TikMatch

Draft. This text is a placeholder and is not the final legal document. It must be replaced before the app is submitted to the stores.

Privacy Policy

Last updated: __YURURLUK_TARIHI__

This policy explains which personal data we process when you use TikMatch, why we process it, and what your rights are.

Data controller: __SIRKET_UNVANI__ (__SIRKET_ADRESI__, trade registry: __MERSIS_NO__). "We" refers to this company throughout.

TikMatch is not intended for anyone under 18. You must be at least 18 years old to use the app.

1. What we collect

When you create an account

You can only sign in with your Google or Apple account. You do not create a password and we never see one.

Email address — provided by the sign-in provider. If you use Apple's "Hide My Email", we receive a relay address (@privaterelay.appleid.com) rather than your real one. We use it to recognise your account; we do not see your real address.
Name — from the sign-in provider, or typed by you.
Username — chosen by you.

When you set up your profile

Date of birth — to enforce the 18+ limit and show your age on your profile. Required.
Gender — for matching and discovery. Required.
Country (required) and city (optional). We do not use your device's location services; you select these yourself.
Profile photo (required) and gallery photos (up to 6, optional).
Bio and interests — optional.

Content you create

Posts, stories (photo and video), comments
Direct messages and live stream chat messages
Gifts you send and receive
Reports you file and people you block

Live streams, video/voice calls and voice rooms are not recorded. Audio and video are transmitted to the other side in real time only; nothing is stored on our servers.

Collected automatically

Push notification identifier — so we can send notifications to your phone. It stops working if you delete the app.
App language — so notifications arrive in the right language.
Usage events — which screens are opened, which features are used.
A random per-device number — to connect the steps of users who have not signed in yet. It is generated on your device, disappears when you delete the app, is not shared with other apps, and is not an advertising identifier.
IP address — visible while your request is handled; not stored permanently.

We show no advertising. We use no ad networks, no advertising identifier and no cross-app tracking. We do not sell your data.

Purchase information

Payments are handled by Apple App Store and Google Play. Your card details never reach us. We only hold the store's transaction number, which product you bought, the date, and your subscription's expiry date.

1a. Gender verification and face analysis

This section is not a draft: it describes exactly what the code does and must stay identical to the in-app consent screen. If it changes, all three must change together (code, this page, consent screen).

The image never leaves your device. The analysis runs entirely on your phone. No photo, video recording, or facial measurement is sent to our servers or stored anywhere.
Only the result is sent to the server: the gender result (female/male) and the date of verification. It is kept for as long as your account exists and is removed if you delete your account.
Temporary session record: a randomly generated session code valid for 10 minutes is created to start verification. It contains no biometric data and is deleted automatically within 24 hours.
Verification is optional; the app can be used without it.

2. Why we use it

Purpose	Data used
Creating and recognising your account	Email, name, username
Enforcing the 18+ limit	Date of birth
Showing you to other users and matching	Profile details, photos, country, gender
Running streaming, calls, messaging and gifts	Content, gift and balance records
Sending notifications	Notification identifier, app language
Blocking inappropriate content, handling reports	Uploaded images, message text, report records
Verifying purchases and managing subscriptions	Store transaction number, product and date
Improving the app	Usage events

Automated decisions: images you upload and text you write are scanned automatically for inappropriate content, and content may be rejected as a result. You can appeal: __DESTEK_EPOSTA__

3. Who we share it with

We do not sell your data. We share it only with the service providers the app needs to work, and only as much as needed:

Who	What for	What is shared
Google (Firebase)	Sending notifications	Notification identifier and message text
Google / Apple	Sign-in	Authentication data
Google Play / Apple App Store	Payments and subscriptions	Purchase verification
LiveKit	Transmitting live streams and calls	Audio and video stream (not recorded)
Sightengine	Image and video content moderation	The image or video you upload
Cloudflare	Security and performance	Requests the app makes to our servers

We also share data with authorities where legally required.

International transfers: some of the providers above are located outside Türkiye. These transfers are necessary to provide the service and are made on the basis of __YURTDISI_AKTARIM_DAYANAGI__.

4. How long we keep it

Data	Retention
Account and profile	Until you delete your account
Stories	24 hours, then deleted automatically
Posts, comments, messages	Until you delete them or delete your account
Verification session code	24 hours, then deleted automatically
Live stream and call audio/video	Never stored
Usage events	__OLCUM_SAKLAMA_SURESI__
Purchase and balance records	Kept detached from your identity for __MUHASEBE_SAKLAMA_SURESI__ even after you delete your account

5. Your rights

You have the right to:

Learn whether your personal data is being processed, and request information about it
Learn whether it is used for its stated purpose
Know the third parties it is transferred to, in Türkiye or abroad
Request correction if it is incomplete or inaccurate
Request erasure or destruction
Request that corrections and erasures be communicated to third parties the data was transferred to
Object to a result reached solely by automated analysis that works against you
Claim compensation for damage caused by unlawful processing

You can change most of your profile details yourself inside the app. For other requests: __KVKK_EPOSTA__

Deleting your account: use Settings → Delete Account. To delete without installing the app, follow the steps on this page. Deletion removes your personal data and uploaded media; financial records remain as accounting entries with your identity removed.

6. Children's privacy

TikMatch is for users aged 18 and over only. We do not knowingly collect data from anyone under 18. We ask for a date of birth during sign-up and do not open accounts for anyone under 18.

If we learn that someone under 18 has created an account, we close it and delete their data. If you know of such a case, please tell us: __DESTEK_EPOSTA__

If you believe a user in the app is a minor, report them using the "Underage user" reason in the report menu. These reports are reviewed as a priority.

7. Contact

Support: __DESTEK_EPOSTA__
Data protection requests: __KVKK_EPOSTA__
Address: __SIRKET_ADRESI__

If we change this policy we will publish it here and update the "Last updated" date above. For significant changes we will also tell you inside the app.