Legal Document

KVKK Privacy Notice

Last Updated: April 1, 2026

1. Data Controller

Under the Personal Data Protection Law No. 6698 ("KVKK"), your personal data may be processed by CORIA as the data controller within the scope described below.

Data Controller: CORIA

Contact: info@coriaapp.com

Website: coriaapp.com

2. Processed Personal Data

The following personal data is processed within the scope of the CORIA app:

Identity Information

  • Email address
  • Username
  • Profile photo (optional)

Usage Data

  • Scanned product barcodes
  • Scan history
  • Favorite products
  • Dietary preferences and allergen information

Technical Data

  • Device information
  • IP address
  • App usage metrics

3. Processing Purposes

Your personal data is processed for the following purposes:

  • Provision of app services
  • User account creation and management
  • Providing personalized product recommendations
  • Providing allergen warnings
  • Management of premium subscription services
  • Fulfilling legal obligations

4. Legal Basis

Your personal data is processed based on the following legal grounds under Article 5 of KVKK:

  • Existence of your explicit consent
  • Being necessary for the establishment or performance of a contract
  • Fulfilling the data controller's legal obligation
  • Being mandatory for our legitimate interests

5. Data Transfers

Your personal data may be transferred to the following parties:

  • Supabase: Authentication and data storage (EU servers)
  • OpenAI: AI analysis (anonymous product data)
  • RevenueCat: Subscription management
  • Legal authorities: When legally required

Cross-border data transfers are carried out with necessary security measures under Article 9 of KVKK.

6. Your Rights

Under Article 11 of KVKK, you have the following rights:

  • Learning whether your personal data is processed
  • Requesting information if processed
  • Learning the purpose of processing and whether it is used appropriately
  • Knowing third parties to whom data is transferred domestically or abroad
  • Requesting correction if incomplete or incorrectly processed
  • Requesting deletion under the conditions set out in Article 7 of KVKK
  • Requesting notification of correction and deletion to third parties
  • Objecting to a result that arises against you through analysis of processed data exclusively by automated systems
  • Claiming compensation for damages due to unlawful processing

7. How to Apply

You may apply through the following methods to exercise your rights:

Email: kvkk@coriaapp.com

Applications will be concluded within 30 days.

Personal Data Protection Authority

If you believe your rights have been violated:

www.kvkk.gov.tr

This disclosure text was updated on April 1, 2026.