European Union
Google LLC (AdMob)
- Service: Ad serving
- Data transferred: Advertising data
- Location: USA
RevenueCat, Inc.
- Service: Subscription and purchase management
- Data transferred: Purchase data, anonymous user ID
- Location: USA
Apple and Google process the payments you make through their app stores under their own privacy policies, as data controllers themselves.
The data transferred is limited to the purposes listed above; your photos and videos are never transferred under any circumstances.
Your data may be disclosed to legally authorised public authorities, on request and to the extent provided by law.
5. Retention
- Problem reports and e-mail address: deleted automatically 30 days after they are sent.
- Usage statistics: event-level data is kept for 2 months, user-level data for 14 months from your last activity.
- Error logs: kept for 90 days, after which deletion begins.
- Purchase records: kept for as long as your subscription or the purchased product is in use, and for the retention periods required by law.
Data whose retention period has ended is deleted or anonymised.
6. Your rights under KVKK Article 11
By applying to the data controller, you have the right to:
- a) learn whether your personal data is processed,
- b) request information about it if it has been processed,
- c) learn the purpose of the processing and whether the data is used in line with that purpose,
- ç) know the third parties in Türkiye or abroad to whom your personal data is transferred,
- d) request correction of your personal data if it is incomplete or inaccurate,
- e) request deletion or destruction of your personal data under the conditions set out in KVKK Article 7,
- f) request that the actions taken under (d) and (e) be notified to the third parties to whom your personal data has been transferred,
- g) object to an outcome against you that results from the analysis of your data exclusively by automated systems,
- ğ) claim compensation if you suffer damage because of unlawful processing.
7. How to apply
Because the App never asks for your name or e-mail address while you use it, we can find your data only through your support ID. You can see it on the Account screen in the App; please include it in your application.
You can submit your application, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller:
- signed with a secure electronic signature or mobile signature, to kvkk@blurize.app,
- from an e-mail address you have given us before and that is registered in our system (e.g. the address you entered in a problem report), to kvkk@blurize.app.
Your application must include your name and surname, your Turkish ID number (for foreign nationals, nationality and passport/ID number), your address for notifications, your e-mail/phone if any, and the subject of your request.
Your application is concluded free of charge within 30 days at the latest. If it is rejected, you find the answer insufficient, or it is not answered in time, you may file a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).