Privacy Policy

Last updated: 04.02.2026

This Privacy Policy explains how your personal data is collected, used, stored, and protected when you use the Karaf mobile application.

Karaf is a consumer-facing (B2C) mobile application owned, developed, and operated solely by Vanir Technology.

By downloading, registering for, or using the Application, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.

1. Definitions

• Application: the Karaf mobile application.
• User / You: any natural person who downloads, registers for, or uses the Application.
• Account: a user account created to access the Application.
• Device: a mobile device used to access the Application.
• Personal Data: any information relating to an identified or identifiable natural person.
• Usage Data: data collected automatically during use of the Application.
• Company (also referred to as “we”, “us”, or “our”): Vanir Technology, the sole owner, developer, and operator of the Karaf application.
• Data Controller: the Company, which determines the purposes and means of processing personal data.
• Country: Republic of Turkiye.

2. What Personal Data Do We Collect?

2.1 Data You Provide

When you create an Account or use the Application, we may collect:

• Name or nickname
• Email address
• Authentication-related information (e.g. login provider identifiers)

2.2 Data Collected Automatically

When you use the Application, certain data is collected automatically, including:

• IP address
• Device identifiers
• Operating system and application version
• Login timestamps
• Crash logs and diagnostic data
• Feature usage and interaction data

This data is used strictly for security, performance monitoring, analytics, and service improvement.

2.3 Permissions

Depending on your preferences and device settings, the Application may request:

• Notification permission: to send service-related or optional informational notifications

You can manage or revoke these permissions at any time through your device settings.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Providing and operating the Application
• Creating and managing user Accounts
• Ensuring application security and preventing abuse
• Improving functionality, stability, and user experience
• Analyzing usage trends and technical performance
• Sending service-related notifications and updates
• Complying with legal obligations

4. Legal Bases for Processing

Your personal data is processed in accordance with Article 5 of the Personal Data Protection Law No. 6698 (KVKK), based on:

• Article 5/2(c): necessity for the performance of a contract
• Article 5/2(d): compliance with legal obligations
• Article 5/2(e): establishment, exercise, or protection of a right
• Article 5/2(f): legitimate interests of the data controller

Any optional communications such as marketing or promotional messages are sent only with your explicit consent.

5. Sharing of Personal Data

5.1 Within Turkiye

Your personal data may be shared only with:

• Technical infrastructure and cloud service providers
• Analytics and crash-reporting service providers
• Judicial or administrative authorities when legally required

5.2 Abroad

Some technical service providers may process data on servers located outside Turkey. In such cases, the Company ensures appropriate safeguards in compliance with KVKK.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Role-based access control
• Secure authentication mechanisms
• Encrypted data transmission
• System monitoring and access logging

Users are responsible for keeping their account credentials confidential.

7. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with legal obligations.

When retention is no longer required, data is securely deleted or anonymized.

8. Your Rights Under KVKK

In accordance with Article 11 of KVKK, you have the right to:

• Learn whether your personal data is processed
• Request information regarding processing
• Request correction or deletion of your data
• Object to unlawful processing
• Request compensation if you suffer damages

9. Account Deletion

You may delete your Account directly through the Application settings. Account deletion requests are processed within a reasonable timeframe, subject to legal retention requirements.

10. Third-Party Links

The Application may contain links to third-party services. We are not responsible for the privacy practices or content of those services.

11. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time. Updates become effective once published within the Application.

12. Contact Information

The data controller is Vanir Technology.

For privacy-related questions or requests, you may contact us at:

Address: Bilkent Cyberpark Üniversiteler Mah. 1606 Cad. A-Blok Apt. No:4 A/202 Çankaya/Ankara/TURKIYE
Email: info@vanirtech.co