Privacy Policy

In short

Perde: Önce Sohbet (“Perde”; in English, Perde: Talk First) is an iOS app that introduces people aged 18 and over in Turkey to people from their own city through writing first. Conversation first, photo later: for three days you only write, and photos open only if you both want them to.

This text is the privacy notice required by Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and Perde’s privacy policy. It explains which data we process and why, who we share it with, how long we keep it and what your rights are.

• No ads, no tracking. Perde shows no ads, does not track you across other apps or websites, does not read your advertising identifier (IDFA) and does not sell your data. There are no third-party advertising or measurement tools in the app.
• Your photo stays hidden. Your photo and nickname are not shown to the other person until the curtain opens; if you both want, they appear at the same moment.
• Your selfie stays on your phone. The selfie you take for verification is compared on your phone; it is never uploaded or stored.
• Your contacts never reach the server. If you choose to exclude people you know, their numbers are turned into one-way hashes on your phone; names and the numbers themselves are never sent.
• Your data is in the European Union. Data is stored on Supabase infrastructure in Frankfurt.
• You are in control. You can download your data and permanently delete your account from inside the app.

Data controller

The data controller for your personal data is Furkan Akturk, who publishes Perde on the App Store as an individual developer (the seller name on the App Store). Perde is published under the FAAPPS umbrella brand.

• App: Perde: Önce Sohbet (iOS)
• Data controller: Furkan Akturk, individual developer, Turkey
• Brand: FAAPPS
• Contact and requests: hello@faapps.io

In this text, “we” means the data controller.

Personal data we process

This list is the same as the app’s “App Privacy” declaration on the App Store. All of this data is linked to your account; none of it is used for tracking.

Account and sign-in

• Phone number: when you sign in with your phone, to send a one-time verification code and to recognise your account.
• Email address: with Sign in with Apple, the address Apple shares. It may be Apple’s private relay address. Only your email is requested with Sign in with Apple, not your name.
• Account identifier: a random identifier given to your account.
• Device identifier: the SHA-256 hash of a random value the app creates in your phone’s Keychain. It is not an advertising identifier; it is used to recognise new accounts opened on the same device and banned devices.
• Hash of your phone number: a SHA-256 hash of your number computed on the server so that other people’s contact exclusion can work. People who use Sign in with Apple don’t have one.

Profile

• Nickname, date of birth, your gender, the gender you are looking for, your intention (“A serious relationship” or “Open to exploring”), the age range you’d like to meet, your preferred round day and your city.
• Your answers to the common-ground questions: you can skip questions. Your answers are shown to the other person only as “common ground”, on questions where you both gave the same answer.
• Your optional real name: you can leave it empty. It is shown to the other person only in a story where the curtain has opened, and only if you chose “Show my name too” for that story.
• Invite codes: the codes given to you and the code you used. A code’s owner only sees that it was used, never by whom.

Photos and verification

• Your profile photo (required) and up to two optional extra photos. Photos are resized on your phone, stripped of metadata (including location) and uploaded to private storage that is closed to everyone. Your profile photo is shown to the other person only after a mutual reveal, through a link that is valid for 10 minutes and meant only for them; it can’t be saved or shared from the app.
• Selfie verification: your selfie is compared with your hidden photo on your phone, using Apple’s on-device image analysis. The selfie and the face data derived from it are never sent to the server and are not stored. Only the result (verified or not), the number of attempts and the time are sent to the server. An account that can’t be verified in three attempts goes to our team for review; that review uses the photos you uploaded, not your selfie. The face data in your selfie is biometric data and is processed only with your explicit consent.

Stories and conversation

• Your messages and your answers to the daily question.
• Your story decisions: your extension request, your curtain decision (“Open it” or “Keep it closed”) and your “Show my name too” choice. Your decision is never shown to the other person.
• Screenshot notice: if you take a screenshot in a conversation, the other person receives a short note saying so.
• Filter records: before the curtain opens, messages containing contact details or language that breaks the rules are not sent. Only the type and time of such a message are recorded; its content is not stored.

Safety and reports

• Reports you make: the category, your optional note (up to 500 characters) and, as evidence, the last 20 messages visible to both of you at the time of the report.
• Blocks and exclusions: people you reported or whose story you ended, and people you said “I know this person” about. You won’t be introduced to them again.
• Account and verification reviews, banned device records.

