Privacy Notice for Personal Data Processing

The business/product name provided for UpDate is “UpDate Firması”.

The data controller’s full legal name, status as an individual or legal entity, and official address are being confirmed and will be added to this notice. Until then, you can reach us at joinupdateapp@gmail.com.

The Istanbul private-beta application collects:

• full name and email address;
• age range, gender, profession or industry, and Istanbul residency;
• a free-text answer about dating-app frustrations;
• product preferences, willingness to pay, price expectations, and beta interest;
• form language, start time, application reference, creation time, and a random key that prevents the same application from being saved twice;
• a one-way fingerprint generated on the server from IP address and browser information for security and rate limiting;
• whether the separate commercial-email option was selected, capture time, source, language, and consent-text version; if the permission is withdrawn, the withdrawal date and request reference.

The raw IP address and browser information are not stored in the application table. The “website” honeypot value is checked but not stored. Applicants are asked not to put sensitive or special-category data in the free-text field.

The application is intended only for adults aged 18 and over.

• receiving and assessing the private-beta application;
• contacting the applicant about application status, beta access or invitation, and necessary service information;
• understanding applicants’ experience with and expectations of dating apps, and their views on product features and pricing, to plan the product and the beta;
• preventing one application from creating multiple records;
• operating the process securely through validation, honeypot, minimum-completion-time, and rate-limit checks.

If an applicant selects the separate, optional and unchecked box, they agree to receive commercial electronic messages from UpDate by email only, including product updates, new features, events and campaigns. This is not required to submit an application and can be withdrawn by emailing joinupdateapp@gmail.com.

We record a withdrawal against the email address used in your application; your application itself is not deleted. To protect you, we act on requests sent from that address or confirmed through it.

Application status, beta access and necessary service messages are treated separately from promotional messages where legally appropriate. No SMS or phone permission is requested because the form collects no phone number. UpDate does not currently send commercial electronic messages and will not do so before the required registration and legal preparations are complete.

Data is collected electronically when an applicant enters it directly into the online form on the UpDate website. The browser sends the application to the server endpoint hosted on Lovable; accepted records are stored in a managed PostgreSQL database. Current activity is limited to Istanbul, Türkiye.

The website itself sets no cookies and uses no analytics or advertising trackers. When you visit, the hosting provider Vercel processes technical connection data, such as your IP address, browser information and the page requested, to deliver the site and protect it from abuse; if its security system needs to check that a visitor is not an automated program, it may set a strictly necessary security cookie. If you choose a light or dark theme, that choice is stored only in your own browser.

The processing condition under Article 5 of Türkiye’s Law No. 6698 for each purpose above is being confirmed and will be added to this notice.

Explicit consent has not been assumed for the basic application processing, and no mandatory consent box is used. The separate commercial-email selection records only optional marketing permission; it does not replace the legal condition for the application itself.

Data passes through the following infrastructure to operate the service:

• Lovable: application API hosting and server processing;
• Supabase/PostgreSQL infrastructure: storage of applications and separate permission records;
• Cloudflare network: security and network layer in front of the API.

Vercel serves the website; the application body goes directly from the browser to Lovable. The application system does not share data with anyone other than the providers listed above.

Each provider’s contractual role (processor or recipient) is being confirmed and will be added to this notice.

Whether these providers store or process application data outside Türkiye is being confirmed. If a transfer takes place, the transfer and its basis under Article 9 of Law No. 6698 will be added to this notice.

Application records accepted or rejected after evaluation are retained for one year from creation and then deleted or anonymised unless a separate legal obligation requires longer retention. Requests rejected by technical validation or anti-bot controls without creating a record are not retained in the application table.

This period is enforced by a scheduled job that runs daily and deletes application records older than one year, together with their linked permission records.

Applicants may exercise their rights under Article 11 of Law No. 6698 by emailing joinupdateapp@gmail.com and may withdraw commercial-email permission through the same address. This is not a KEP address, and email does not replace other application methods available under applicable law.

For your security, we act on emailed requests that are sent from, or confirmed through, the email address used in the application. Requests are concluded as soon as possible and within thirty days at the latest, as Article 13 of the Law requires.

An official postal address for written requests is being confirmed and will be added to this notice.

This notice was last updated on 1 October 2026. It will be updated when the details described above as being confirmed are added.