Summary: quelris collects only the data needed to deliver our intelligence platform. We do not sell, share, or rent your personal data. We do not run advertising. We do not track you across other apps or websites. You can request access, correction, or deletion of your data at any time by emailing privacy@quelris.com.
This Privacy Policy applies globally to all users of the quelris mobile application and website (quelris.com), regardless of your location. Where specific laws provide you with additional rights, those are detailed in the regional sections below.
Quelris Teknoloji Limited Şirketi ("quelris", "we", "us", "our") is the data controller — and the "veri sorumlusu" within the meaning of Turkish Law No. 6698 on the Protection of Personal Data (KVKK) — responsible for your personal data.
| Category | Examples | Purpose |
|---|---|---|
| Account data | Email address, display name, hashed password | Account creation, authentication |
| Subscription data | Plan type, subscription status, trial dates, purchase history | Service delivery, billing management |
| Preference data | Selected intelligence domains, theme, notification settings | Personalising your experience |
| Usage data | Features used, screens viewed, session duration | Improving the service (anonymised) |
| Device data | Device type, OS version, app version | Compatibility, technical support |
| Push tokens | Expo push notification token, device platform | Delivering alerts you opted into |
We do not sell your personal data. We do not share your data for cross-context behavioural advertising. We do not disclose your data to data brokers.
As a controller established in Türkiye, we process your personal data on the grounds set out in Article 5 of Law No. 6698 (KVKK). Where the EU GDPR also applies to a given user, the corresponding Article 6 basis is shown alongside.
| Activity | KVKK (Law No. 6698) | EU GDPR |
|---|---|---|
| Account creation and service delivery | Necessary for the performance of a contract (Art. 5/2-c) | Art. 6(1)(b) |
| Subscription management and billing | Necessary for the performance of a contract (Art. 5/2-c) | Art. 6(1)(b) |
| Push notifications | Explicit consent (Art. 5/1) — you opt in via device permissions | Art. 6(1)(a) |
| Anonymised product analytics | Legitimate interest of the controller (Art. 5/2-f) | Art. 6(1)(f) |
| Security and fraud prevention | Legitimate interest of the controller (Art. 5/2-f) | Art. 6(1)(f) |
| Legal and regulatory compliance | Expressly provided for by law / legal obligation (Art. 5/2-a, 5/2-ç) | Art. 6(1)(c) |
Processing is carried out in line with the general principles in Article 4 of the KVKK: lawfulness and fairness; accuracy and being up to date; processing for specified, explicit and legitimate purposes; being relevant, limited and proportionate to those purposes; and retention only for the period required by law or the purpose of processing.
Where we rely on legitimate interest, we have conducted a balancing test to confirm that processing does not harm your fundamental rights and freedoms. You may contact us for details of these assessments.
We share data with the following processors. Each is contractually bound to protect your data to the same or higher standard, and may only process it on our instructions:
| Service | Purpose | Data Shared | Location |
|---|---|---|---|
| RevenueCat | Subscription management | Anonymous app user ID, subscription events | United States |
| PostHog | Anonymised product analytics | Anonymised usage events (no PII) | United States |
| Expo (EAS) | App distribution, push notification delivery | Push tokens, device platform | United States |
| Apple Inc. | iOS distribution, billing, push delivery | Per Apple's privacy policy | United States |
| Google LLC | Android distribution, billing, push delivery | Per Google's privacy policy | United States |
| Hetzner Online GmbH | API server hosting | Encrypted data at rest and in transit | European Union (Germany) |
We do not share data with: advertisers, ad networks, data brokers, marketing platforms, social media companies, or any entity for the purpose of advertising, profiling, or behavioural targeting.
Our primary API infrastructure is hosted in the European Union (Hetzner, Germany). Some third-party processors are based in the United States. Where personal data is transferred outside Türkiye or the EEA, we ensure appropriate safeguards:
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 30 days after deletion request |
| Subscription / financial records | Duration of subscription + 10 years (Turkish Commercial Code Art. 82; Tax Procedure Law retention obligations) |
| Anonymised analytics | 12 months (rolling) |
| Push notification tokens | Until you disable notifications or delete your account |
| Support correspondence | 24 months from last communication |
| Server access logs | 90 days |
When data is no longer needed, it is securely deleted or irreversibly anonymised.
Regardless of your location, quelris grants all users the following rights:
To exercise any right, email privacy@quelris.com. We will verify your identity and respond within 30 days (or sooner where required by local law). We do not charge a fee for reasonable requests.
You may request complete account deletion by emailing privacy@quelris.com with subject "Account Deletion Request". We will delete your account and associated personal data within 30 days and confirm completion. Some data may be retained where required by law (e.g. financial records for tax compliance).
Report security vulnerabilities to privacy@quelris.com.
In the event of a personal data breach:
Website (quelris.com): We use only strictly necessary cookies required for the website to function. No advertising, analytics, or tracking cookies are used on our website.
