Muhabbo

Privacy Policy and KVKK Notice

Last updated: 14 November 2026

This policy explains how your personal data is processed when you use the Muhabbo mobile app. It is also the information notice required by Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"). If the English and Turkish versions differ, the Turkish version prevails.

1. Data controller

The data controller is Muhabbo. For any privacy question, contact us at destek@muhabbo.app.

2. Who can use Muhabbo

Muhabbo is only for people aged 18 and over. We ask for your date of birth when you sign up and people under 18 cannot create an account. Accounts found to belong to someone under 18 are closed and their data is deleted. If you think someone under 18 has an account, report them in the app or write to us.

3. What we process and why

The table lists data categories, purposes and legal bases under KVKK Article 5: (c) forming and performing a contract, (ç) complying with a legal obligation, (e) establishing, exercising or defending a right, (f) legitimate interest, (1) explicit consent.

DataPurposeLegal basis
Account and sign-in
With Sign in with Apple, the user identifier and email Apple shares (this may be Apple's private relay address); with email code sign-in, your email address; with Google sign-in, when offered, your Google account identifier and email. If you start as an "unregistered member" with only a nickname, no email is collected and the account is tied to the session on your device.
Creating your account, signing you in, protecting your account.5/2-c
Profile
Nickname, date of birth, gender (female, male or prefer not to say), optional city, bio, interests, chosen avatar, optional profile photo.
Building your profile and showing it to other members, checking that you are 18+. Your date of birth is never shown; other members only see your age. A profile photo you upload becomes visible after our team approves it.5/2-c, 5/2-f
Your voice recordings
Voice intro, voice answers to profile questions, voice answers to the question of the day, voice messages in chats.
Letting the people or members you choose listen to them.5/2-c
Messages and posts
Text messages, photos and videos and reactions in one-to-one chats; stories; what you write in room chat.
Providing messaging, stories and room chat.5/2-c
Live rooms and calls
Audio and video are transmitted in real time. Connection records: which room or call you joined, when and for how long.
Running rooms and calls, enforcing time limits, preventing abuse.5/2-c, 5/2-f
Approximate location (optional)
If you grant permission, your device's approximate location. It is rounded to about 1 km before it is stored; your precise location is never stored.
Showing how many kilometres away people are in Discover. Other members never see your coordinates, only the distance in km. The app uses location only while it is open.5/2-c (you turn the feature on and can turn it off at any time)
Profile verification (optional)
Three photos you take for verification (face, turned to the side, smiling).
Letting our team check by eye that the profile is really you and adding a verified mark. The photos are only visible to the team.5/1 explicit consent (given when you apply)
Interactions
Follows, friendships, likes, gifts sent and received, profile visits, voice listens, people you block, level and badges.
Providing app features and keeping people you block away from you.5/2-c
Purchases
When you buy a subscription or coins: transaction ID, product, date, subscription expiry and renewal status; your coin balance and spending. Your card details never reach us; Apple takes the payment.
Adding what you bought to your account, handling refunds and disputes, financial record keeping. If you request a refund, we tell Apple whether the item was delivered and how it was used in the app (e.g. account age, time spent, coins spent) so the request can be assessed.5/2-c, 5/2-ç
Device and access logs
Each time the app opens, and at sign-up, nickname change and account deletion: time, an app-specific install ID, the device identifier Apple gives the app (IDFV), device model, OS and app version, IP address, the nickname and gender at that moment.
Account security, preventing fake and repeat accounts, obligations under Turkish Law No. 5651, requests from competent authorities.5/2-ç, 5/2-e, 5/2-f
Push token
Your device's notification token if you allow notifications.
Sending message, room and account notifications.5/2-c
Error logs
When the app crashes or hits an error: error details, device and version info, recently opened screens, your short user number. Email, nickname, message content and screenshots are not sent.
Finding and fixing bugs.5/2-f
Support and reports
Your support requests and conversations, reports you send and reports about you, decisions taken.
Solving your issue, reviewing reports, enforcing community rules, handling appeals.5/2-c, 5/2-e, 5/2-f

Muhabbo does not use ad networks, does not track you across other apps and websites and does not sell your personal data.

4. Live rooms and calls are not recorded

What is said in rooms and in voice or video calls is transmitted in real time and is not recorded or stored by Muhabbo. The only thing kept is connection time (who, which room or call, when, how many minutes). Our community rules also forbid recording other people's voice or video without consent.

