We explain clearly how personal data is processed

Data controller

Data controller

Barbaros Kırılmaz · BKDev

Contact

info@hatirdaki.app

Location

Kocaeli / Türkiye

The ordinary contact address for privacy, access and deletion questions is info@hatirdaki.app. This address is not presented, by itself, as a universal and complete channel for every formal KVKK application; any necessary procedure and identity-verification information is communicated according to the request.

Also read the privacy policy

1. Scope and the app–website distinction

The HatırdaKi V1 Android app keeps medication, schedule, dose-decision, physical-stock, calendar, notification-centre and app-preference data in the local database on the device. BKDev does not operate a user-account or central health-data server for these app records.

The hatirdaki.app website separately processes technical operational records and, if you choose to use them, contact- or voluntary-survey-form data. This privacy notice is not explicit consent, does not replace a consent checkbox, and reading or using the site is not treated as consent. If a separate activity requires explicit consent, a specific, informed and optional choice will be provided.

2. Categories of data processed

App-side records that remain on the device include medication and schedule information, dose decisions, physical-stock movements, calendar and notification records, app preferences, and local backup and PDF files created by the user. The V1 Android app does not request INTERNET permission or initiate in-app network requests; these records are not sent automatically to BKDev.

On the website, technical data such as IP address, request time, requested path, limited browser information and response code may be processed, together with theme and motion preferences and required form-session data. The contact form processes the topic category and message, plus an optional name and email. The voluntary survey processes answers, an optional suggestion, an email only if a reply is requested, survey version, language, submission time and a one-time submission reference. The forms do not request attachments, medicine lists, diagnoses, health reports, backups or recovery passphrases.

3. Purposes and legal grounds

Technical data is processed on a purpose-limited basis to operate the site securely, investigate errors and prevent misuse or duplicate submissions; contact data to review and answer a request; and voluntary survey data to evaluate product priorities.

To the extent applicable, processing relies on steps directly related to a contract at your request, the establishment, exercise or protection of a right, and legitimate interests in secure service operation and product improvement without harming your fundamental rights. Where a statutory obligation arises, processing is limited to what that obligation requires. If explicit consent is legally required, it is obtained separately and remains optional.

4. Collection methods

Website data is collected electronically through automatic technical records created by server and security systems when you visit, preferences stored in your browser, and information you enter or select in the contact and survey forms.

App records are created on your device from the information you enter and the actions you take in the app. Only you initiate the creation or export of a local backup or PDF and the sharing of a file with another app or recipient.

5. Recipient groups

Website-hosting and email-delivery providers may process the website, communication and technical records required to operate the site and carry messages as service providers. Where there is a legally valid request or obligation, only necessary records may be transferred to authorised public bodies or to professional advisers where needed to establish, exercise or protect a right.

Once the APK is published, if you choose to open the site’s download link, GitHub may process connection data under its own notice. Personal data is not sold or shared for advertising, and no third-party tracking tool is used for advertising or visitor analytics.

6. Possible international processing

Exact retention periods and processing regions for backups and logs managed by hosting and email providers are outside BKDev’s direct control and may be governed by applicable provider arrangements. This notice does not claim a specific destination country or transfer mechanism.

If personal data is processed outside Türkiye because of provider infrastructure or a future GitHub link that the user chooses to open, the processing is subject to the conditions of KVKK Article 9 and applicable transfer safeguards. The internal retention periods below apply to known, directly controlled website records; provider-managed copies may also be subject to the provider’s own arrangements.

7. Retention periods

The periods below apply to purpose-limited internal records. A record may be separated for only the necessary additional period where required by a limited statutory obligation, the establishment, exercise or protection of rights in a concrete dispute, or investigation of a security event.

You manage on-device app records and exported files. Exact periods for provider-managed standard logs and backups are outside BKDev’s direct control and may be governed by applicable provider arrangements.

8. Your rights under KVKK Article 11

By applying to the data controller, you have the right to learn whether your personal data is processed; request information if it has been processed; and learn the purpose of processing and whether it is used in line with that purpose.

You have the right to know the third parties to whom personal data is transferred in Türkiye or abroad, and to request correction if it has been processed incompletely or inaccurately.

You have the right to request deletion or destruction of personal data under the conditions set out in KVKK Article 7, and to request that correction, deletion or destruction operations be notified to third parties to whom the data was transferred.

You have the right to object to a result against you arising from analysis of processed data exclusively through automated systems, and to claim compensation if you suffer damage because personal data was processed unlawfully.

9. Application and response method

You may send privacy and deletion questions to info@hatirdaki.app. Using the same email address previously recorded may help matching; for a survey record, you may provide only the one-time submission reference shown on the success screen. Do not send health data, medicine lists, backups or recovery passphrases.

This email is an ordinary contact address; it is not claimed, by itself, to be a universal and complete channel for every formal application under KVKK Article 11. Depending on the request, another method compliant with the applicable procedure or proportionate identity verification may be required. Applications that meet the procedural requirements are answered as soon as possible and no later than 30 days.

10. Children and special-category personal data

The site forms are not specifically directed at children. If a child needs to use HatırdaKi, medication and dose decisions should be managed under the supervision of a parent, guardian or appropriate healthcare professional; the app does not provide medical advice or dosage recommendations.

The contact and survey forms are not designed to collect health data or other special-category personal data. Such information entered accidentally in free text is not an intended data category, is not used for product profiling, and may be the subject of a deletion request if noticed.

11. Updates

If app permissions, site forms, service categories, data flows or legal conditions change, this notice will be updated with a new date and, where appropriate, a new version so that it matches actual operation.

If a new purpose, data type or required permission arises, the necessary notice and any legally required separate choice will be presented before processing begins. Updating this notice does not replace consent that was never given.