Mobile application: The quelris app does not use cookies, advertising identifiers, device fingerprinting, or cross-app tracking. Anonymised analytics are collected via PostHog using privacy-respecting methods with no PII transmitted.
We comply with the Personal Data Protection Board's Guidelines on Cookie Practices (Çerez Uygulamaları Hakkında Rehber), Article 5 of Law No. 6698, and — where applicable to users in the EEA — the EU ePrivacy Directive. Strictly necessary cookies are used on the basis of our legitimate interest; any non-essential cookie would be used only with your explicit consent, and we currently use none.
quelris is not intended for use by individuals under the age of 18 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children or minors. If we become aware that we have collected data from a person below the applicable age threshold, we will delete it promptly. Contact privacy@quelris.com if you believe we hold a minor's data.
In addition to the global rights above, the following sections provide supplementary information required by specific jurisdictions. If your jurisdiction is not listed, the global provisions in Sections 1–12 apply.
quelris is established in Türkiye and processes personal data as a data controller (veri sorumlusu) under Law No. 6698 on the Protection of Personal Data ("KVKK"). Personal data is processed in accordance with the general principles in Article 4 and the processing conditions in Articles 5 and 6 of the KVKK.
Your rights under Article 11 of the KVKK. As a data subject (ilgili kişi), you have the right to:
How to exercise them. Submit your request in Turkish or English to privacy@quelris.com, or in writing to Quelris Teknoloji Limited Şirketi, Hasanpaşa Mah. Nabizade Sk. B Blok No: 82 İç Kapı No: 1, Kadıköy / İstanbul, Türkiye, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. We respond free of charge within 30 days at the latest.
Right to complain. If your request is rejected, our response is insufficient, or we do not reply in time, you may file a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) under Article 14 of the KVKK — within 30 days of learning of our response and in any event within 60 days of your application.
Transfers of your personal data abroad are carried out under Article 9 of the KVKK, as described in Section 6.
If you are located in the EEA, your data is processed under the EU General Data Protection Regulation (Regulation 2016/679). You have all the rights listed in Section 8 plus the right to lodge a complaint with your national Data Protection Authority (DPA).
International transfers from the EEA are protected by EU Standard Contractual Clauses (SCCs) and supplementary measures as required by the CJEU Schrems II decision.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
Categories of PI collected in the last 12 months: Identifiers (email, display name); Internet/electronic activity (usage data); Commercial information (subscription history). We have not sold or shared personal information in the last 12 months.
To exercise your rights, email privacy@quelris.com. We will verify your identity before processing requests. We respond within 45 days.
If you reside in a US state with comprehensive privacy legislation (including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, Kentucky, Rhode Island, or other states with active consumer privacy laws), you generally have rights to access, delete, correct, and opt out of certain processing. quelris honours these rights for all US residents. Contact privacy@quelris.com to exercise them.
If you are in Brazil, your data is protected under the Lei Geral de Protecao de Dados (LGPD). You have the right to confirmation of processing, access, correction, anonymisation/blocking/deletion, data portability, information about shared data, information about consent denial consequences, and consent revocation. Contact privacy@quelris.com or file a complaint with the ANPD (Autoridade Nacional de Protecao de Dados).
If you are in Canada, your data is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) or applicable provincial legislation. You have the right to access your personal information and challenge its accuracy. We obtain meaningful consent before collecting, using, or disclosing your personal information. Contact privacy@quelris.com or file a complaint with the Office of the Privacy Commissioner of Canada (OPC).
If you are in Australia, your data is protected under the Privacy Act 1988 and the Australian Privacy Principles (APPs). You have the right to access and correct your personal information. We will respond to access requests within 30 days. Contact privacy@quelris.com or file a complaint with the Office of the Australian Information Commissioner (OAIC).
If you are in India, your data is protected under the Digital Personal Data Protection Act, 2023 (DPDP Act). You have the right to access, correction, erasure, and grievance redressal. We process your data based on consent or legitimate use as defined under the DPDP Act. Contact privacy@quelris.com.
If you are located in a jurisdiction with applicable data protection laws not specifically listed above (including but not limited to Japan (APPI), South Korea (PIPA), Singapore (PDPA), South Africa (POPIA), or any other country with active privacy legislation), we will honour the data protection rights afforded to you by your local law. Contact privacy@quelris.com to exercise your rights.
In accordance with Apple App Store Review Guidelines (Section 5.1.1) and Google Play Developer Policy:
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or service features. For material changes:
Supervisory authorities:
© 2026 Quelris Teknoloji Limited Şirketi · Hasanpaşa Mah. Nabizade Sk. B Blok No: 82 İç Kapı No: 1, Kadıköy / İstanbul, Türkiye · Vergi No: 6321598448 (Kadıköy VD) · info@quelris.com