KVKK Privacy Notice

Data controller and scope

The data controller is EGC YAZILIM SAĞLIK HİZMETLERİ LTD. ŞTİ., MERSİS 0325104391200001, Tax Number 3251043912, address ZUHURATBABA MAH. ŞENYUVA SOK. INCA APT. NO:2 D:11 BAKIRKÖY, İstanbul 34147, Türkiye.

This notice provides information under Article 10 of Turkish Personal Data Protection Law No. 6698 regarding processing in app accounts, pregnancy tracking, premium tools, doctor communication, appointments, document or test evaluation, purchases, community, security, and support processes.

Data, purposes, and legal grounds

• Identity, contact, and account data relies on entering into or performing the contract for membership, verification, and requested services; mandatory records rely on the relevant legal duty; and device and transaction-security data relies on legitimate interests only after necessity and rights are balanced. These grounds are not applied collectively to every activity.
• Pregnancy, measurement, symptom, medication, document, test, and similar special-category data relies on activity-specific explicit consent for optional personal tracking. Processing by authorized health personnel occurs only where a condition under Article 6 of the KVKK applies to that specific activity.
• Doctor messages, appointments, and sharing data may contain health information; contract performance alone is not treated as a basis for that special-category data. Consultation, security, and professional recordkeeping are each assessed against their own purpose, recipient, and applicable Article 6 condition.
• Purchase, support, notification, community, and technical-log data is processed to administer entitlements, resolve requests and disputes, operate the system securely, and send commercial communications only where expressly chosen.

Collection, transfers, and retention

Personal data is collected by automated or partly automated means through mobile-app and web forms, user uploads, authorized device sources, app-store verification responses, doctor or support interactions, and security logs. It may be transferred on a need-to-know basis to service providers, the doctor or clinic selected by the user, and legally authorized bodies.

Where an international transfer or remote access occurs, an adequacy decision or appropriate safeguard under the KVKK must first be established for the specific activity and operationally verified. Explicit consent is not a general basis for regular transfers and may be considered only for an occasional transfer that meets the statutory conditions. Data is retained for its processing purpose, statutory duties, and dispute periods, after which it is placed into deletion, destruction, or anonymization procedures.

Data-subject rights and applications

• Learn whether personal data is processed and request information where it has been processed.
• Learn the purposes of processing, whether data is used consistently with those purposes, and the categories of recipients in Türkiye or abroad.
• Request correction of incomplete or inaccurate data, deletion or destruction where the conditions are met, and notification of those operations to recipients.
• Object to an adverse result arising solely from automated analysis and seek compensation for damage caused by unlawful processing.
• Applications may be sent to [email protected] or ZUHURATBABA MAH. ŞENYUVA SOK. INCA APT. NO:2 D:11 BAKIRKÖY, İstanbul 34147, Türkiye. Information necessary for identity verification and scope may be requested; applications are answered within the statutory period and generally without charge.