Ruconn Privacy Policy

This Privacy Policy explains the scope and purposes for which your personal data is processed when you use the Ruconn mobile app and related services.

This Privacy Policy provides general information about how personal data is processed within Ruconn. Where required, it does not replace a separately provided data processing notice (KVKK Aydınlatma Metni) or explicit-consent texts, and it is not, on its own, an explicit-consent form.

1. About Us and the Data Controller

Your personal data is processed as data controller under Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”) by the following company:

• Company: Ruconn Teknoloji Yazılım Limited Şirketi
• Address: Konak Mah. Barış (120) Sk. Ofis Artı İş Merkezi Sitesi No: 3 İç Kapı No: 10 Nilüfer / Bursa, Türkiye
• Tax Office / No: Çekirge Tax Office / 7352333782
• Web: https://ruconn.com
• Privacy contact: privacy@ruconn.com
• General support: support@ruconn.com

2. Scope of This Policy

This policy applies to the Ruconn mobile app, the server services the app connects to, and in-app components such as map/location selection.

This policy does not cover websites outside Ruconn, social media accounts, or communications that clubs/organizers establish with you through their own channels.

Ruconn is intended only for the Turkish market and is prepared primarily for users in Türkiye, based on the KVKK.

3. What Personal Data Do We Collect?

When using Ruconn, we process the following personal data:

Account and identity data

• First and last name
• Username
• Email address and/or phone number
• Your password (stored only using secure, irreversible hashing methods)
• Date of birth
• Account status

Profile data

• Profile photo
• City
• Short biography
• Sport preferences and your level

Device and session data

• Device identifier, platform, model, app and operating system version
• Session and security information
• Push notification identifiers used to deliver notifications

Event and participation data

• Events you create or join
• Event location name and coordinates selected on the map
• Participation status and check-in (attendance) records

Organization (club) data

• Club membership, role, and follow data
• Processing records related to club management

Content and communication

• Messages you send in group and event chats
• Event posts and photos you upload
• In-app notifications

Security, moderation, and support

• Block records
• Report records
• Your support requests

We do not collect health data, measurements such as heart rate/weight/height, payment/credit card information, ID/passport documents, or biometric data.

4. How Do We Collect Personal Data?

• Directly from you: During registration, profile creation, event creation, messaging, and support requests.
• Through device permissions: With the permissions you grant for camera (check-in via QR), photo selection (profile/post), and location selection.
• Automatically: Session data, device identifiers, and push notification identifiers during the operation of the service.
• Through other users and clubs: When you join an event, become a member of a club, or take part in chats.
• Through service providers: For delivering email and SMS verification codes, sending push notifications, and map services.

5. For What Purposes Do We Process Personal Data?

• To create and manage your account
• To verify your identity and ensure account security
• To process your date of birth for account and profile management and to assess age eligibility
• To let you discover, join, and check in to events
• To provide club and community features
• To deliver group and event chats and announcements
• To send you service-related notifications
• To protect platform security, prevent abuse and fraud, and carry out moderation
• To respond to your support requests
• To provide clubs with aggregated performance statistics visible only to their authorized members
• To fulfill our legal obligations

Ruconn does not use marketing push notifications, marketing emails, commercial SMS campaigns, behavioral advertising, or advertising-based profiling. Messages we send you, such as verification codes, password resets, and event and security notifications, relate to the operation of the service; they are not marketing messages.

We do not use any mobile analytics or tracking software for advertising or behavioral tracking. The performance statistics provided to club administrators are aggregated operational data visible only to authorized members.

6. Legal Bases for Processing

We process your personal data based on the following legal bases set out in the KVKK:

• Conclusion or performance of a contract: For account creation, event participation, chat, notifications, and the provision of core services.
• Compliance with our legal obligations: For retention and response obligations arising from applicable legislation.
• Legitimate interest: For platform security, prevention of abuse, moderation, and aggregated club statistics.
• Establishment, exercise, or protection of a right: For resolving disputes and handling legal claims.
• Your explicit consent: Only where a data processing activity legally requires explicit consent and your consent is separately, specifically, and clearly requested.

