Privacy Policy
This policy explains, in plain language, what data the Avlu app and the avluapp.com website collect and why, who we share it with, how long we keep it, and how you stay in control of it. If this English version and the Turkish version differ, the Turkish version prevails.
Who is responsible?
Avlu is operated by an individual, Ardan Hira Yılmaz (Karacaağaç Mahallesi, D-100 Karayolu (Ankara–Bolu Yolu) No: 5, Bolu Merkez / Bolu, Türkiye). For any question: avluapp@gmail.com
What we collect, and how
What you give us:
- Account details: display name, username, email, password (stored encrypted), date of birth; if you sign in with Apple or Google, that account's identifier and email
- Profile: photo, bio, interests
- What you share: photos, videos, captions, comments, likes, follows
- Your messages in group chats
- Events you create or join, and your check-ins
- Your health data (only with your separate explicit consent): weight, height, body measurements, nutrition and workout logs; sex and age for calorie calculation
- Your step count from Apple Health (only if you allow it on the iPhone permission screen), to calculate Aura points
- Your reports and the support emails you send us
Created automatically while you use the app:
- Session details, IP address, device model, operating system and app version
- Your device's notification token, so we can send you notifications
- Error logs
- If you allow it, your device's location, to show nearby events. You can turn this off at any time in iPhone Settings.
Sign in with Google
If you sign in with Google, we receive only your Google account identifier, your name and your email address. We use them only to create your Avlu account and sign you in. We don't sell data received from Google, don't use it for advertising, and don't share it with anyone except as described in this policy. We don't access any other data in your Google account (Gmail, Drive, contacts, etc.).
What we use it for
- Running your account and showing your profile, posts, messages and events
- Calculating your Aura points, streaks and level
- If you consented, calculating calories and progress
- Reviewing reports, removing content that breaks the rules, and preventing fake accounts and abuse
- Sending you notifications about your account
- Answering support requests and meeting legal obligations
What we don't do: We don't sell your data. We don't show ads or share your data with ad networks. We don't track you across other apps and websites. We don't use your health data or data from Apple Health for marketing or share it with anyone.
Who can see it
- Other users: Your profile, posts, comments and the events you join are visible according to your account setting (public or private). Members of a group chat see your messages in that group. Other users can't see your health data.
- Us: Reported content and messages may be viewed by the Avlu team for review.
- Our service providers: Supabase (database, sign-in, file storage), Apple (distribution, Sign in with Apple, notifications), Google (Sign in with Google, support email) and the other infrastructure providers we use to run Avlu process your data only on our behalf and only for the purposes in this policy. We require them to protect your data at least as well as this policy describes.
- Authorities: Only when required by law, and only as far as the law allows.
Our servers are located outside Türkiye.
About photos
Photos you upload are stored at addresses that anyone holding the link can open. A private account and blocking keep a photo from being listed in the app; they don't stop someone who already has the link. When you delete a photo or your account, the file is deleted from our servers and the link stops working.
How long we keep it
- For as long as your account is open.
- When you delete your account, it is kept in a recoverable state for 30 days; signing in during that time restores it. After 30 days your profile, posts, comments, messages, photos and videos, and health data are permanently deleted.
- Copies in backups are deleted automatically within the backup cycle.
- Records we are legally required to keep are kept for the period set by law.
Your controls
- Delete your account: In the app, from the settings. No email needed.
- Withdraw consent: You can withdraw your health data consent at any time in the app settings; your health data is then deleted. You can turn off notification, location and Apple Health permissions in iPhone Settings.
- Visibility: You can make your account private and block anyone.
- Access, correction, deletion and your other rights under KVKK: Write to avluapp@gmail.com from your registered email address; we reply within 30 days at the latest.
Age limit
Avlu is for people aged 18 and over. If we learn an account belongs to someone under 18, we close it and delete its data.
Changes
If we change this policy, we publish the current version on this page and announce important changes in the app.