Siccoso Privacy Policy
Effective date: 21.10.2026
This policy explains how your personal data is processed when you use the Siccoso mobile app. It serves as the information notice under Article 10 of Turkey's Personal Data Protection Law No. 6698 (KVKK) and under Article 13 of the UK General Data Protection Regulation (UK GDPR) and, where it applies, the EU General Data Protection Regulation (GDPR). If the Turkish and English versions differ, the Turkish version prevails.
1. Data controller
The data controller is Yahya Mert Çakmak, an individual living in the United Kingdom ("Siccoso", "we").
- E-mail: info@siccoso.com
Send any question, request or complaint about this policy to that address.
2. What we process
Account data. Your e-mail address and the identifier of your sign-in method (e-mail link or Google account).
Profile data. A display name if you give one; your country, language and the interests you choose. Your birth year and gender are optional and are processed only with your separate consent.
Answers. Your YES/NO answers. With each answer we keep a copy of your birth year, gender, country, language and interests at the time of answering; this copy never includes your name or e-mail.
Question suggestions. The questions you suggest in the app.
Notification data. If you turn notifications on: your device's push address (push token), platform (iOS/Android), time zone and notification preferences (time window, pushes per day), and which question was offered to you and when.
Subscription and usage data. Your plan (FREE / PREMIUM), your subscription's status and term, and your daily question usage. We never receive your card or payment details; Apple or Google takes the payment.
Technical logs. The records our hosting infrastructure keeps of every request, for security and debugging: IP address, device and browser information, the address requested, the time and the response status; for administrative actions, also internal user IDs.
3. Why we process it, and the legal basis
| Purpose | Data | KVKK | GDPR |
|---|---|---|---|
| Creating your account and signing you in | Account data | Art. 5(2)(c), performance of a contract | Art. 6(1)(b) |
| Choosing questions for you, recording your answers, showing aggregate results | Profile (interests, country, language), answers | Art. 5(2)(c) | Art. 6(1)(b) |
| Analysing results by age and gender | Birth year, gender | Art. 5(1), explicit consent | Art. 6(1)(a) |
| Sending question notifications | Notification data | Art. 5(1), explicit consent | Art. 6(1)(a) |
| Managing Premium and your daily allowance | Subscription and usage data | Art. 5(2)(c) and 5(2)(ç) | Art. 6(1)(b) and 6(1)(c) |
| Reviewing question suggestions | Suggestions | Art. 5(2)(c) | Art. 6(1)(b) |
| Keeping the service secure and preventing abuse | Technical logs | Art. 5(2)(f), legitimate interest | Art. 6(1)(f) |
You can withdraw your consent at any time: withdraw it for birth year and gender in Profil, which deletes both, and turn notifications off in Profil or in your device settings. Withdrawal does not affect processing that took place before it.
4. Aggregate results and your answers
Your answers are shown to other users only in aggregate (for example "64% YES"). No user is ever shown how anyone else answered.
5. Who we share data with
We do not sell your data. The following service providers process data on our behalf to run the service:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and sign-in | EU (Germany) |
| Railway | Application server | EU (Netherlands) / USA |
| Vercel | Web pages and admin panel | US / global |
| Resend | Sign-in e-mails | USA (sent via Ireland) |
| Google (Workspace) | E-mails you send us (info@siccoso.com) | US / global |
| Expo, Apple (APNs), Google (FCM) | Notification delivery | USA / global |
| RevenueCat | Subscription management | USA |
| Apple, Google | App stores, payments, Sign in with Google | USA / global |
We may also share data with competent public authorities where the law requires it.
Apple and Google also process data under their own privacy policies for the app store, payments and Google sign-in.
International transfers. Your data is collected by a controller living in the United Kingdom and processed outside Türkiye, in the EU and in the USA, through the providers above.
- Under UK law: for processing in the EU we rely on the UK's adequacy regulations for the EU/EEA; for processing in the USA we rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified (Railway, Vercel, Resend, Expo, Google), and otherwise (Supabase, RevenueCat) on the EU standard contractual clauses with the UK Addendum.
- Under KVKK: the Personal Data Protection Board has not declared any country adequate. Transfers rely on the standard contractual terms in the providers' data processing agreements.
You can ask for a copy of these safeguards at info@siccoso.com.
6. How long we keep it
- We keep your data while your account is open.
- When you delete your account, your e-mail, sign-in identity, profile, interests, notification data, plan and usage records are deleted immediately.
- Your answers are not deleted but anonymised: their link to you and their demographic copy are removed, and they remain only as YES/NO in aggregate results, so results already shown do not change.
- Pending and rejected suggestions are deleted; suggestions that became a published question remain without your name.
- Server logs are deleted after 30 days at the latest.
7. Your rights
Under KVKK Article 11 and GDPR Articles 15–22 you may ask:
- whether and which of your data is processed,
- to have inaccurate or incomplete data corrected,
- to have your data deleted — you can do this instantly in the app under Profil → Hesabı sil (Delete account),
- to object to processing and to withdraw your consent,
- which third parties your data was transferred to,
- to receive your data in a portable format (GDPR Art. 20),
- for compensation if you suffered damage.
Write to info@siccoso.com; we answer free of charge within 30 days at the latest.
Complaints. You can complain to us first about how your data is used, at info@siccoso.com; we acknowledge your complaint within 30 days and tell you the outcome. You also have the right to complain to Türkiye's Personal Data Protection Board, to the Information Commission in the United Kingdom (ico.org.uk), or to the data protection authority of the EU country you live in.
8. Age limit
Siccoso is not intended for anyone under 16. If you are under 16, please do not use the app. If we learn that we process the data of someone under 16, we delete it.
9. Security
Your data is transmitted over encrypted connections. Access to the database is restricted to the people who need it to run the service.
10. Changes
We may update this policy. We will tell you in the app about any significant change. The current version is always at https://www.siccoso.com/en/privacy.