Privacy Policy

• Your votes are secret: no user, including the poll's author, can see who voted for what.
• Your date of birth, gender and city are never shown on your profile; they are only used for anonymous statistics.
• We do not sell your personal data or give it to third parties for advertising.
• You can delete your account from the app at any time.

• Account: username, display name, email address, the account ID from your sign-in provider (Apple / Google / email); optionally avatar and bio.
• Profile and demographics: date of birth (required, for the age-13 check and age-range statistics), gender and city (optional), interests.
• Content and activity: your posts, photos, comments, likes, saved posts, follow and block relationships, reports.
• Votes: which option you chose on which poll. At the moment you vote, your age range, gender and city are copied to the vote record (see “How votes are stored”).
• Device and technical data: push token, app version, platform, IP address, error logs, security and rate-limit logs.
• Purchases: subscription and purchase status. We never receive your card details; payments are handled by Apple or Google.
• Usage analytics (only with your permission): events such as screen and feature usage. Which option you voted for is never sent to analytics; direct personal data such as email or date of birth is not sent.
• Consent records: which version of which document you accepted and when.

To prevent voting twice on the same poll, your vote is stored linked to your account. This link:

• Is never shown in any public screen or API response; the app only receives your own vote and the option counts.
• Is never used in notifications (we say “Your poll reached 100 votes”, never “Ali voted”).
• Is not shown in the admin panel either. It can only be accessed in a mandatory moderation or legal case, by an authorised administrator, with an audit log.
• Votes collected in anonymous mode are never made visible later.

Statistics are one-dimensional (age OR gender OR city) and any slice with fewer than 5 votes shows “Not enough data”. A separate event log without user identifiers is kept for the vote timeline.

Because votes may reveal political, religious or philosophical views, we ask for your explicit consent at sign-up to store your votes linked to your account (see Explicit Consent).

• To provide the Service: open your account, show posts and results, count votes, send notifications.
• To personalise Explore and suggestions (based on your interests and activity).
• To produce anonymous statistics (age range, gender, city breakdowns).
• Security and moderation: preventing spam and abuse, handling reports, enforcing the age limit.
• To manage subscriptions and purchases.
• To fix bugs and (with your permission) improve the app.
• To comply with legal obligations.

We share data only with service providers we use to run the Service, and only as needed:

• Google Firebase: authentication and push notifications (including outside Türkiye, e.g. the US).
• Railway: server and database hosting (EU / Netherlands).
• Cloudflare R2 and Cloudflare Images: photo storage and resizing.
• PostHog (EU cloud): usage analytics, only with your permission.
• Sentry: error tracking.
• RevenueCat, Apple and Google: subscriptions and purchases.
• Competent public authorities: only when legally required.

[Review: verify the provider list and cross-border transfer mechanisms (KVKK art. 9, GDPR Chapter V) before launch.]

• Account data: as long as your account is open.
• When you delete your account: your profile, posts and comments are deleted; the account link on your votes is removed, counts and anonymous demographics remain.
• In-app notifications: 90 days.
• Security and transaction logs, consent records: for the period required by law [period].

You have the right to access, correct and delete your data, object to processing and request a copy of your data. You can change analytics and notification permissions in the app settings and delete your account in the app. Send requests to [contact email]. Your rights in Türkiye are also listed in the KVKK Information Notice.

Hangisi is not for children under 13. If we learn an account belongs to someone under 13, we delete it.

We may update this policy; we announce material changes in the app.

Data controller: [Company name] (“Hangisi”, “we”), registered at [address], MERSIS no. [MERSIS no]. Contact: [contact email] · KEP: [KEP address]