VIBEVIBE — Personal Data Protection Notice
Last updated: 12.09.2026
This notice explains personal data processing in the VIBE mobile application and vibecadde.com website under Türkiye's Personal Data Protection Law No. 6698 (“KVKK”). VIBE is a local social network offering Moments, Threads, connections and messaging around Bağdat Caddesi.
1. Controller and contact
Data controller: İsmail Hüseyin Demir.
Platform: VIBE / vibecadde.com. For questions and requests concerning personal data, contact info@vibecadde.com.
2. Data and collection methods
Data is collected electronically through account/profile forms, content you share, in-app actions, device permissions and responses from service providers. Depending on the features used, the following categories are processed:
| Data category | Scope |
|---|---|
| Account and contact | Display name, date of birth/age, gender, phone, email and account identifiers |
| Profile and verification | Profile photos, bio, interests, profile answers, selfie and avatar choices |
| Content and communication | Moment media, Threads and replies, messages and attachments, voice messages, voice/video call streams and transaction information |
| Interactions | Connections, views, Spark/Bouquet interactions and related timestamps |
| Location | Coordinates for area checks, last location/update information, Cadde area status and the neighbourhood associated with content |
| Device and security | IP, device/OS information, session and notification tokens, security records |
| Purchases and support | Subscription/transaction details, support requests, reports and blocks |
| Preferences | Language, notification and privacy settings |
Free text and media may include other personal information you choose to share. Health, sex-life and other special-category data are subject to KVKK Article 6; accepting terms is not blanket consent to process such data.
3. Purposes and legal bases
| Activity | Purpose | Relevant legal basis |
|---|---|---|
| Account and profile | Account creation, sign-in and profile services | KVKK 5/2-c for processing necessary to establish or perform a contract |
| Moments, Threads, connections and communication | Requested sharing, interaction, messaging and calling services | KVKK 5/2-c |
| Location features | Checking the Cadde area condition and associating content with a neighbourhood | KVKK 5/2-c for necessary and proportionate processing to deliver the requested feature |
| Security and verification | Account security, abuse prevention and verification | KVKK 5/2-f subject to fundamental rights and freedoms; 5/2-c for the necessary contractual part |
| Subscriptions and purchases | Purchase/subscription management | KVKK 5/2-c and 5/2-ç for applicable legal obligations |
| Requests and disputes | Support, protection of rights and authorised authority requests | KVKK 5/2-c, 5/2-e or 5/2-ç, according to the activity |
Consent-based activities require a separate explanation of purpose and scope and an independent choice. Providing this notice, accepting terms and granting device permissions are distinct actions.
4. Location use and map display
Moments: Public Cadde Moments require you to be inside the defined area, not at a particular point within it. Coordinates are sent to check the area and determine a neighbourhood. The Moment stores the neighbourhood; exact coordinates are not added to new Moment records or shown in Moment responses.
Threads: Coordinates are processed when starting a conversation to check the area and determine a neighbourhood. The Thread is associated with that neighbourhood. Its map avatar and speech bubble do not display the exact GPS point or continuous live movement. The displayed neighbourhood is not presented as the user's home address or place of residence. The conversation, profile/avatar and neighbourhood are shown to users who can access that Thread.
Area status: Location operations also update whether you are in Cadde separately from content sharing. Location synchronisation may store the last coordinates, update time and inside/outside status on the user profile. Background/geofence operations depend on the relevant device permission. Withholding the exact point from a Moment or Thread does not mean no location data is processed on the server.
You can disable location access in device settings; features requiring location validation may then be unavailable. Historical location records and backups are subject to the retention and erasure provisions below.
5. Recipients
Profiles and content are shown according to the feature's visibility conditions. Moment owners can see incoming Spark and Bouquet interactions. Messages are delivered to conversation participants. Reports, support and security processes may require authorised review.
| Recipient / provider group | Purpose and related data |
|---|---|
| Google/Firebase and Apple | Account, contact and authentication data needed for sign-in/verification |
| Expo/FCM | Delivery using notification tokens and notification content |
| Agora | Voice/video call streams and technical data needed to establish calls |
| RevenueCat and app stores | Purchase/subscription data and necessary account identifiers |
| Mapbox | Map requests and technical data needed to provide the map |
| Hosting and storage services | Storage of accounts, content and media and delivery of services |
| Authorised authorities and advisers | Data needed for legal obligations and protection of rights |
When providing the services listed above, personal data may be transferred to overseas providers to the extent necessary for the relevant service. These transfers are subject to the conditions in Article 9 of the KVKK.
6. Retention and erasure
An account deletion request starts a 72-hour grace period. Unless cancelled, the account and user profile are permanently deleted in a daily deletion run after that period. Signing in again before deletion completes may cancel the request.
Deleting the user profile and the user's Moment records does not delete message records from the other participant's conversation history. Those message records are retained in the conversation. Media associated with profiles and content undergo separate deletion operations. Ending active visibility does not simultaneously erase all backups and other records.
Subscription/transaction records, erasure records and information needed for legal obligations or protection of rights may be retained to the extent necessary for those purposes. Submit correction or erasure requests through the contact channel. Freezing an account differs from permanent deletion.
7. Permissions, analytics and notifications
Manage camera, photo library, microphone, notification and location permissions in device settings. Optional product analytics is disabled. Operational notifications and marketing communications have separate purposes; this notice does not collect marketing permission. See consent and cookie information for website storage.
8. Rights and requests
Under KVKK Article 11, you may learn whether data is processed; request information; learn the purpose and whether use corresponds to it; learn domestic/overseas recipients; request correction and, under statutory conditions, erasure/destruction; and request that these actions be notified to recipients. You may object to adverse outcomes based solely on automated analysis and claim compensation for unlawful processing.
Contact info@vibecadde.com. Necessary information may be requested to verify that the request is yours. Requests are concluded within 30 days at the latest; fees under the Authority's tariff may apply where legally permitted. Data subject request form (Turkish).