KVKK Privacy Notice and Explicit Consent Statement

PART A — PRIVACY NOTICE

This Privacy Notice contains the information provided by the data controller, in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and related legislation, regarding the processing of the personal data of the users of the Velum. - Quotes application (the "Application").

1. Identity of the Data Controller

Data controller: Abdullah Onur Şimşek (individual developer)

Address: Tunahan Mahallesi 210. Sokak 17625 Ada Gökkuşağı Evleri, Etimesgut/Ankara, Türkiye

Email: contact@berryfilm.art

2. Personal Data Processed

Note: In guest (anonymous) use, no identity/contact data is collected; the aphorisms you browse and save and your usage preferences are processed by being linked not to your personal identity but to an anonymous user identifier tied to the device.

>

The data we hold directly (name, email, user identifier, browsed and saved aphorisms) is used solely for the purpose of operating the Application within the Application; it is not sold or transferred to third parties for advertising/marketing purposes. Advertising (AdMob) and analytics (Firebase Analytics) data is processed by the relevant providers under their own policies.

3. Purposes of Processing Personal Data

Your personal data is processed for the purposes of creating your account and verifying your identity, synchronizing saved items and preferences across devices, sending the notifications you have requested, activating/verifying/managing the Pro subscription, operating and improving the Application, carrying out usage analysis (Firebase Analytics), displaying advertisements in the Free version (Google AdMob), managing requests and complaints, and fulfilling legal obligations.

4. Legal Grounds for Processing Personal Data (KVKK Art. 5)

• Being necessary for the establishment or performance of a contract (Art. 5/2(c)): account creation, provision and management of the subscription service.
• Fulfillment of the data controller's legal obligation (Art. 5/2(ç)): obligations arising from legislation.
• Being mandatory for the establishment, exercise, or protection of a right (Art. 5/2(e)).
• The legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5/2(f)): the security of the Application, prevention of misuse, and service improvement.
• Explicit consent (Art. 5/1): for processing not covered by any of the grounds above, and for the transfer abroad specified below.

5. Transfer of Personal Data and Transfer Abroad

Your data is processed through, and shared to the extent necessary with, the following service providers (data processors) for the purpose of providing the service:

Since these providers may carry out some operations on their servers abroad (e.g., the United States), your personal data may be transferred abroad within the scope of KVKK Art. 9. Such transfer abroad is carried out on the basis of your explicit consent in Part B.

• Google (Firebase): authentication, database, server functions, storage, and notifications. Your data is hosted in the European Union region (Frankfurt, Germany — europe-west3).
• Google (Firebase Analytics): analysis of app usage.
• Google (AdMob): advertising in the Free version; advertising identifiers and device/app information are processed by Google under its own policies (https://policies.google.com/privacy, https://policies.google.com/technologies/partner-sites).
• Apple: Sign in with Apple, App Store subscription infrastructure, and notifications (APNs). On iOS, App Tracking Transparency (ATT) permission may be requested for personalized advertising.
• Google: Sign in with Google and Google Play subscription infrastructure.
• Email delivery service (Gmail/SMTP): delivery of data-export and informational emails.

6. Method of Data Collection

Your personal data is collected by automated and partially automated means in electronic form, while you use the Application, create an account, set preferences, and purchase a subscription.

7. Rights of the Data Subject (KVKK Art. 11)

In accordance with Article 11 of the KVKK, you have the right to: learn whether your personal data is being processed; request information if it has been processed; learn the purpose of the processing and whether the data is used in accordance with that purpose; know the third parties to whom the data is transferred domestically or abroad; request the rectification of data that has been processed incompletely or incorrectly; request the erasure/destruction of data under the conditions provided in the KVKK; request that these actions be notified to the third parties to whom the data has been transferred; object to a result that arises to your detriment solely through the analysis of automated systems; and request the redress of any loss should you suffer damage due to unlawful processing.

You may exercise these rights by applying to contact@berryfilm.art. The Application also provides direct tools to export your data ("Send me my data"), clear it ("Clear data"), and delete your account ("Delete my account"). Your applications are concluded within 30 days at the latest, within the scope of the Communiqué on the Procedures and Principles of Application to the Data Controller.

PART B — EXPLICIT CONSENT STATEMENT

The following explicit consent is requested only for situations not covered by the other processing conditions in KVKK Art. 5/2 (in particular, transfer abroad). Not giving this consent does not affect the essential operations mandatory for the performance of the contract; however, certain cloud-based features may be unavailable.

I declare that I have read and understood the Velum. - Quotes Privacy Notice; and that, of my own free will, I give my explicit consent, pursuant to KVKK Art. 9, to the processing of my personal data for the purposes set out in this notice and to its transfer abroad through the service providers listed above (Google/Firebase, Firebase Analytics, Google AdMob, Apple, email delivery service), to the extent necessary for the provision of the service.

I understand that I may withdraw this consent at any time by applying to contact@berryfilm.art; and that, should I withdraw it, processing activities dependent on the consent will be discontinued on a forward-looking basis.

• I accept the transfer abroad and the processing specified above.