Under construction This site and the Mühür service are under construction: some features may be missing or change, and there may be interruptions. Keep your own copy of important memories. Details: Terms of Use

Privacy Notice

Version 2026-10 · Effective: [date]

This notice explains how your personal data is processed when you use the Mühür app, the muhurapp.net pages and the service linked to Mühür tags, as required by article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"). The Turkish version prevails.

1. Data controller

[Name of the data controller]

[Address]

Contact: destek@muhurapp.net

2. Data we process

• Account: your email address, display name and an irreversible hash of your password (the password itself is not stored). If you sign in with Apple or Google, the account ID and email address that service gives us. The version of the terms you accepted.
• Your memories: titles, descriptions and tag names; the photos, voice messages and videos you upload; the people you invite to contribute and the tags you give as gifts.
• Tag scans: when and how (app or browser) a tag was opened. The identity and IP address of the person scanning are not written into this record.
• Usage statistics: anonymous event records to understand how the app and pages work (for example whether a scan succeeded). Who sent them is not kept; if your browser sends "Do Not Track" or "Global Privacy Control", the pages count nothing.
• Reports: the memory you report, the reason and your comment; your account if you are signed in.
• Technical data: your IP address is used only in memory, in per-minute counters that limit abuse, and is not stored. Security records (for example when an account signed in or was deleted) are kept. App error reports, if enabled, contain only the account ID: no IP address, email, content or tag code.

3. Location data

Location and device details in photos and videos are removed from the copies shown to others. The app does not use your location.

4. Purposes and legal grounds

• Opening your account, keeping your memories and showing them to the people you choose: entering into and performing a contract (KVKK art. 5/2-c).
• Security, preventing abuse and unlawful content, reviewing reports: legitimate interest (art. 5/2-f) and legal obligation (art. 5/2-ç).
• Requests of the authorities and legal disputes: legal obligation (art. 5/2-ç) and establishing, exercising or defending a right (art. 5/2-e).
• Improving the Service: anonymous statistics only.

5. Who sees your memory

A "public" memory can be seen by anyone who scans the tag or opens its link. A "private" memory can be seen only by you and the people you invite to contribute.

We do not use your memories for advertising or marketing, and we do not sell them.

6. Service providers and transfers abroad

Your data is processed on the infrastructure of these providers, which run the Service on our behalf:

• Oracle Cloud: server, database and files (Frankfurt, Germany),
• Cloudflare: domain, secure connections and passing traffic on (global network),
• Cloudflare R2: encrypted backups (European Union),
• Apple and Google: only if you sign in with them, to verify the sign-in,
• Expo: delivering app updates.

Some of these providers are abroad; transfers are made under article 9 of the KVKK [legal basis of the transfer — after legal review]. We do not share your data with third parties except when the competent authorities require it by law.

7. How long we keep data

• Account and memories: while your account is open. An item or memory you delete becomes unavailable at once and its files are removed shortly after.
• When you delete your account, it closes at once; its files and records are removed within a few hours. Copies on phones that already played a memory are removed within 30 days.
• Backups: at most 30 days, then deleted automatically.
• Tag scan records: 90 days; after that only the total per tag remains.
• Anonymous usage statistics: 180 days.
• A minimal security record without your personal details, and reports: [retention period].

8. Security

All connections are encrypted (HTTPS). Passwords are stored irreversibly. Links to photos and videos are valid for a short time. Backups are encrypted and kept in a separate place.

9. Your rights

Under article 11 of the KVKK you may learn whether your personal data is processed and request information about it, learn the purpose of the processing and whether it is used accordingly, know the third parties in Türkiye or abroad it is transferred to, ask for it to be corrected if incomplete or wrong and deleted or destroyed where the conditions are met, and for these steps to be passed on to those third parties, object to a result against you that comes solely from automated analysis, and claim compensation if unlawful processing harms you.

Send your request to destek@muhurapp.net; we answer free of charge within 30 days at the latest.

In the app you can download your data and delete your account under Profile; without the app you can delete it at muhurapp.net/account/delete.

10. Children

The Service is not for children under [minimum age]. [Minimum age and parental consent — after legal review]

11. Changes

When we update this notice we publish the new version on this page and announce important changes in the app.