1. Data controller

Under Law No. 6698 on the Protection of Personal Data (KVKK), the data controller is Noteminator, İstanbul, Türkiye.

2. Categories of personal data processed

Identity / contact: email, display name, profile photo (if you sign in with Google). Transaction: sign-up date, sign-in history, IP address, device fingerprint. Customer transaction: subscription status, receipt id (platform-issued). Audio/visual: note attachments you upload (premium only). Marketing: opt-in preference for product updates.

We do not process special categories of personal data (race, religion, health, etc.) unless you voluntarily put them inside a note — in which case they remain end-to-end encrypted and inaccessible to us.

3. Purposes of processing

Providing the service (account, sync, backup, premium features).
Protecting service security (fraud detection, abuse prevention).
Performing legal obligations (tax, lawful requests).
Communicating about your account and (with opt-in) product news.

4. Legal grounds (KVKK Art. 5)

Necessary for the performance of a contract (the service you signed up for).
Legitimate interest, balanced against your rights (security and operations).
Explicit consent (for marketing emails and for processing any data outside these grounds).

5. Transfers to third parties

We transfer the minimum data necessary to: cloud hosting providers (under contractual protections); payment processors (the app store you used); authorities, only upon a valid legal order.

6. International transfer

Servers are located in Türkiye. Where transfers abroad are required (e.g., for a service like Google identity), we apply KVKB-approved safeguards.

7. Storage period

Data is retained only as long as needed for the purpose stated, then deleted, anonymized, or destroyed in accordance with KVKK and the storage and destruction policy.

8. Your rights (KVKK Art. 11)

You have the right to:

Know whether your data is being processed and request information about it.
Learn the purpose, recipients, and whether processing serves the stated purpose.
Know whether your data has been transferred domestically or abroad.
Request correction of incomplete or incorrect data.
Request deletion or destruction.
Object to processing that produces adverse results.
Demand compensation if you suffer damages from unlawful processing.

9. How to apply

Send a signed petition to info@noteminator.com, or to our registered address by registered mail, with sufficient detail for us to identify you and respond. We answer within 30 days.

10. KVKK contact

info@noteminator.com · Noteminator Operasyon, İstanbul, Türkiye.