KVKK Data Protection Notice
Last updated: 12 September 2026
KVKK Data Protection Notice (Türkiye)
iTahmin.com is operated by Apprip, LLC, a company registered in Delaware, USA.
This notice is provided by Apprip, LLC in its capacity as data controller under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK"). For a fuller description of how your personal data is processed, see our Privacy Policy.
iTahmin is a sports analytics and prediction platform providing live match statistics, AI-generated insights and premium data access; it does not accept wagers, hold funds, or facilitate gambling transactions.
1. Identity of the Data Controller
- Data controller: Apprip, LLC (Delaware, United States)
- Service: iTahmin.com
- Contact: destek@itahmin.com
- Company contact: info@apprip.com
- Web: https://itahmin.com/contact
2. Personal Data Processed
| Category | Data |
|---|---|
| Identity | Full name or username, year of birth (for age verification, optional) |
| Contact | Email address, phone number (if SMS verification is used), Telegram user ID and username (if the bot integration is used) |
| Transaction security | Password (one-way hash), IP address, device and browser information, session and sign-in records |
| Usage | Page views, session duration, strategies created, matches viewed, notification preferences |
| Customer transaction | Subscription/access status, plan, start and end dates, customer and subscription identifiers issued by the payment provider, and only the last four digits and brand of the card |
| Requests/complaints | Support tickets, email correspondence, contact form messages |
Your card details are never seen, received or stored by Apprip, LLC. Payment is processed by Stripe on the web and by the Apple App Store / Google Play infrastructure on mobile.
3. Purposes and Legal Bases
| Purpose | Legal basis (KVKK Art. 5) |
|---|---|
| Creating membership, session and account management | Performance of a contract (Art. 5/2-c) |
| VIP digital membership access, billing and subscription management | Performance of a contract (Art. 5/2-c) |
| Sending notifications (push, email, Telegram) | Performance of a contract (Art. 5/2-c) / explicit consent (Art. 5/1) |
| Service security; preventing fraud, account sharing and free-trial abuse | Legitimate interest (Art. 5/2-f) |
| Compliance with legal obligations, retention and responses to official requests | Legal obligation (Art. 5/2-ç) |
| Commercial electronic messages / marketing notifications | Explicit consent (Art. 5/1) |
| Analytics and service improvement | Legitimate interest (Art. 5/2-f) |
Where processing is based on explicit consent, you may withdraw that consent at any time; withdrawal does not affect the lawfulness of processing carried out beforehand.
4. Method of Collection
Your personal data is collected by automated and partly automated means through forms you complete on the website and mobile app, account creation and sign-in, limited information received from social sign-in providers (Google/Apple), cookies and similar technologies, and our support channels.
5. Transfers
Your personal data is not sold to third parties for marketing purposes. It is shared only to the extent necessary to operate the service, with:
- Hosting and server providers — secure storage of data
- Payment infrastructure and app stores — Stripe (web card subscriptions), Apple App Store / Google Play (mobile purchases)
- Email delivery, notification, error monitoring and backup providers — limited access as data processors
- Competent public authorities — only where required by a legal obligation, court order or authority request, limited to the scope requested
Transfers abroad: Because the data controller is established in the United States and infrastructure providers' servers may be located outside Türkiye, your personal data is processed abroad. Such transfers are carried out in accordance with the conditions set out in Article 9 of the KVKK.
6. Retention Periods
- Active account data: until the account is deleted
- After account deletion: retained until the applicable statutory retention periods (e.g. financial legislation) expire, then deleted or anonymised
- Anonymous analytics data: up to 26 months
- Server error logs: 90 days
To delete your account, use the in-app account deletion flow or the account deletion page.
7. Your Rights Under Article 11 of the KVKK
By applying to the data controller, you have the right to:
- learn whether your personal data is being processed;
- request information if it has been processed;
- learn the purpose of processing and whether the data is used in accordance with that purpose;
- know the third parties to whom the data is transferred, in Türkiye or abroad;
- request rectification where the data is incomplete or incorrect;
- request erasure or destruction within the conditions of Article 7 of the KVKK;
- request that rectification, erasure and destruction be notified to third parties to whom the data was transferred;
- object to a result to your detriment arising from analysis carried out exclusively by automated systems;
- claim compensation where you suffer damage due to unlawful processing.
8. How to Apply
Send requests relating to your rights, together with information identifying you, to destek@itahmin.com or info@apprip.com. Requests are concluded free of charge as soon as possible and within thirty (30) days at the latest, depending on their nature; where the process entails an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.
If your application is rejected, you find the response insufficient, or no response is given within the period, you retain the right to lodge a complaint with the Personal Data Protection Board.
9. Changes
This notice may be updated. Material changes are announced by email or via the Platform; the current version is always published on this page.