5. Safety system and automated processing

We use a safety system to protect the community. It:

Decisions to restrict, suspend or close an account are taken by people. While reviewing a report, the team may see the reported content and, where necessary, the related conversation. This processing runs on Muhabbo's own servers. To appeal a decision, write to destek@muhabbo.app or use Muhabbo Support in the app.

6. What other members see

Other members can see your nickname, age, gender, city and bio if you added them, interests, avatar or approved photo, voice intro and answers, level and badges. If you share location, only an approximate distance is shown. Everyone in a room hears what you say there at that moment. You can change some visibility settings (for example online status, counting the voices you listen to, profile stats) in settings.

7. Who we share data with

We share data only with service providers we need to run the service, and only as much as needed. They process data on our behalf and on our instructions.

ProviderPurposeLocation
Cloud infrastructure providerDatabase, sign-in, file storage, server functionsEuropean Union
Real-time communication providerReal-time audio and video in rooms and calls (no recording)European servers
AppleSign in with Apple, App Store payments, delivering notificationsUSA
Purchase verification serviceVerifying subscription and coin purchasesUSA
Notification delivery serviceRelaying notifications to Apple (notification text may include your nickname)USA
Error logging serviceError and crash logsGermany (EU)
Email delivery serviceSending sign-in code emailsUSA
GoogleGoogle sign-in (when offered)USA

Apart from these, we may share data with competent public authorities and courts where the law requires it.

8. International transfers

The providers above operate servers outside Türkiye, so your personal data is transferred abroad in line with KVKK Article 9. We rely on the appropriate safeguards provided by the law (standard contracts announced by the Personal Data Protection Board) and, where that is not possible, on one of the exceptions in Article 9. Providers protect data with encryption in transit and at rest.

9. How long we keep data

We keep data only as long as needed. These periods are enforced by automatic clean-up jobs on our servers.

DataPeriod
Stories (including photos)24 hours
Photos and videos sent in chats7 days; view-once items shortly after they are opened
Voice message files30 days
Room chat messages7 days
One-to-one text messagesUntil the sender deletes them or the account is deleted
Voice intro and voice answersUntil you delete them; automatically after 180 days without renewal
Question of the day answers24 hours after the question's day
Profile verification photosRight after review, at most 24 hours
Approximate locationImmediately when you turn it off; automatically after 30 days without renewal
Profile visits and voice listens90 days
Room and call connection times90 days
Room moderation logs (mutes, removals and similar)180 days
Media copy set aside to review a reportNever longer than the original file, at most 30 days
Error logsAt most 90 days
Device and access logs2 years (kept even after account deletion, due to legal obligations)
Identity trace of a deleted account (a one-way digest of the email, Apple or Google identity)4 days; a new account cannot be opened with the same identity during this time
Purchase recordsAs long as the law requires
Report and support recordsAs long as needed for review, appeals and possible legal proceedings
Account, profile and other contentUntil you delete your account

10. Deleting your account

You can delete your account in the app at any time: Profile > gear icon (Settings) > Delete account. This permanently deletes your profile, photos, stories, voice intro and answers, chat media you sent, your messages, follows and friendships, and your sign-in record. Your coins and time-limited items are deleted too.

After deletion only these remain: device and access logs (2 years), the identity trace (4 days) and purchase records we must keep by law.

Deleting your account does not cancel your Apple subscription. Cancel it on your iPhone under Settings > your name > Subscriptions.

If you joined as an unregistered member with only a nickname, your account is tied to the session on your device; if you delete the app you may not be able to get back in. To protect your account, add an email under Settings > Protect your account.

11. Security

Data travels between your device and our servers over encrypted connections. Photo and audio files are not public; they are opened only to authorised people through short-lived links. Every table has row-level access rules; for example, a message can only be read by the two people in the chat. Your session is stored in the iOS Keychain on your device.

12. Your rights under KVKK

Under KVKK Article 11 you have the right to:

How to apply

Send your request to destek@muhabbo.app, preferably from the email address registered to your account. Include your name, contact details, your nickname or user number in the app, and your request. We may ask for extra information to confirm your identity. We will answer within 30 days free of charge; if the request involves an additional cost, the tariff set by the Board may apply. If you are not satisfied with our answer you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

You can also manage some of your data in the app: edit your profile, delete your voice intro and messages, turn off location sharing, delete your account. To correct your gender, write to Muhabbo Support.

13. Changes

We may update this policy from time to time. We will let you know in the app about important changes. The current version is always available at this address.

14. Contact

Muhabbo · destek@muhabbo.app