Data Protection Notice (KVKK & GDPR)
This notice explains how Cocktailly processes personal data under the Turkish Personal Data Protection Law (KVKK), including the categories of data processed, purposes, legal grounds, sharing practices, and your rights.
1. Data Controller
Data Controller: Sarper Sarp
Contact: contact@cocktailly.co
2. Personal Data Processed
- Identity: Name, surname, username
- Contact: Email address
- Account: Apple ID / Google account login data
- Usage and behavioural data: in-app interactions, content views, saved cocktails, cocktails marked as tried, summary preference scores derived from those interactions, favorites, search history, notification opens/clicks, profile and tab usage, device language, timezone, and country information
- Subscription: Premium membership status and transaction history
- User Content: AI prompts, chat messages, generated cocktails, comments, ratings, support/feedback messages, and reported content details
- Photos/Images: Cocktail or profile photos/images you choose to upload
- Technical: Device identifiers, OS information, app version, crash data, performance data, and diagnostic logs
- Advertising: If ads are enabled, non-personalized advertising request data and advertising-related identifiers handled by third-party advertising SDKs
3. Purposes of Processing
- Providing and improving app services
- Personalized cocktail recommendations and selections based on summary preference scores
- Displaying saved and tried cocktails in your profile
- Personalizing notifications based on your interests and prior interactions
- Operating AI-powered features
- Managing premium subscriptions
- Ensuring account security, preventing abuse, and troubleshooting issues
- Fulfilling legal obligations
- Analyzing and improving performance
4. Data Sharing
- Apple Inc. – App Store subscription management
- RevenueCat Inc. – Subscription infrastructure
- AI providers – Cocktail recommendations, ingredient substitutions, party punch recipes, and content moderation results
- Advertising service providers – If ads are enabled, using non-personalized ad requests unless tracking is separately disclosed and consented to
- Cloud providers – Secure data storage
- Authorities – When legally required
5. Legal Basis
- Performance of a contract
- Legal obligation
- Legitimate interest
- Explicit consent where required
6. Data Minimisation and Retention
Behavioural and interaction data, and summary preference scores derived from it, are retained only for as long as necessary to operate the service, support profile features, run recommendation and notification logic, maintain security, and measure product performance. Data that is no longer needed is deleted, anonymized, or aggregated.
7. Your Rights
- Access, information, and correction
- Deletion (right to be forgotten) and restriction
- Data portability
- Objection to automated processing
- Compensation for unlawful processing
To exercise these rights, contact contact@cocktailly.co.
8. Security
- SSL/TLS encryption
- Secure hosting with access control
- Regular security assessments
- Data minimization
9. Retention
Data is retained while your account is active or as required by law. Upon deletion request, data is deleted or anonymized within a reasonable period, unless legal obligations require retention.
10. Contact
contact@cocktailly.co · https://cocktailly.co