KVKK Privacy Notice and Explicit Consent Statement

PART A — PRIVACY NOTICE

This Privacy Notice contains the information provided by the data controller, in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and related legislation, regarding the processing of the personal data of the users of the Tazkir application (the "Application").

1. Identity of the Data Controller

Data controller: Abdullah Onur Şimşek (individual developer)

Address: Tunahan Mahallesi 210. Sokak 17625 Ada Gökkuşağı Evleri, Etimesgut/Ankara, Türkiye

Email: contact@berryfilm.art

2. Personal Data Processed

Note: In guest (anonymous) use, no identity/contact data is collected; the hadiths you save and your usage preferences are processed by being linked not to your personal identity but to an anonymous user identifier tied to the device.

The data we hold directly (name, email, user identifier, saved hadiths) is used solely for the purpose of operating the Application within the Application; it is not sold or transferred to third parties for advertising/marketing purposes. Advertising (AdMob), analytics (Firebase Analytics), and crash report (Firebase Crashlytics) data is processed by the relevant providers under their own policies.

3. Purposes of Processing Personal Data

Your personal data is processed for the purposes of creating your account and verifying your identity, synchronizing saved items and preferences across devices, sending the notifications you have requested, activating/verifying/managing the Pro subscription, operating and improving the Application, carrying out usage analysis and crash reporting (Firebase Analytics, Firebase Crashlytics), displaying advertisements in the Free version (Google AdMob), managing requests and complaints, and fulfilling legal obligations.

4. Legal Grounds for Processing Personal Data (KVKK Art. 5)

• Being necessary for the establishment or performance of a contract (Art. 5(2)(c)): account creation, provision and management of the subscription service.
• Fulfillment of the data controller's legal obligation (Art. 5(2)(ç)): obligations arising from legislation.
• Being mandatory for the establishment, exercise, or protection of a right (Art. 5(2)(e)).
• The legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5(2)(f)): the security of the Application, prevention of misuse, and service improvement.
• Explicit consent (Art. 5(1)): for processing not covered by any of the grounds above, and for the transfer abroad specified below.

5. Transfer of Personal Data and Transfer Abroad

Your data is processed through, and shared to the extent necessary with, the following service providers (data processors) for the purpose of providing the service:

Because these providers may carry out part of the processing on servers outside Türkiye (e.g., in the United States), your personal data may be transferred abroad within the meaning of Article 9 of the KVKK. That transfer relies on the explicit consent you give by accepting this notice on the Application's sign-in screen. The scope and recipients of the transfer are listed above; you may withdraw your consent by writing to contact@berryfilm.art.

• Google (Firebase): authentication, database, server functions, storage, and notifications. Your data is hosted in the European Union region (Frankfurt, Germany — europe-west3).
• Google (Firebase Analytics and Firebase Crashlytics): analysis of app usage and crash reporting.
• Google (AdMob): advertising in the Free version; advertising identifiers and device/app information are processed by Google under its own policies (https://policies.google.com/privacy, https://policies.google.com/technologies/partner-sites).
• Apple: Sign in with Apple, App Store subscription infrastructure, and notifications (APNs). On iOS, App Tracking Transparency (ATT) permission may be requested for personalized advertising.
• Google: Sign in with Google and Google Play subscription infrastructure.
• Email delivery service (Gmail/SMTP): delivery of data-export and informational emails.

6. Method of Data Collection

Your personal data is collected by automated and partially automated means in electronic form, while you use the Application, create an account, set preferences, and purchase a subscription.

7. Rights of the Data Subject (KVKK Art. 11)

In accordance with Article 11 of the KVKK, you have the right to: learn whether your personal data is being processed; request information if it has been processed; learn the purpose of the processing and whether the data is used in accordance with that purpose; know the third parties to whom the data is transferred domestically or abroad; request the rectification of data that has been processed incompletely or incorrectly; request the erasure/destruction of data under the conditions provided in the KVKK; request that these actions be notified to the third parties to whom the data has been transferred; object to any result to your detriment arising from the analysis of your data exclusively by automated systems; and claim compensation for any damage you suffer due to unlawful processing.

You may exercise these rights by applying to contact@berryfilm.art. The Application also provides direct tools to export your data ("Send me my data"), clear it ("Delete my saves"), and delete your account ("Delete account"). Your applications are concluded within 30 days at the latest, in accordance with the Communiqué on the Principles and Procedures for Applications to the Data Controller.

PART B — EXPLICIT CONSENT AND YOUR CHOICES

This notice contains no separate checkbox. By "continuing" on the Application's sign-in screen, you accept the Terms of Use, the Privacy Policy, and this Privacy Notice. That acceptance constitutes your explicit consent for processing not covered by the other conditions in Article 5(2) of the KVKK, and in particular for transfers abroad under Article 9.

Your acceptance covers: the processing of your personal data for the purposes set out in this notice, and, to the extent necessary to provide the service, its transfer abroad through the service providers listed above (Google/Firebase, Firebase Analytics, Firebase Crashlytics, Google AdMob, Apple, the email delivery service).

You may withdraw your consent at any time by writing to contact@berryfilm.art; upon withdrawal, consent-based processing is stopped for the future. Notifications, ad preferences, usage analytics and crash reports can also be managed from the relevant screens within the Application.