Contacts (optional)

• If you turn on “Exclude people I know” in Settings, the mobile numbers in your contacts are turned into SHA-256 hashes on your phone and only these hashes (up to 5,000) are sent. Names and the numbers themselves never leave your phone.
• The hashes are used only to keep you out of the same story as those people. Because phone numbers come from a small range, hashes like these can be reversed by trial; that is why they are kept only on the server and are never shown to any user, not even you.
• This also means data about the people whose numbers are in your contacts is processed, solely so that you don’t meet people you know.

Purchases

• Your Perde+ and Single round transactions: product, purchase and expiry dates, renewal status, environment and Apple’s transaction identifiers. Apple’s signed transaction information is verified on our server. Your card and payment details never reach us; Apple takes the payment.

Diagnostics and usage

• Crash and performance reports: iOS MetricKit reports (up to 32 KB), app and iOS version, device model; for errors, only the error category and code. They contain no messages, phone numbers, names or session data.
• Product interaction: events that happen on the server (a round opening, a first message, a mutual reveal, a story closing, a purchase). We use them only for our own measurement; they are not sent to any analytics company.

Consent records

• Which version of the Privacy Notice, the Explicit Consent text and the Terms of Use you accepted and when, and when you withdrew consent if you did.

Kept on your phone

• The app’s own preferences (such as whether you’ve seen certain screens, your contacts preference and an unsent message draft) are stored only on your phone.

What we don’t process

• Location (your device location is never read; you choose your city), health and financial information, browsing and search history, audio, advertising identifiers, your contacts themselves and your selfie.
• Perde does not currently send push notifications and does not collect a device push token. If that changes, this text will be updated.

Purposes

• Creating your account and signing you in: phone number or Sign in with Apple, account identifier.
• Introducing you and running the rounds: using your city, gender and the gender you are looking for, intention, age range, round day and answers to decide who you are introduced to, to show common ground and to keep each round gender-balanced.
• Running the stories: conversation, daily question, extension, curtain decision and mutual reveal; showing your real name in a story where you choose to; the archive.
• Keeping people safe: the 18+ check, selfie verification, filters that block contact details before the curtain opens and abuse, reviewing reports, detecting banned devices and people returning with a new account, and keeping you from meeting people you know.
• Verifying purchases: applying Perde+ and Single round rights to your account and handling refunds and revocations.
• Running and improving the service: fixing errors and crashes and measuring how the rounds work using our own data.
• Legal obligations and requests: answering your requests, meeting lawful requests from authorities and protecting rights in possible disputes.

Automated decisions: who you are introduced to in a round is decided automatically, without human involvement, by set rules (city, gender preferences, intention, age range, not having been introduced before, exclusions, gender balance). Your right to object to this outcome is described below under “Your rights”.

Legal bases

• Performance of a contract (KVKK Art. 5(2)(c)): account, profile, rounds and stories, mutual photo reveal, your optional real name, purchases and consent records. Without them the service described in the Terms of Use can’t be provided.
• Legitimate interest (KVKK Art. 5(2)(f)): safety and abuse prevention (device identifier hash, filters and violation records, report evidence, banned devices), contact exclusion hashes, diagnostics and our own measurement. We do this in a way that does not harm your fundamental rights and freedoms and with only the data needed.
• Legal obligation (KVKK Art. 5(2)(ç)) and establishing, exercising or defending a right (KVKK Art. 5(2)(e)): answering requests, requests from authorities and disputes.
• Explicit consent (KVKK Art. 6): we ask for your explicit consent separately for two kinds of special category data: your gender together with the gender you are looking for (together they may imply your sexual orientation), and the face data in your selfie (biometric data). Details and withdrawal: Explicit Consent.

Who we share data with

We don’t sell your data and we don’t share it with anyone for advertising. We share it only with the following, and only as much as needed:

• The other person: while a story is running, they see only your common ground, your messages and your answers to the daily question. When the curtain opens because you both wanted it to, they see your nickname, profile photo and age; they see your real name only if you chose to show it for that story. Your decision, your reports and who ended a story are never shown.
• Supabase (infrastructure provider): the database, authentication, file storage and server functions run on Supabase in the European Union (Frankfurt, eu-central-1). Supabase processes the data on our behalf and on our instructions. Data is protected with TLS in transit and encrypted at rest. As this is a transfer outside Turkey, it is carried out in line with the conditions of KVKK Article 9.
• SMS provider: when you sign in with your phone, the verification code is sent through an SMS provider used by our authentication infrastructure. Only your number and the code are passed to the provider.
• Apple: Sign in with Apple and App Store purchases are subject to Apple’s own privacy policy. Apple passes us only the email and account information needed for sign-in and purchase transaction information. You can remove Perde’s access to your Apple account at any time in your Apple Account settings.
• Authorities: only when legally required and only as much as needed.

