Disclosure Notice (KVKK)

Vaktim Application

Data Controller: Soner Yılmaz (Vaktim application)
Contact: destek@vaktim.app
Last Updated: July 2026

1. Identity of the Data Controller

Your personal data is processed in the capacity of data controller by Soner Yılmaz, who operates the Vaktim application, within the scope of Law No. 6698 on the Protection of Personal Data (the "Law"). Contact: destek@vaktim.app. For detailed information regarding data processing activities, you may also review the Privacy Policy.

2. Personal Data Processed and Purposes of Processing

2.1 Data Processed in All Cases

This data is processed for the purposes of account creation, sign-in operations, profile management, provision of premium services, quota management, and fulfillment of legal obligations.

The principal legal grounds for these data categories are the establishment or performance of a contract, the fulfillment of the data controller's legal obligations, and, in the event of a dispute, the establishment, exercise, or protection of a right.

2.2 Data Processed Only When the Sync Feature Is Enabled

If you enable the Sync feature and provide the relevant explicit consent, the following data may be processed for the purpose of cross-device synchronization:

Because the prayer tracking, Qur'an and supplication reading progress, and dhikr and salawat data in this section may reveal information concerning your religious belief, they constitute special categories of personal data within the meaning of Article 6 of the Law. This data is processed only if you enable the Sync feature and provide your explicit consent for the processing and transfer abroad of these special categories of data. Sync is off by default; you may withdraw your explicit consent at any time.

2.3 Data Processed When the Spiritual Guide Feature Is Used

When you use the Spiritual Guide (Manevi Rehber) feature, the following data may be processed:

This data is processed for the purpose of AI-supported response generation. The Spiritual Guide feature is independent of the sync setting, and message contents are not included in the cross-device sync data set; however, at the moment you use the feature, they are transmitted to the OpenAI infrastructure via Supabase Edge Functions.

The processing of your message content within the scope of the Spiritual Guide (within the meaning of Article 5 of the Law) and the consequent transfer abroad to the OpenAI infrastructure (within the meaning of Article 9 of the Law) are based solely on the explicit consent you separately provide for this feature. This explicit consent is independent of the sync consent and may be withdrawn at any time.

2.4 Data Processed When the ChatGPT / Vaktim MCP Integration Is Used

When you use Vaktim through ChatGPT, the text you ask ChatGPT to send to the Vaktim tools (Qur'an references, requests for verse explanations, topic-based verse recommendations, context-based spiritual suggestions, or prayer time queries) is transmitted to the Vaktim MCP server for the purpose of fulfilling the request.

The Vaktim MCP tools are read-only; they do not create, update, or delete your account data. The MCP server may process metadata such as language, city name, Qur'an reference, the type of tool requested, and technical request information for the purposes of security, rate limiting, debugging, and abuse prevention. Precise location is not requested in these interactions; city-level information is sufficient. ChatGPT interactions are additionally subject to OpenAI's own privacy and data processing policies.

2.5 Optional Analytics and Diagnostics Data

In order to improve the stability and experience of the application, the following analytics and diagnostics data is processed only if you provide your explicit consent. This data is not of a special category, and collection is off by default:

This telemetry is off by default; it is collected only if you provide explicit consent from the application settings, and you may withdraw your consent at any time.

2.6 Data That Remains Only on the Device

3. Transfer of Personal Data

3.1 Transfer Abroad

Your data may be transferred abroad through the following service providers for the purpose of providing the service:

Because the prayer tracking, Qur'an/supplication progress, and dhikr and salawat data transferred across devices within the scope of Sync constitute special categories of personal data, the transfer abroad of this data is based — since there is no adequacy decision regarding the recipient — on the appropriate safeguards prescribed in Article 9 of the Law (contractual undertakings concluded with the service providers abroad, together with technical and administrative measures); in addition, your explicit consent is obtained for the processing and transfer of these special categories of data. The transfer of your message content to the OpenAI infrastructure within the scope of the Spiritual Guide is based on the explicit consent you separately provide for this feature. Both transfers are optional and off by default.

The transfer to service providers abroad used in account management, authentication, infrastructure, and subscription processes is carried out on the legal ground that it is necessary for the provision of the service and the performance of the contract, and on the appropriate safeguards prescribed in Article 9 of the Law (contractual and technical measures).

The geocoding operation used to convert coordinates into a city/district name is performed at your device's operating system level on Android and iOS; within the scope of this operation, no separate transfer of personal data abroad to Google or Apple is made by us.

3.2 Method of Collecting Personal Data and Legal Ground

Your personal data may be obtained by wholly or partially automated means through;

The processing is based on the conditions set out in Article 5 of the Law; and, in the relevant case, on the legal grounds of the establishment or performance of a contract, the legal obligation of the data controller, the establishment, exercise, or protection of a right, and explicit consent. With respect to special categories of personal data such as prayer tracking, Qur'an/supplication progress, and dhikr and salawat data, processing and transfer abroad are conducted solely on the basis of your explicit consent within the scope of Articles 6 and 9 of the Law.

4. Retention Periods

Disabling the Sync feature or withdrawing the relevant explicit consent stops new data transfers; you may request the deletion of data previously transferred to the cloud via destek@vaktim.app.

5. Technical and Administrative Measures

In order to protect your data, measures such as access control, encrypted communication, user-based authorization, the principle of least privilege, and security monitoring are applied.

6. Your Rights

By applying to the data controller under Article 11 of the Law, you may;

Application and Complaint Procedure

You may submit your requests under the KVKK primarily to destek@vaktim.app. In the event that your application is rejected, the response given is found insufficient, or no response is given to your application within 30 days, you may file a complaint with the Personal Data Protection Board under Article 14 of the Law.

© 2026 Vaktim. All rights reserved.