Privacy Policy
Aika Dernek mobile app
This Privacy Policy explains how your personal data is collected, used, stored and shared in the Aika Dernek mobile application developed by AIKA Teknoloji Sanayi ve Ticaret Limited Şirketi (“Aika”). By using the app you are deemed to accept this policy.
1. Data Controller and Our Role
Aika Dernek provides a multi-tenant infrastructure. Each association is the data controller for its own members’ personal data under Turkish Law No. 6698 (“KVKK”). AIKA Teknoloji is merely the data processor providing technical infrastructure and the mobile app to those associations (KVKK art. 3/ı).
You can reach your association’s own privacy notice from within the app via “Profile → Privacy Notice” or on your association’s website.
2. Data We Collect
| Data Category | Examples | Source |
|---|---|---|
| Identity details | First name, surname | Member / association’s records |
| Contact details | Phone, e-mail | Member |
| Professional details | Occupation, years of experience, professional description | Member (optional) |
| Location (general) | Province / district of residence | Member (optional) — no GPS is collected |
| Image | Profile photo | Member (optional) |
| Technical data | Device type (iOS/Android), app version, FCM push token | Otomatik |
| Usage data | Sign-in records, which tenant you signed in to | Otomatik |
Data we do not collect: special-category data (health, religion, ethnicity etc.), precise GPS location, camera/gallery content (unless you select it), contacts, SMS, calendar, browser history, advertising identifiers.
3. Purposes of Use
- Keeping your membership record (an obligation of your association under Turkish Law No. 5253 on Associations)
- Delivering association announcements, news and events to you
- Sending push notifications when new content is published (only with your permission)
- Showing other members the information you have consented to share in the member directory
- Managing switching between associations if you belong to more than one
- Keeping the app secure and stable (error tracking, version control)
- Compliance with legal obligations (court or prosecutor requests)
4. Sharing with Third Parties
Your personal data is never sold or marketed to third parties, apart from legal obligations and the technical service providers listed below.
| Service | Purpose | Data shared |
|---|---|---|
| Google Firebase Cloud Messaging | Push notification delivery | FCM token, cihaz tipi |
| Apple Push Notification service (APNs) | Push notification delivery for iOS | APNs token (via Firebase) |
| Aika server infrastructure | Application backend (hosted in Türkiye) | All application data (over an encrypted HTTPS connection) |
Transfer abroad: only the push token is shared with Google servers so that Firebase Cloud Messaging can deliver notifications. This relies on your explicit consent under KVKK art. 9 (given when you allow notifications in the app).
5. Data Retention Periods
- While membership is active: all profile data
- After membership ends: records required by the Law on Associations are kept for 10 years
- FCM token: until you remove the device or uninstall the app
- After an account deletion request: erased from all systems within 30 days (except records subject to a legal retention obligation)
6. Your Rights (Article 11 of the KVKK)
You have the following rights regarding your personal data:
- To learn whether it is processed
- To request information about such processing
- To learn the purpose of processing and whether the data is used accordingly
- To know the third parties to whom the data is transferred at home or abroad
- To request correction if processed incompletely or incorrectly
- To request erasure or destruction
- To request that corrections or erasures be notified to the third parties concerned
- To object to an adverse outcome produced solely by automated analysis
- To claim compensation for damage suffered due to unlawful processing
7. Account Deletion
In line with Apple App Store and Google Play policies, you can delete your account from within the app or via this page:
- In the app: Profile → Delete My Account
- By e-mail: write to aika@aika.tr with the subject “Account Deletion Request”. It is enough to state your association and your registered phone or e-mail.
8. Children’s Privacy
Aika Dernek is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we notice we have collected a child’s data, it is deleted immediately.
9. Data Security
- All traffic is encrypted with HTTPS / TLS 1.2+
- Passwords are stored as one-way cryptographic hashes (bcrypt)
- Sensitive session data is kept in the operating system’s secure storage on the device (iOS Keychain, Android Keystore)
- Server access is limited to authorised Aika staff and is logged
10. Permissions
The app may request the following device permissions; all of them are optional:
- Notifications: to deliver association announcements (you can opt out)
- Camera: only when taking a profile photo — the photo stays on the device and we receive only the result you approve for upload
- Gallery: only when choosing a profile photo
11. Changes to This Policy
We may update this policy from time to time. Significant changes are announced via an in-app notification and the update date on this page.
12. Contact
For any question, request or complaint about this Privacy Policy or your personal data:
- E-posta: aika@aika.tr
- Please write “Privacy” in the subject line.