Privacy Policy
Effective Date: 09.01.2026
Last Update: 09.01.2026
This Privacy Policy has been prepared to explain the principles regarding the collection, processing, storage, and protection of personal data within the scope of the voice and video chat services offered by the Klavuz Chat mobile application (“Application”) to its users. All users of the Application are deemed to have accepted this policy.
1. Data Controller
Data controller under KVKK and GDPR:
Application Name: Klavuz Chat
Company Name: Klavuz Chat
Address: Gölbaşı Mah. Karacadağ Cad. No:45D, Viranşehir / Şanlıurfa
Email: info@kilavuzchat.com
2. Personal Data Collected
2.1 User Account Information
- Username
- Profile photo
- Biography, age
Preferences and settings
2.2 Audio & Video Communication
- Live audio streaming
- Live video streaming
Camera access: The application requires camera access for video chat, account verification, and profile photo taking features. Camera data is only used for real-time communication and is not stored on the device. Note: Conversations are not recorded, stored, or viewable later.
2.3 Messaging Data
- Message content
Interaction logs
2.4 Technical Data
- IP address
- Device type
- Operating system
- Application version
Session and error logs
3. Processing Purposes
- Service delivery
- Security
- Performance improvement
- Prevention of abuse
Fulfillment of legal obligations
4. Legal Basis
- Explicit consent
- Performance of contract
- Legal obligation
Legitimate interest
5. Third-Party Service Providers
Agora.io: Video and audio communication infrastructure, live audio and video streaming
Socket.IO: Real-time messaging infrastructure, message data is processed on company servers
Backend & File Servers: Profile photos, media files, user data
These service providers have limited access solely for the purpose of service delivery.
6. Cookies and Local Storage
- No web cookies are used
- Local storage is used on the mobile device
Tokens and preferences are stored only within the application
7. Data Security
- HTTPS encryption
- JWT authentication
- Bcrypt password hashing
- Authorization (RBAC)
- Rate limit protection
Input validation controls
8. Data Retention Period
Data:
- When the purpose ends
- When the legal period expires
is deleted, destroyed, or anonymized.
9. User Rights
- Data access
- Correction
- Deletion
- Restriction
- Objection
- Data portability
Withdrawal of explicit consent
10. Account Deletion
Users can permanently delete their accounts:
Mobile: “Delete My Account” option within the application
After account deletion, data is deleted or anonymized except for legal periods
11. Website
There are no user accounts on the website. Form and complaint area data are protected under the KVKK (Personal Data Protection Law).
12. Children's Privacy
This application is not intended for users under 18 years of age.
13. Policy Updates
This policy is subject to update. The current version will be published on the application and website.
14. Contact
info@kilavuzchat.com | In-app support
This Privacy Policy has been prepared in accordance with Google Play and Apple App Store data security, account deletion, and third-party notification requirements.