SmartCall Vanilla Application Privacy Policy

Last Updated Date:  29/07/2025

​

1. Introduction

As tatarTech Ltd. Şti., we place great importance on the privacy of the users ("User", "you") of our SmartCall Vanilla mobile application ("Application"). This Privacy Policy transparently explains how we collect, use, store, share, and protect your personal data collected through our Application.

​

By using this Application, you consent to the processing of your personal data as described in this Privacy Policy. The processing of your personal data is carried out in compliance with all relevant national and international legislation, primarily the Constitution of the Republic of Turkey and the Law on the Protection of Personal Data No. 6698 ("KVKK").

​

2. Data Controller

Within the scope of the KVKK, the data controller for your personal data is:

Company Title: tatarTech Limited Şirketi 

Address: İnönü Mah. Kadife Sokak ElitPark Konutları 

E-mail: company@tatartech.com

​

3. Personal Data Collected

When you use our Application, we collect the following personal data from you:

• Device Name: The name of the mobile device you use to access the Application.

• Email Address: Your email address that you share when registering for the Application or for communication purposes.

• IP Address: Your internet protocol (IP) address when you access the Application.

• Operating System Version (OSversion): The operating system version information of your device.

• Operating System: The operating system used on your device (e.g., Android, iOS).

• Phone Number: Your phone number that you provide when registering for the Application or to use certain features.

• Registration Date and Time: The date and time you registered for our Application.

• Location Data 

  • The application uses your location solely on your device for immediate in-app processing.

  • Collection: Obtained from your device based on GPS or network-based location permission (runtime permission).

  • Transmission and Storage: Never sent to or stored on our servers.

​

​


 

4. Method and Legal Basis for Collection of Personal Data

Your personal data is collected and processed through the following methods and based on the following legal grounds:

• Collection Methods:
   

  • Directly From You: Data provided directly by you in situations such as registering for the Application, updating your profile information, or contacting us.

  • Automatically: Data collected automatically from your device and network during your use of the Application (IP address, device information, Operating System Version, Operating System, Registration Date and Time).

  • Legal Bases (KVKK Article 5):
     

  • Explicit Consent (KVKK Article 5/1): We may obtain your separate explicit consent for specific processing activities (e.g., direct marketing communications). Your acceptance of this policy during registration signifies that you have been informed about our general data processing activities.

  • Necessity for the Establishment or Performance of a Contract (KVKK Article 5/2-c): The processing of your personal data is necessary for us to provide our Application services, manage your user account, and carry out the transactions you request.

  • Necessity for the Data Controller to Fulfill Its Legal Obligation (KVKK Article 5/2-ç): To fulfill our obligations arising from legal regulations (e.g., responding to requests from competent authorities).

  • Necessity for the Legitimate Interests of the Data Controller, Provided that It Does Not Harm the Fundamental Rights and Freedoms of the Data Subject (KVKK Article 5/2-f): We may process data in line with our legitimate interests, such as improving our services, ensuring security, and preventing abuse, provided that it does not harm your fundamental rights and freedoms

  • Location Processing Method

    • To enable location-based features within the application (e.g., marking location in emergency calls, showing nearby service points, etc.), location data is processed instantly and solely on your device.

    • No server communication or persistent storage occurs.

  • Legal Basis (KVKK Article 5)

    • This processing falls under the scope of KVKK's "It is necessary for the establishment or performance of a contract" (Article 5/2-c), as it is essential for the functioning of the service offered by the application.

    • Explicit consent for this processing is also obtained through the location permission ("Allow") granted by the user.

​

​

5. Purposes of Processing Personal Data

We process the personal data we collect for the following purposes:

• To create, verify, and manage your user account.

• To provide, operate, and maintain the SmartCall Vanilla Application services.

• To verify your identity and provide secure access.

• To communicate with you regarding your account, Application updates, support services, and informational notices.

• To improve the functionality, performance, and user experience of the Application.

• To ensure the security of the Application and our systems, and to prevent fraud and abuse.

• To fulfill our legal obligations and respond to legal requests from competent authorities.

• To conduct analyses and statistical studies for the improvement of our services (in such studies, data is anonymized or aggregated as much as possible).

• To enhance service quality and provide technical support.

• ​

6. Storage and Security of Personal Data

• Data Storage Location: The personal data we collect is securely stored on a cloud-based platform called Firebase, provided by Google. Firebase has its own security measures to protect your data. You can obtain more information about Firebase's privacy and security practices from the relevant Firebase documentation.

