Turkish data protection notice (KVKK)

Data controller

The data controller is Eren Bahadır (sole proprietorship). Address: Kavaklı Mah. Bağlar Cad. C Blok No:12 İç Kapı No:11 Beylikdüzü/İstanbul, Türkiye. Contact: [email protected].

Personal data we process

• Identity and contact: Apple/Google sign-in identifier, name, e-mail address.
• Profile: gender, height, birth date, activity and training level, training place, equipment, language.
• Health data (special category): weight, neck/waist/hip measurements, estimated body fat, silhouette, nutrition and water logs, meal photos, workout and effort logs, and any injury or health information you choose to share with Flow in chat.
• Security: session tokens, device label, last-seen time.
• Subscription: plan, product, renewal and expiry (no card data is received).
• Flow records: typed or dictated messages and Flow's replies.

Purposes

Creating and managing your account; calculating your goal, calorie and training plan; recognizing meals; providing the Flow assistant; managing your subscription; information security; answering requests; meeting legal obligations.

Legal grounds

General data: performance of a contract (Art. 5/2-c), legal obligation (Art. 5/2-ç) and legitimate interest (Art. 5/2-f). Special-category data such as health data: your explicit consent (Art. 6/2 and Art. 5/1). Transfers abroad: your explicit consent and the safeguards in Art. 9.

How the data is collected

You enter it while using the app, we receive it through Apple/Google sign-in, or it is generated by use (for example, a calculated body-fat value). Collection is fully electronic, through the app.

Recipients

To the extent needed to provide the service, data goes to the recipients below. They are based in the USA, so this is a transfer abroad:

• Anthropic (Claude): meal-photo recognition, Flow chat and program editing.
• Google Cloud (Gemini speech): turning Flow's replies into speech (reply text only).
• RevenueCat: subscription status.
• Apple and Google: sign-in verification and store purchases.
• Public authorities, where the law requires.

We do not sell your data or share it for marketing. See the Privacy Policy for details.

Retention

Data is kept while your account is open. Flow chat messages are deleted automatically after 30 days, Flow action cards after 24 hours and usage counters after 8 days. When you delete your account, your account data and meal photos are deleted right away; records that the law requires us to keep are kept for the required period.

Your rights (KVKK Art. 11)

You can apply to the controller to:

• learn whether your personal data is processed,
• request information if it has been processed,
• learn the purpose of processing and whether it is used accordingly,
• know the third parties it is transferred to in Türkiye or abroad,
• ask for correction if it is incomplete or wrong,
• ask for erasure or destruction under Art. 7, and for this to be notified to the third parties it was transferred to,
• object to a result against you produced by automated analysis,
• claim compensation if you suffer damage from unlawful processing.

Apply to [email protected] (from the e-mail address on your account) or in writing to the address above; we may ask for more information to verify your identity. We conclude applications free of charge within 30 days at most. If you are not satisfied, you may complain to the Personal Data Protection Board. You can also delete your data yourself by deleting your account in the app (Delete your account).

Explicit consent statement

I give my explicit consent to the processing of my health data (weight, body measurements, body fat, nutrition and training records, and any injury or health information I choose to give Flow) for the purposes in this notice, and to its transfer to service providers abroad (USA) such as Anthropic, Google Cloud and RevenueCat to provide the service. I give this consent when I create my account and enter this information. I know I can withdraw it at any time by deleting my account or writing to [email protected], and that withdrawing means I cannot use the features that rely on this data. Processing unrelated to those features is not made conditional on this consent.

Health information is not medical advice

FlowUp does not give medical advice and is not a medical device. If you have a health condition, talk to your doctor before you use the app.

Children

FlowUp is not directed to children under 13. Users under 18 should use the app with a parent or guardian's permission.