KVKK Information Notice
Prepared under article 10 of Turkish Personal Data Protection Law no. 6698 (“KVKK”). Effective: June 12, 2026. The Turkish version is legally authoritative.
1. Data Controller
This notice is issued by Logicute Yazılım Limited Şirketi (“Localuck”), operator of the Localuck mobile application, acting as data controller under KVKK.
2. Categories of Personal Data Processed
| Category | Examples |
|---|
| Identity | Name, display name, Firebase user ID |
| Contact | Email, phone (if shared) |
| Visual | Profile photo, uploaded feed/gallery images |
| Customer transactions | Token purchase and spend records, loyalty stamps, redemption history |
| Location (manual) | Country / city / location IDs you select; locations from which you posted |
| Transaction security | Session token, FCM token, server-side IP, idempotency keys, diagnostics |
| Marketing | Channel preferences and campaign engagement, only where you consent |
| Legal proceedings | Request / complaint records, correspondence in disputes |
3. Purposes of Processing
- Create and authenticate your account.
- Provide core features (discovery, campaigns, loyalty, events, messaging).
- Operate QR-based stamp / offer redemption securely.
- Run the in-app token economy.
- Send push notifications (subject to your device permission).
- Customer support, complaint handling.
- Fraud, spam and abuse prevention; information security.
- Service improvement using aggregated, de-identified data.
- Compliance with legal obligations (tax, commerce, Law no. 5651).
4. Collection Methods & Legal Bases (KVKK arts. 5–6)
Personal data is collected electronically through the app, Cloud Functions calls, identity providers (Google, Apple) and device APIs (FCM, camera/gallery picker). Legal bases:
- Necessary for the conclusion or performance of a contract — KVKK art. 5/2-c.
- Expressly provided for by law — KVKK art. 5/2-a.
- Performance of a legal obligation — KVKK art. 5/2-ç.
- Necessary for establishment, exercise or defence of legal rights — KVKK art. 5/2-e.
- Legitimate interests of the controller — KVKK art. 5/2-f.
- Your explicit consent for processing that does not fit the above — KVKK arts. 5/1 and 9.
5. Transfers
Personal data may be transferred only as needed for the purposes above:
- Cloud infrastructure: Google LLC / Google Ireland Limited (Firebase, AdMob).
- Identity providers: Google LLC, Apple Inc.
- App stores: Apple Inc., Google LLC.
- Relevant businesses / staff: when you redeem at their venue.
- Public authorities (courts, prosecutors, BTK, KVKK Authority, GİB) on lawful request.
- Legal advisers and auditors under confidentiality obligations.
Cross-border transfer. Google servers may be located outside Türkiye, notably in the EU and the US. Transfers rely on your explicit consent or the conditions under KVKK art. 9 (adequacy decision, contractual commitments of adequate protection). You may decline consent; some features may then be unavailable.
6. Your Rights (KVKK art. 11)
- Confirm whether your data is processed.
- Request information about processing.
- Learn the purposes and whether they are followed.
- Know third-party recipients in Türkiye or abroad.
- Request correction of inaccurate or incomplete data.
- Request erasure or destruction under KVKK art. 7.
- Have such updates notified to recipients.
- Object to wholly-automated decisions producing adverse effects.
- Claim compensation for damages caused by unlawful processing.
7. How to Apply
You may submit your request by:
- Wet-signed petition delivered in person or by notary to Kötekli mah. Teknopark No:4B/19 Menteşe MUĞLA;
- Email from the address registered in our system to info@localuck.com.
Your request must contain your name, Turkish ID (or passport no.), service address, contact email/phone and the specific request. We respond free of charge within 30 days; a tariff fee set by the Authority may apply when the response requires extra cost.
8. Retention
Data is retained as long as needed for the listed purposes and then in line with statutory retention periods (e.g. 10 years for commercial books, 2 years for traffic logs under Law no. 5651); after that, data is destroyed or anonymised. See the Privacy Policy for details.
9. Changes
This notice may be updated to reflect changes in law or our services. The current version is always available on this page.