How long we keep data

• Account, profile, photos, answers, purchase and consent records: for as long as your account is open.
• Your messages: together with the stories and the archive, for as long as your account is open. When you delete your account, the messages you wrote are deleted; what the other person wrote stays in their account.
• Contact exclusion hashes: until you turn the exclusion off or delete your account. Turning it off deletes all of them.
• Diagnostic reports: up to 90 days.
• Invite code attempt records: 1 day.
• When you delete your account: your account, profile, photos, answers, the messages you wrote, consent and purchase records, contact hashes, device records and the reports you made are deleted immediately. Product events and the App Store notification ledger stay, unlinked from your account.
• Two limited exceptions (legitimate interest): (1) If you delete your account while a report about you is still open, the report and its evidence are kept, unlinked from your account (pseudonymised), for up to 90 days for the safety of the person who reported and for possible legal proceedings, then deleted automatically; resolved reports are deleted immediately. (2) So that a new account opened with the same device or phone number isn’t introduced again to people you excluded, blocked, reported or met before, a record without any account identifier (a device or phone hash and the other person) is kept; it disappears by itself when the other person deletes their account.
• Banned devices: the identifier hash of a device banned for serious rule violations is kept to prevent abuse even after the account is deleted; it contains no account identifier.
• Backups: deleted data may remain in the infrastructure provider’s routine backups for a limited time and is deleted with those backups when that time is up.

Your rights (KVKK Art. 11)

Under Article 11 of the KVKK you can apply to us to:

1. Learn whether your personal data is processed,
2. Request information about it if it is,
3. Learn the purpose of the processing and whether the data is used in line with it,
4. Know the third parties in Turkey or abroad to whom it is transferred,
5. Ask for it to be corrected if it is incomplete or inaccurate,
6. Ask for it to be deleted or destroyed under the conditions of KVKK Article 7,
7. Ask for corrections and deletions to be notified to the third parties it was transferred to,
8. Object to an outcome against you that arises solely from analysis of your data by automated systems,
9. Ask for compensation if you suffer damage because of unlawful processing.

Inside the app

You reach Settings from the icon at the top right of the Lobby.

• Download my data: Settings › My data › Download my data. Your profile, answers, consent records, the messages you wrote, the reports you made, and your purchase and entitlement records are prepared as a single JSON file that you can save from the share sheet.
• Delete account: Settings › My data › Delete account. Your account and data are deleted permanently from inside the app, without waiting. If you signed in with Apple, you’re asked to confirm with Apple once more first. If you have a subscription, it continues with Apple; subscriptions are managed in your Apple account.
• Withdraw explicit consent: Settings › Privacy › Manage my explicit consent. What happens is described in the Explicit Consent text.
• Correct your information: you can change your real name and city in Settings › Account. To correct information you can’t change in the app, write to hello@faapps.io.

Requests

For any request you can’t make in the app, write to hello@faapps.io. So that we can find your account, include the phone number linked to it or the email you use with Sign in with Apple; we may ask for more information to verify your identity. We answer within 30 days at the latest, free of charge; if the request involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If you find our answer insufficient, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

Security

• Every table in the database is protected by row-level security rules; no user can directly access anyone else’s profile, messages or decisions. Rules such as introductions, the curtain decision and filters are enforced on the server.
• Photos sit in storage that is closed to everyone and are shown only after a mutual reveal, through a 10-minute link.
• Connections are encrypted with TLS; data is encrypted at rest.
• No system is perfect. If a data breach happens, we notify the Board and the people affected as required by the KVKK.

18+ only

Perde is only for people aged 18 and over. Your date of birth is asked at sign-up; people under 18 can’t open an account, and this rule is also enforced on the server. If we learn that someone under 18 has opened an account, we close it and delete their data. You can tell us with Report › Under 18 in a conversation or by writing to hello@faapps.io.

Changes to this text

When we update this text, the date and version at the top change. If there is an important change, we let you know inside the app and ask for your consent again where needed.

Contact

For any privacy question or request: hello@faapps.io