Privacy Policy & Data Protection Notice
Effective: as of the publication date
At Kahve Tabela we take the security of your personal data seriously. This notice explains what data we process, why, and your rights, including under Turkey's Personal Data Protection Law (KVKK / Law No. 6698).
For questions and data-protection requests, contact kvkk@kahvetabela.com or use the in-app 'Let's fix this together' link.
1. Data Controller
Data controller: Kahve Tabela. Contact: kvkk@kahvetabela.com.
Kahve Tabela is operated by an individual and, while below KVKK's VERBİS registration thresholds, is not subject to registry enrollment.
2. Personal Data We Process
When you create an account: your email and identity data supplied by the external sign-in provider you use (name, avatar).
While you use the app: your saved visits, reviews and ratings, uploaded photos, and lists you create.
Automatically: device/browser information; a daily-rotating digest derived from the IP address; a pseudonymous browser identifier (kt_sid) rotated every 30 days; visited path, language, and external referring host. When a client error occurs, a query-stripped error message, source, and technical stack may also be recorded to repair the service.
Location: used live only with your explicit permission for the 'near me' feature; not stored on our servers.
3. Purposes
Create your account and sync your progress across devices.
Show your reviews, ratings, photos and visits; moderate user content.
Improve the service, fix bugs, and prevent abuse.
4. Legal Bases (KVKK art. 5)
Your explicit consent (e.g. location permission, optional content sharing).
Performance of a contract (providing your account and the service).
Legitimate interest (security, abuse prevention, service quality).
5. Transfers & Processors
Your data is processed by our hosting/infrastructure providers (e.g. Supabase, Vercel), whose servers may be located outside Turkey.
When you use an external sign-in provider, that provider's own privacy policy also applies.
We do not sell your data to third parties for marketing.
6. Retention
Account data is kept while your account is active. To delete your account, email kvkk@kahvetabela.com.
Your reviews, photos and visits are kept until you delete them or close your account.
Pseudonymous analytics and client errors are retained for no more than 30 days; raw IP addresses are not stored.
7. Your Rights (KVKK art. 11)
Learn whether your data is processed and request information about it.
Learn the purpose and whether data is used accordingly.
Request correction of inaccurate data and, where applicable, deletion.
Request compensation for damages from unlawful processing.
To exercise these rights, contact kvkk@kahvetabela.com.
8. Cookies & Local Storage
We use strictly-necessary cookies to keep you signed in and remember your preferences.
The analytics identifier kt_sid is stored in localStorage. Existing legacy identifiers are timestamped in place and the identifier rotates no later than 30 days afterward.
If non-essential cookies are introduced, this notice and a cookie-preference flow will be updated.