Privacy policy
Last updated 11 September 2026
The plain line under each heading is a summary. The text beside the rule is the policy itself, and it’s the version that binds — if the two ever disagree, the clause wins.
1What we collect
Your email address, and whatever you type into an app.
1.1 We process the account identifier you supply (an email address), content you create within an app, and technical logs necessary to operate the service.
1.2 We do not acquire personal data from third-party data brokers, and we do not enrich your record from external sources.
2Why we have it
To run the thing you signed up for, and to answer you when you write in.
2.1 The lawful basis for processing account and content data is performance of the contract between us.
2.2 Where we rely on legitimate interests — security logging and abuse prevention — you may object at any time.
3Who else sees it
Our hosting and payment providers, because they have to. Nobody else.
3.1 Processors acting on our instructions: infrastructure hosting, object storage, and payment processing. Each is bound by a written processing agreement.
3.2 We do not sell personal data and do not disclose it for third-party advertising.
4How long we keep it
While you have an account, and a short while after you close it.
4.1 Account and content data are erased within 30 days of account deletion, except where a longer retention period is required by law.
4.2 Backups containing deleted data expire on their own schedule, not exceeding 90 days.
5Your rights
Ask us for a copy, ask us to fix it, or ask us to delete the lot. Write to hello@bober.tech.
5.1 You may request access, rectification, erasure, restriction, portability, or object to processing, under KVKK Article 11 and, where applicable, the GDPR.
5.2 We respond within 30 days. You may also complain to the Turkish Personal Data Protection Authority (KVKK Kurumu).