Granting push notification permission on your device is an operating-system permission required for notifications to be technically delivered to your device. If a separate data processing activity requires explicit consent, that consent is requested separately.

7. Event and Participation Data

When you create or join an event, your event information, selected location, participation status, and check-in records are processed. This information is used to run the event and to enable the organizer to manage participation. Organizers and club administrators can, within the scope of their authority, view the participant list and check-in status.

8. Location Data

Ruconn does not track your location continuously or in the background.

Location data is only processed in the following cases:

• The point you select on the map when creating an event or setting a location,
• The location permission you optionally grant during onboarding, which you may skip.

We use Google Maps Platform services to display maps; this service is subject to Google’s own privacy practices. Your live GPS location is not required during QR check-in.

9. Group Chats and User Content

Messages you send in club and event group chats can be seen by the other members of that chat. Ruconn does not offer one-to-one private messaging.

You are responsible for the content in the messages, posts, and photos you share. Inappropriate content may be assessed under moderation; you can use the report and block tools.

10. Organization and Club Data

When you join or manage a club, data related to membership, role, follow, and management operations is processed. Club administrators can access membership and participation information within the scope of their authority.

11. Notifications and Communication

We send you service-related notifications (for example, participation results, check-in requests, chat and club notifications). Push notifications depend on the permission you grant on your device and on your in-app notification preferences.

Push notifications may include a notification title, short text, and related routing information, and a push notification service provider is used to deliver these notifications to your device.

You can manage your notification preferences and communication channels from the app settings.

12. Device Permissions

Ruconn requests device permissions for certain features:

• Notifications: To receive service notifications (optional).
• Camera: To check in via QR code.
• Photos: To upload a profile photo or event post.
• Location: For selecting a location on the map (optional; can be skipped).

You can change these permissions from your device settings at any time.

13. Cookies and Similar Technologies

The Ruconn mobile app manages sessions with secure tokens; it does not use advertising or cross-site tracking cookies. The app stores your session information locally on your device.

14. Who We Share Personal Data With

Your personal data may be shared with the following parties, only to the extent necessary:

• Other users: Your public profile information and information visible within events and chats you join. Your email and phone number are not shown to other users.
• Clubs and organizers: Within the scope of participation and membership, and within their authority.
• Service providers: Infrastructure and communication providers that help us deliver the service (see Section 15).
• Authorized authorities: Where required to meet legal obligations or legal requests.

We do not sell or rent your personal data for advertising purposes.

15. Service Providers and Third Parties

To provide the service, we rely on the following types of service providers:

• Chat and real-time messaging infrastructure — Supabase (for group and event chats)
• Push notification service — Google Firebase Cloud Messaging
• SMS delivery service — Twilio (for phone verification codes)
• Email delivery service (for email verification and transactional emails)
• File and media storage service — Cloudflare R2 (for profile photos and event images)
• Map service — Google Maps Platform (for location display and selection)

Depending on the nature of the relevant service and applicable agreements, these service providers may process certain personal data in order to provide services to Ruconn. Such processing takes place within the framework of the relevant provider’s terms of service, data processing terms, and applicable legislation.

16. International Data Transfers

Some of the service providers we use may process data outside Türkiye. In that case, your personal data may be transferred abroad.

The necessary steps are taken to ensure that such transfers are carried out in accordance with the conditions set out in the KVKK provisions on international data transfers (Art. 9). Transfers are conducted within the framework of the transfer conditions prescribed by applicable legislation.

17. Data Retention and Deletion

We retain your personal data only for as long as necessary for the purposes for which it is processed and within the retention periods required by applicable legislation. When the purpose and legal basis requiring retention of the personal data cease to exist, deletion, destruction, or anonymization processes are applied to the relevant data within the framework of applicable legislation.

Some data may continue to be retained to the extent and for the duration necessary for security, prevention of abuse, resolution of disputes, or fulfillment of legal obligations.

18. How to Delete Your Account

You can start deleting your account from within the app via Settings → Delete Account.

After your account deletion request:

• Your account is disabled and made unusable,
• Your active sessions are terminated,
• Profile information that directly identifies you (name, email, phone, username, profile photo, and biography) is removed or made inaccessible.

