| Category | Data | Source |
|---|---|---|
| Account & identity | Display name, profile photo, Firebase Auth UID, phone number (if you provide it) | Sign-up & profile screens |
| Contact | Email address (from email sign-up or your Google/Apple account) | Firebase Auth, Google Sign-In, Sign in with Apple |
| Location (manual) | Country, city and location IDs you select | Profile completion / location screens |
| Device & technical | FCM push token, in-app device ID, platform (iOS/Android), app language, crash/diagnostic logs | Firebase Messaging, device APIs |
| User content (UGC) | Feed posts, photos you upload, likes, group memberships, pair-note messages, connection requests, event interactions, comments | In-app interactions |
| Loyalty & redemption | Loyalty stamps, offer redemptions, gift outcomes, redeemed QR records | QR scans, Cloud Functions |
| Tokens & transactions | Token balance, purchase history, spend records, idempotency keys | In-app purchase, server logs |
| Business-role data | Business name, vertical, languages served, location scope, staff list (email, name) | Business dashboard |
| Visited locations | Locations from which you have posted (with first/last timestamps) | Server-side derived |
The app does not collect real-time GPS coordinates, date of birth, payment card details, biometrics, or special-category personal data.
Through Firebase / Google and Apple services, personal data may be transferred to and stored in countries outside Türkiye (notably the EU and the US) where the providers operate their servers and data centres (e.g. europe-west1 / europe-west3). Such transfer and storage are necessary to provide the Service and are carried out under appropriate safeguards providing adequate protection (e.g. Standard Contractual Clauses) committed to by Google/Apple, in line with KVKK art. 9. These cross-border transfers and storage are independent of the explicit consent for group- and you-specific campaigns (see the Explicit Consent text); declining that consent does not affect the transfers necessary to provide the Service. For retention periods see §6.
The mobile app does not use browser cookies. We rely on on-device storage (e.g. SharedPreferences) and device identifiers. Non-essential identifiers are subject to your explicit consent.
The app may show Google AdMob banner and rewarded ads in the user feed. Ads are requested as non-personalised by default and we do not show an Apple App Tracking Transparency (ATT) prompt for IDFA-based tracking. You may reset your advertising ID or disable personalised ads from your device settings.
Localuck is not directed at children under 13. Users in Türkiye who are under 18 may only use the app with parental/guardian consent. If we learn we have processed a child's data without proper consent, we will delete it within a reasonable period.
Under KVKK art. 11 (and, where applicable, GDPR arts. 15–22), you have the right to: confirm processing; request information about it; learn the purposes and the recipients (including international transfers); request correction of inaccurate data; request erasure or destruction when the legal basis ceases; object to fully-automated decisions; and claim compensation for damages caused by unlawful processing.
To exercise your rights, write to info@localuck.com. We respond within 30 days.
Delete your account in-app via Profile › Delete Account or by writing to info@localuck.com. Personal data is then deleted, destroyed or anonymised within a reasonable period, save for data retained to comply with statutory retention duties.
We apply administrative and technical safeguards including access control on Firebase, encryption in transit and at rest, least-privilege security rules, server-side authorisation through Cloud Functions, and screenshot protection on QR screens. No service is 100% secure — please choose a strong password and protect your account.
We may update this Privacy Policy from time to time. Material changes are announced in-app or by email; the current version is always available on this page.
Privacy queries: info@localuck.com
