KVKK Information Notice

Controller and contact

Controller: Barış Durmaz. Address: 9165/2 Sok. No:16 D:4 Doğanay Mh. Karabağlar/İzmir/Türkiye. Privacy requests: privacy@vuff.app.

Account and security

We collect name, username, email, login-provider identifiers, profile details, your date of birth (for accounts opened before 25 October 2026, your versioned 18+ self-declaration and its time instead), device/security records and notification choices from your registration, device and Apple/Google sign-in. General sign-up does not verify age with a document. We use these to open and protect your account, check the 18+ age requirement, deliver requested features and send account notices. The relevant KVKK Article 5(2) conditions are performance of our agreement, compliance with legal duties where applicable, and proportionate legitimate interests for security. Account and infrastructure providers receive only the information needed for their roles.

Community and care

You provide dog profiles, stories, messages, routes, listings, reviews and care requests/plans. We process these to display content to the audience you choose, connect the relevant parties and carry out requests. This generally relies on performance of the service agreement under Article 5(2)(c). Related members, the parties to a booking and infrastructure providers receive data according to the feature. Private care notes and home access details are not public profile content.

Location

With device permission and your use of the relevant feature, we process location for nearby lost-pet alerts, Walking Mode, routes, event eligibility and care walks. A published route or selected map point is shown according to your choice; the dog’s owner may follow a care walk while it runs. We rely on Article 5(2)(c), as the processing is necessary for the feature you request; you can stop it at any time by turning the feature or the device permission off.

Safety, support and subscriptions

Reports, moderation evidence and appeals are processed to prevent misuse and establish or protect rights, under proportionate legitimate interests and, where applicable, Article 5(2)(e). Support messages, email delivery, push tokens and Apple subscription status are used to answer requests and perform the service. Authorized staff, relevant providers and legally empowered authorities may receive the minimum needed data.

International transfers

Supabase processes account, content, location and message data for Vuff. Resend delivers account emails. Cloudflare hosts the website, routes contact email and provides bot protection; it also acts as a controller for signals used to improve Turnstile. Apple provides sign-in, push delivery, subscriptions and maps; Google provides optional sign-in, Maps links and the Gmail inbox receiving website contact messages. GIF search (KLIPY) is off in this version. Provider roles and processing countries depend on the service.

Supabase hosts our database, authentication and files in Frankfurt, Germany. Its contracting entity is in Singapore; support, CDN and other processing may occur in further countries. Resend, Cloudflare, Apple and Google also process data outside Türkiye. We are putting in place the Turkish standard contracts and Authority notifications that KVKK Article 9 requires for these transfers. You can ask privacy@vuff.app about their status at any time.

Retention and rights

Feature-specific periods, account deletion and exceptions are explained in our Privacy Policy. You may exercise your KVKK Article 11 rights by contacting privacy@vuff.app; we may verify identity in proportion to the request and will respond within the legal period. You retain the right to complain to the Personal Data Protection Authority.