Privacy Policy
Last updated: November 2, 2026
This policy explains how we process your personal data in the What Would Elalem Say? (Elalem Ne Der?) app and on the elalem.lol website. It serves as our privacy notice under the EU General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK).
1. Who we are
The data controller is teammadeit (Istanbul, Türkiye). You can reach us at hello@elalem.lol.
2. What data we process
- Account data: the account identifier and email address provided when you sign in with Apple or Google. If you use Apple's “Hide My Email”, we only receive Apple's relay address.
- Profile data: your nickname and, if you add it, your real name.
- Content: your questions, photos, answer options, votes and comments.
- Safety data: reports and blocks you make or receive, and moderation records.
- Technical data: IP address, device model, operating system and app version, crash logs, and a push notification token if you allow notifications.
Our website uses no cookies, advertising or analytics tools. Our hosting provider keeps standard server logs (such as IP addresses) for security.
3. Why we process it, and our legal bases
- To create your account and provide the Service: performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
- To show your questions, votes and comments to other users under your nickname: performance of a contract.
- To prevent abuse, review reports and moderate content: legitimate interests (GDPR Art. 6(1)(f)) and legal obligations (GDPR Art. 6(1)(c)).
- To meet legal obligations, such as record-keeping duties under Turkish Law No. 5651: legal obligation.
- To send notifications: consent (your device's notification permission, which you can turn off at any time).
- To fix bugs and improve the Service: legitimate interests.
4. Anonymity
Other users only see your nickname. Your real name appears only on a question you choose to ask with it. Your account details are kept securely by us for moderation and legal compliance and are never shown to other users.
5. Who we share data with
- Service providers: Supabase for our database, file storage and authentication; Apple and Google for sign-in and notifications; Vercel for hosting the website. They process data only on our instructions.
- Authorities: courts and competent public authorities when required by law.
These providers may store data outside your country. International transfers are protected by appropriate safeguards such as Standard Contractual Clauses. We never sell your personal data or use it for advertising.
6. How long we keep it
We keep your data while your account is active. Content you delete is removed from the Service immediately. When you delete your account, your data is deleted or anonymized within 30 days. Records we are legally required to keep are retained for the period set by law and then deleted.
7. Your rights
You have the right to access, correct and delete your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Under KVKK you may also learn whether and why your data is processed, who it was shared with, and request that corrections or deletions be notified to those recipients.
Send requests to hello@elalem.lol; we respond within 30 days. You may also lodge a complaint with your local data protection authority or, in Türkiye, with the Personal Data Protection Authority (KVKK).
8. Children
The Service is not meant for children under 13. If we learn that we have processed data of a child under 13, we will delete it.
9. Security
We take reasonable technical and organizational measures, including encrypted connections, access controls and secure infrastructure, to protect your data.
10. Changes
We may update this policy. The current version is always on this page, and we will announce significant changes.