This notice is provided under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and explains why and on what legal basis your personal data is processed when you use the ARWY app and websites (arwy.life, arwy.tr), who it is shared with, and what your rights are. Full details are in the Privacy Policy.
1. CATEGORIES OF PERSONAL DATA
- Identity: first name, last name, username, date of birth, gender (optional)
- Contact: e-mail address, phone number (optional)
- Visual records: profile and cover photo, images, videos and voice recordings you share
- User content: books, chapters, posts, comments, messages, chat room messages
- Transactions: subscription and coin transactions, tips, payout requests
- Financial (only for writers who receive payouts): IBAN, identity verification documents
- Security: IP address, session and device information, app version, sign-in records
- Usage: reading progress, in-app activity and error logs
- Location (only if you allow it): approximate (city-level) location
2. PURPOSES
- Creating your account, managing it and verifying your identity
- Providing reading, writing, sharing, messaging, chat rooms and games
- Running subscriptions, coins, tips and writer payouts
- Sending notifications and transactional e-mail (verification codes, password resets)
- Keeping the service secure; preventing abuse, fraud and policy violations; content moderation
- Improving the service, fixing errors and producing statistics
- Meeting legal obligations and responding to lawful requests from authorities
- Sending marketing messages about campaigns, features and announcements, only with your consent
3. LEGAL BASES (KVKK art. 5)
- Necessary to conclude or perform the contract (art. 5/2-c): membership and the service
- Compliance with a legal obligation (art. 5/2-ç): traffic records under Law No. 5651, tax and financial regulations
- Legitimate interest, without harming your fundamental rights (art. 5/2-f): security, abuse prevention, service improvement
- Establishing, exercising or defending a right (art. 5/2-e): disputes and complaints
- Explicit consent (art. 5/1): marketing messages, location and optional features. Not giving consent does not stop you from using the service.
4. TRANSFERS
Your data is shared, only for the purposes above, with the processors we use:
- Google LLC / Google Cloud and Firebase (hosting, database, authentication, notifications, analytics, crash reporting, AI-assisted spelling and content moderation)
- Google Play and AdMob (purchases, ads)
- Anthropic and OpenAI (only when you use AI spell-check or write to the support account; the text is sent for processing)
- Resend (transactional e-mail)
- Authorised public bodies and courts (only on a lawful request)
These providers may store data outside Türkiye (EU and USA). International transfers are made under KVKK art. 9 on the basis of standard contracts and appropriate safeguards.
5. HOW WE COLLECT IT
Through what you enter in the app and websites, the name, e-mail and photo Google shares when you sign in with Google, records created automatically while you use the app (IP, device, activity) and cookie-free technical tools — electronically, by automated or partly automated means.
6. RETENTION
Data is kept for as long as the purpose requires and the law prescribes. When you delete your account it is deleted within 30 days, except where the law requires us to keep it. IP records are kept for 1 year. Detailed periods are in the "Retention" section of the Privacy Policy.
7. YOUR RIGHTS (KVKK art. 11)
You may ask the data controller to:
- Tell you whether your personal data is processed and, if so, give you information about it
- Tell you the purpose of processing and whether it is used accordingly
- Tell you the third parties it is transferred to, in Türkiye or abroad
- Correct incomplete or inaccurate data
- Delete or destroy it under the conditions of KVKK art. 7
- Notify the third parties it was transferred to of a correction or deletion
- Object to an outcome against you arising solely from automated analysis
- Compensate you for damage caused by unlawful processing
Send requests to info@arwy.life from the e-mail address registered to your account. Requests are answered free of charge within 30 days. If your request is refused, the answer is insufficient or no answer is given in time, you may complain to the Turkish Personal Data Protection Board.
8. WITHDRAWING CONSENT
You can withdraw your consent to marketing messages at any time in Settings > Notifications or by writing to info@arwy.life. Withdrawal does not affect processing carried out before it.