• Our Security Measures: As tatarTech, we undertake to take all necessary technical and administrative security measures in accordance with the KVKK and relevant legislation to protect your personal data against unauthorized access, loss, misuse, disclosure, alteration, or destruction. These measures include access controls, data encryption (where appropriate), secure software development practices, and regular security assessments. Please note that no data transmission over the internet can ever be 100% secure. However, we take all reasonable steps to protect your data.

• Location Data:

  • The application never sends, stores, or shares the collected location information with third parties.

  • Location data is held only in temporary memory (RAM) and deleted once the relevant process is completed.

​

​

7. Retention Period of Personal Data

Your personal data will be retained as long as your user account is active or as long as necessary to provide you with our services. Additionally, it may be retained for a longer period in accordance with the KVKK for purposes such as fulfilling our legal obligations, resolving disputes, and enforcing our agreements. Personal data whose retention period has expired will be deleted, destroyed, or anonymized in accordance with the KVKK.

8. Transfer of Personal Data

Your personal data may be transferred to third parties located domestically or abroad for the purposes stated in this Privacy Policy and in accordance with Articles 8 and 9 of the KVKK:

• Service Providers: We may share your data with third-party service providers (e.g., Firebase (Google)) that provide services necessary for the operation of the Application (data storage, hosting, analytics, technical support, etc.). These service providers are obligated to process your data only on our behalf and in accordance with our instructions and to protect its confidentiality.

• Legal Obligations and Competent Authorities: In case of a legal obligation or a request from competent public institutions and organizations (e.g., court orders, prosecutor's requests), your personal data may be shared with the relevant authorities.

• Business Transfers: In the event that our company is subject to a business transfer such as a merger, acquisition, or asset sale, your personal data may be transferred as part of the transaction. In such a case, you will be informed 카메라in advance if possible.

• International Transfers: The servers of service providers we use, such as Firebase, may be located outside of Turkey. Such international data transfers will be carried out in accordance with the conditions specified in Article 9 of the KVKK (transfer to countries with adequate protection, or in the absence of adequate protection, obtaining the explicit consent of the data subject and/or the existence of other safeguards such as undertakings approved by the Board).

 

9. Rights of the Data Subject (User)

Pursuant to Article 11 of the KVKK, you have the following rights regarding your personal data:

• To learn whether your personal data is being processed,

• To request information if your personal data has been processed,

• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

• To know the third parties to whom your personal data is transferred domestically or abroad,

• To request correction of your personal data if it is incomplete or incorrectly processed,

• To request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK,

• To request notification of the operations carried out pursuant to subparagraphs (d) and (e) to third parties to whom your personal data has been transferred,

• To object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,

• To demand compensation for damages in case you suffer damage due to the unlawful processing of your personal data.

You can contact us to exercise these rights using the Data Controller contact information provided above (especially the email address). Your applications will be concluded free of charge as soon as possible and within thirty (30) days at the latest. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.

​

10. Children's Privacy

The SmartCall Vanilla Application is not designed for individuals under the age of 18 (or under the age considered a child according to local laws), and we do not knowingly collect personal data from such individuals. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us. If we become aware of such information, we will take steps to delete it from our systems.

​

11. Cookies and Other Tracking Technologies

Our Application may use certain technologies, such as Firebase SDKs, to provide our services, analyze performance, and improve user experience. These technologies may use instance IDs or similar identifiers to recognize your device and collect certain information. While this is not the same as cookies used on websites, it may serve similar functions. You may be able to partially manage such data collection through your Application settings (e.g., options to disable Firebase Analytics data collection).

​

12. Changes to the Privacy Policy

We may update this Privacy Policy from time to time. When we make a material change to the Policy, we will notify you via in-App notification, email, or by updating the policy in our App store listing. We recommend that you periodically review this Privacy Policy to stay informed of changes. The "Last Updated Date" at the top of this page indicates when the policy was last revised.

​

13. Applicable Law and Competent Court

This Privacy Policy is subject to the laws of the Republic of Turkey. [Malatya] Courts and Enforcement Offices are authorized to resolve any disputes that may arise from this Privacy Policy.

​

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please do not hesitate to contact us using the following contact information:

E-mail: company@tatartech.com

Address: İnönü Mah. Kadife Sokak ElitPark Konutları

Thank you for reading and understanding this Privacy Policy.