Privacy Notice
Version: 26.10.2026
This notice explains, in line with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), how your personal data is processed when you use BeNiche. The Turkish version is the binding one.
1. Data controller
- Data controller: Hülya Sarıgül
- Address: Selimpaşa Merkez Mah. 3396 Zahire Çıkmazı Sok. No:1U Dostlar Sitesi A Blok No.4 Selimpaşa/Silivri/İstanbul
- E-mail: [email protected]
2. Which personal data we process
| Category | Examples |
|---|---|
| Identity and account | Display name, username, profile photo, bio |
| Contact | E-mail address |
| Account security | Password in hashed form only (the password itself is never stored), session data, IP address, device/browser information, verification code records |
| Age statement | The birth date entered at sign-up is used only for the 15+ check and is not kept afterwards |
| Location | Your device location is used only at that moment to check whether you are in Şişli or Beşiktaş. Coordinates are not stored; only the time of the last successful check is kept |
| Content | Posts, photos, videos, stories (36 hours), captions, comments |
| Interactions | Likes, reposts, saves, shares, story views, follows and blocks |
| Messages | Direct messages, posts shared in messages, story replies, read receipts |
| Usage | Posts you have seen in the feed (so the same content is not shown at the top again; 30 days), online status ("active now") |
| Safety and moderation | Reports you make or that concern you (including the text of the reported content at that time), moderation actions, account restrictions, rate-limit records against abuse |
| Support | E-mails you send to [email protected] |
We do not ask for special categories of personal data (health, religion, political opinion etc.). If you include such information in your content yourself, we process it only to show that content.
3. Purposes and legal grounds
| Purpose | Legal ground (KVKK Art. 5(2)) |
|---|---|
| Creating your account, verifying your e-mail, sign-in and password reset | (c) Establishing and performing a contract |
| Showing and delivering your profile, content, comments, messages and interactions to other users | (c) Performing a contract |
| Location check so that BeNiche can only be used in Şişli and Beşiktaş | (c) Performing a contract |
| Applying the age limit | (ç) Legal obligation; (c) Performing a contract |
| Account security, preventing abuse, spam and unauthorised access | (f) Legitimate interest; (ç) Legal obligation (KVKK Art. 12 data security) |
| Handling reports, enforcing the Community Guidelines, removing unlawful content | (ç) Legal obligation (Law No. 5651); (e) Establishing, exercising or protecting a right; (f) Legitimate interest |
| Not showing the same content again in the feed | (c) Performing a contract; (f) Legitimate interest |
| Answering support requests and KVKK applications | (ç) Legal obligation; (c) Performing a contract |
| Responding to requests of competent authorities and courts | (ç) Legal obligation |
BeNiche shows no ads, does not use your personal data for advertising or marketing, and does not sell it.
4. How we collect personal data
We collect personal data electronically and fully automatically: directly from you through what you enter, post and send in the app, from your device during the location check, and through records created automatically while you use the app.
5. Who receives your personal data
- Other users: Your profile, content and interactions are shown to other users as the app works. Only the other person in a conversation sees your messages.
- Service providers (data processors):
- Supabase (database, authentication, file storage) — European Union, Germany (Frankfurt, AWS eu-central-1)
- Resend (sending verification and password reset e-mails; report notifications) — EU
- Apple (distribution of the app through the App Store)
- Google (Gmail; receiving support e-mails sent to [email protected])
- Competent authorities: Public authorities and courts authorised by law, when they request it and it is legally required.
Transfers abroad: Because the servers of the providers above are outside Türkiye, your personal data is transferred abroad. The process of putting in place the appropriate safeguards required by Article 9 KVKK (the standard contract published by the Board) is under way.
6. How long we keep personal data
| Data | Retention |
|---|---|
| Account data, content, comments, interactions | While your account exists; deleted when you delete your account |
| Stories | 36 hours; the files are then deleted automatically |
| Files of deleted posts and stories | Deleted automatically shortly after deletion |
| List of posts you have seen | 30 days |
| Birth date | Not kept after the age check at sign-up |
| Location coordinates | Not stored |
| Messages | While your account exists. When you delete your account, the messages you sent stay in the other person's conversation without your identity, so their chat history is not broken |
| Reports and moderation records | The reported text and report details are deleted 180 days after the report is closed. The report record itself (without content) is deleted 2 years after closing; moderation action records are deleted after 2 years |
| Account deletion record (identity-free; when and by whom) | 3 years (Regulation on the Deletion, Destruction or Anonymisation of Personal Data) |
| Backups | Database backups are kept for 7 days; deleted data leaves the backups after this period |
Data whose retention period has ended is deleted, destroyed or anonymised.
7. Your rights (KVKK Art. 11)
By applying to the data controller, you have the right to: (a) learn whether your personal data is processed; (b) request information about it; (c) learn the purpose of processing and whether it is used accordingly; (ç) know the third parties in Türkiye or abroad to whom it is transferred; (d) request correction of incomplete or inaccurate data; (e) request deletion or destruction under Art. 7 KVKK; (f) request that third parties be notified of (d) and (e); (g) object to a result against you arising solely from automated analysis; (ğ) claim compensation for damage caused by unlawful processing.
You can delete your account in the app: Profile → ☰ menu → Delete Account.
8. How to apply
In line with the Communiqué on Applications to the Data Controller, you can apply:
- by e-mail to [email protected] from the e-mail address registered in your BeNiche account;
- in writing to Selimpaşa Merkez Mah. 3396 Zahire Çıkmazı Sok. No:1U Dostlar Sitesi A Blok No.4 Selimpaşa/Silivri/İstanbul.
Please include your name, surname, contact details and your request. We answer free of charge within 30 days at the latest. If you are not satisfied with the answer, you can complain to the Personal Data Protection Board.