Some records may be retained to the extent and for the duration genuinely necessary for security, prevention of abuse, resolution of disputes, establishment/exercise/protection of a right, or fulfillment of legal obligations. Such retention is limited by taking into account the nature of the relevant data, the purpose of processing, and the applicable legal basis. The treatment of past chat content is further explained in Section 19.

For additional requests regarding the removal of your data or making it inaccessible, you can contact us at privacy@ruconn.com.

19. Past Content from Deleted Accounts

To preserve the context of group and event chats, even if you delete your account, some messages you previously sent in these chats may remain in the chat history.

In this case, in the user interface:

• Your name may be shown to other users as “Deleted User,”
• Your profile photo and username are not shown,
• The link to your profile does not work,
• Contact information such as email and phone is never shown.

Please note that the content of chat messages may contain personal information you wrote yourself. You can send us your requests regarding message content.

20. Persons Under the Age of 18

Ruconn is intended only for persons aged 18 and over. Persons under 18 should not create a Ruconn account. If we become aware that a person under 18 has provided us with personal data, we take the necessary steps to delete that data. You can report such a situation to privacy@ruconn.com.

21. Automated Decision-Making and Profiling

Ruconn does not make fully automated decisions that produce legal effects concerning you or similarly significantly affect you. It does not carry out advertising-based profiling or behavioral advertising tracking.

Event and club recommendations provide a ranking based on criteria such as city, sport, and event information; this is not an automated decision that produces legal effects.

22. Data Security

We apply reasonable technical and administrative measures to protect your personal data. These include storing passwords using irreversible hashing methods, using secure connections (TLS) for data transmission, session security, and role-based access controls.

We remind you that no system is 100% secure. In the event of a data breach, we fulfill our notification obligations under applicable legislation.

23. Your Rights Under the KVKK

Under Article 11 of the KVKK, you have the following rights:

• To learn whether your personal data is being processed,
• To request information if it has been processed,
• To learn the purpose of processing and whether it is used in accordance with that purpose,
• To know the third parties to whom your data is transferred domestically or abroad,
• To request correction of incomplete or inaccurately processed data,
• To request deletion or destruction of your data,
• To request that correction, deletion, or destruction operations be notified to third parties to whom the data has been transferred,
• To object to a result that arises against you as a result of the analysis of processed data exclusively by automated systems,
• To request compensation for damages you suffer due to unlawful processing of your data.

Where processing is based on your explicit consent, you may withdraw your consent at any time. Withdrawal of explicit consent does not affect the lawfulness of processing carried out based on your consent before the withdrawal date.

24. How to Apply

To exercise your rights under the KVKK, you can submit your requests using one of the methods set out in the applicable Communiqué on the Procedures and Principles of Application to the Data Controller. In this context, you can submit your requests in writing to the address of our company stated above; using a registered electronic mail (KEP), secure electronic signature, or mobile signature if available; or from the email address you have previously notified to us and which is registered in our systems, to privacy@ruconn.com. If other electronic methods specifically developed for applications exist, these methods may also be used within the framework of applicable legislation.

Your application must contain the information necessary to verify your identity and to evaluate your request.

Your applications are concluded as soon as possible depending on the nature of the request and, in any case, within the period prescribed by the KVKK, at the latest within 30 days. If you are not satisfied with your application, you reserve the right to file a complaint with the Personal Data Protection Authority: https://www.kvkk.gov.tr

25. Changes to This Policy

We may update this policy from time to time. For significant changes, we will inform you within the app or through other appropriate means. The current version is published at https://ruconn.com and within the app. The “Last updated” date at the top of the page indicates the most current version.

26. Contact

For any questions, requests, and applications regarding privacy:

• Email: privacy@ruconn.com
• Support: support@ruconn.com
• Address: Ruconn Teknoloji Yazılım Limited Şirketi, Konak Mah. Barış (120) Sk. Ofis Artı İş Merkezi Sitesi No: 3 İç Kapı No: 10 Nilüfer / Bursa, Türkiye