Draft — pending legal review. This text has not yet been approved by a lawyer. The Turkish version prevails.

KVKK Information Notice

Last updated: 28 September 2026

Under art. 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), we inform you about the personal data processed when you use the Meetci app and www.meetci.app. More detail is in the Privacy Policy.

1. Data controller

[COMPANY NAME]
Address: [ADDRESS]
MERSIS no.: [MERSIS]
Email: support@meetci.app

2. Categories of personal data

Identity and contact: name, email, profile photo, Apple/Google account ID
Transaction security: IP address, session and sign-in code records (hashed), audit logs
Meeting content: audio recording, transcript, speaker information, summary, report, decisions
Contacts and tasks: name, email, phone and department of people added to contacts; tasks, comments, attachments, invitations
Customer transactions: plan, trial and subscription details, campaign code use, minutes used
Device: push token, platform, app version
Special category (biometric) data: a voiceprint, only if you turn on voice recognition and explicit consent exists

3. Purposes of processing

Running membership and account processes, authentication
Transcribing meeting recordings and producing summaries, reports and task suggestions
Distributing tasks and sending invitations, reminders and notifications
Share links and PDF/Word export
Managing the trial, quota, subscriptions and campaign codes
Information security, preventing abuse and fraud
Measuring service quality and cost, fixing bugs
Answering requests and complaints, informing competent authorities
With your explicit consent: matching speakers to people in your contacts through voice recognition

4. Transfer of personal data

Your personal data may be transferred, for the purposes above and only as far as necessary, to:

Service providers (abroad): OpenAI, L.L.C. (USA) for transcription and analysis; RevenueCat, Inc. (USA) for subscription management (pseudonymous user ID and purchase data only); 650 Industries, Inc. / Expo (USA), Google (Firebase Cloud Messaging) and Apple for push notifications; Resend, Inc. (USA) for email; Google and Apple for sign-in and store payments.
Hosting: [HOSTING PROVIDER] ([COUNTRY]).
People you choose: people you assign tasks to and give share links to, within the scope you choose.
Competent authorities: public authorities and courts authorised by law, on request and as the law requires.

Transfers abroad are made under the standard contracts announced by the Personal Data Protection Board under KVKK art. 9. Voiceprints are never transferred abroad or to any third party.

5. Collection method and legal bases

Your personal data is collected electronically, by automated or partly automated means, through the mobile app, the website, email and store/payment infrastructure. Legal bases:

Processing is directly related to the conclusion or performance of a contract (KVKK art. 5/2-c): account, recording processing, reports, tasks, notifications, subscriptions
Compliance with a legal obligation of the controller (art. 5/2-ç): tax and commercial records, official requests
Establishment, exercise or protection of a right (art. 5/2-e): audit logs, disputes
Legitimate interest, provided your fundamental rights and freedoms are not harmed (art. 5/2-f): security, abuse prevention, service statistics
Explicit consent (art. 6): voiceprints (biometric data)

6. Information about voice recognition

To automatically match the speakers in your recordings to people in your contacts, Meetci creates a voiceprint (a mathematical summary of a voice) from the voice of people who have given explicit consent. Under KVKK art. 6 a voiceprint is biometric data and is processed only on the basis of explicit consent.

Purpose: Only speaker–person matching in your own meetings. It is not used for any other purpose and not shared with other users.
Where it is processed: Voiceprints are created and stored encrypted on Meetci's own servers; they are never sent to any third party, including AI providers. Raw audio is not kept for voiceprints.
Retention: Voiceprints not used for 12 months are deleted automatically, and immediately when you withdraw consent or delete the person.
Your rights (KVKK art. 11): You can learn whether a voiceprint of you exists, request its deletion and withdraw consent at any time (Profil › Sesim hakkında / About my voice).
Consent on behalf of others: When you turn on voice recognition for a person, you declare that you have given them this notice and obtained their explicit consent.

7. Your rights (KVKK art. 11)

By applying to the controller, you have the right to:

learn whether your personal data is processed,
request information if it has been processed,
learn the purpose of processing and whether it is used in line with that purpose,
know the third parties in Türkiye or abroad to whom it is transferred,
request rectification if it is incomplete or inaccurate,
request erasure or destruction under the conditions of KVKK art. 7,
request that actions under (5) and (6) be notified to third parties to whom the data was transferred,
object to a result against you arising from analysis exclusively by automated systems,
claim compensation if you suffer damage due to unlawful processing.

8. How to apply

In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, send your request from the email address registered with us to support@meetci.app, or by signed letter to [ADDRESS]. Include your name, contact details and the subject of your request. Requests are concluded free of charge within 30 days at the latest; if the request involves additional cost, the fee in the Board's tariff may be charged.

In the app you can instantly get a copy of your data with Profil › "Verilerimi indir" (Download my data) and delete your account with Profil › "Hesabımı ve verilerimi sil" (details).