Meme-Finder Privacy Policy (KVKK)

1) Data Controller (Veri Sorumlusu)

Data Controller: MemeFinder (startup)

Email: memefinderapp@gmail.com

Address: We currently do not have a fixed office address. We will update this policy when an address is established.

2) Personal Data We Collect

A) Account and Profile Information

When you create and manage an account, we may collect:

• Required: username and/or email address, password (stored securely, not in plain text), account ID
• Optional (if you provide it): display name, profile picture/avatar, other profile fields available in "Edit Profile"

We process this data for account creation, login, account security, and profile management (including "Change Password" and "Edit Profile").

B) User-Imported Content (Images and ZIP Files)

If you choose to import content into MemeFinder, we process:

• Images you select (memes/pictures)
• ZIP files you select (e.g., meme packs)

How imported files are handled

• Imported files are processed and stored locally on your device to let you organize and use them in the app and keyboard.
• We do not upload imported images or ZIP files to our servers (no sync, backup, or server-side storage of your imported content).

We do not access your files unless you actively select them for import and grant the required permission.

C) MemeFinder Keyboard (Highly Sensitive)

If you enable the MemeFinder Keyboard on Android, the keyboard service can technically receive what you type while it is active (this is how Android keyboards work).

Our commitment

• We do not continuously log, store, or transmit everything you type while the MemeFinder Keyboard is active.
• The keyboard is designed only to help you search for and insert memes/stickers.

What the keyboard may access and transmit (only when you trigger it)

• When you tap the MemeFinder icon to open search, MemeFinder may read the text currently in the input field and use it as a search query to show relevant meme results.
• If you use Global Search, this query text is sent to our server to return search results.
• If you use Local Search, the query is processed on your device.

What we do not do

• We do not collect or transmit your typing in the background.
• We do not store your messages as "message content" in MemeFinder.

D) Network Communication and Server Data

MemeFinder connects to servers for functions such as authentication and basic service operations (e.g., server status checks and online search).

When you use these features, we may process:

• Account identifiers (user ID, session token)
• Requests you make (e.g., login requests, server status requests)
• Search queries you submit, including text used for Global Search (from within the app or triggered via the keyboard)
• Basic technical logs (timestamps, request status codes, error codes)
• IP address (as part of normal internet communication)

E) Analytics / Crash Reporting

We use Firebase Analytics and Firebase Crashlytics to understand feature usage, measure app stability, and investigate crashes/non-fatal errors. This data may include device/app metadata, screen interactions, feature events, and crash diagnostics.

3) Why We Process Your Data (Purposes)

We process personal data to:

• Create and manage accounts and authentication
• Provide core app features (import, organize, search, and use memes)
• Provide keyboard functionality (search and insert memes)
• Operate server features (login, status checks, online search)
• Maintain security, prevent abuse, and troubleshoot issues

4) Legal Grounds Under KVKK

We process personal data based on one or more KVKK legal grounds, including:

• Necessity for the establishment or performance of a contract (KVKK Art. 5/2(c)) – to provide the Service you request.
• Legitimate interests (KVKK Art. 5/2(f)) – security, service reliability, and troubleshooting (without harming your fundamental rights).
• Compliance with legal obligations (KVKK Art. 5/2(ç)) – where applicable.
• Explicit consent (KVKK Art. 5/1 and Art. 9) – where required, especially for transfers abroad.

5) Data Retention (How Long We Keep Data)

We retain personal data according to the following approach (a commonly used, KVKK-defensible structure for mobile/social applications):

• Account and profile data: kept while your account is active, and for up to 1 year after you delete your account, unless a longer period is required by law or necessary to resolve disputes, enforce agreements, or meet security requirements.
• Server logs (including security and access logs): kept for up to 1 year for security, fraud prevention, and troubleshooting, then deleted or anonymized.
• Imported images/ZIP files: stored only on your device. They are deleted when you delete them from your device or uninstall the app (subject to your device and backup settings).

At the end of the retention period, data is deleted, destroyed, or anonymized in accordance with KVKK.

6) Third Parties, Service Providers, and Data Sharing

We do not sell your personal data.

We may use the following service providers to operate the Service:

A) Amazon Web Services (AWS) – EU Region

Used for server infrastructure and hosting. Data processed can include account-related identifiers, search queries used for Global Search, and technical logs needed to provide the Service.

B) Google Firebase

Used for app infrastructure functions such as authentication, database services, analytics, and crash reporting, depending on what is enabled.

We share only the minimum data necessary for these providers to deliver their services.

7) International Data Transfers (Outside Turkiye)

Our server region is the EU. This means your personal data may be transferred and processed outside Turkiye.

Where required under KVKK, such transfers are carried out:

• with your explicit consent, or
• using other lawful mechanisms permitted by KVKK and applicable guidance.

8) Security Measures

We apply reasonable technical and organizational safeguards, such as:

• Encryption in transit (HTTPS) for server communication
• Secure handling of authentication data (passwords are not stored in plain text)
• Access controls and least-privilege principles

No method of storage or transmission is completely secure, but we work to protect your data.

9) Your Rights Under KVKK (Article 11)

You have the right to:

• Learn whether your personal data is processed
• Request information about processing
• Learn the purpose of processing and whether it is used accordingly
• Know third parties to whom data is transferred (domestic/abroad)
• Request correction of incomplete/incorrect data
• Request deletion or destruction under KVKK conditions
• Request notification of correction/deletion to third parties (where applicable)
• Object to results against you arising from automated processing
• Claim compensation if you suffer damages due to unlawful processing

10) How to Exercise Your Rights

To submit a KVKK request, email us at memefinderapp@gmail.com.

Recommended subject line: "KVKK Request – MemeFinder"

We may ask for reasonable verification to protect your data and account.

11) Children's Privacy

MemeFinder is not intended for children under 13. If you believe a child provided personal data, contact us and we will take steps to remove it.

12) Permissions (Android)

Depending on your usage, the app may request:

• Photos/Media/Files access – to import images/ZIP files you select
• Network access – to connect to servers for account features and online functions
• Keyboard enablement – only if you choose to enable the MemeFinder Keyboard

13) Changes to This Policy

We may update this policy from time to time. We will post updates in the app and change the "Last updated" date.

14) Contact

For privacy questions or KVKK requests:

Email: memefinderapp@gmail.com