MOSSFİT Privacy Policy
Legal

Privacy Policy

Effective date: May 25, 2026 Version: 1.0 Publisher: Emre ERŞAHİN

Welcome to MOSSFİT. This Privacy Policy explains how your information is collected, used, stored, and protected when you use the MOSSFİT mobile application, available on the Apple App Store and Google Play Store. By using MOSSFİT, you acknowledge that you have read and agree to this policy.

Section 01

Information We Collect

Personal Information

  • Full name
  • Email address
  • Phone number
  • Address details
  • Turkish Identification Number (TC Kimlik No) — only when required for bank transfer verification
  • User profile details

Fitness & Activity Data

  • Workout history and exercise statistics
  • Progress tracking and step counter data
  • Water intake and hydration tracking
  • Nutrition and diet information

NFC & QR Data

The application may use NFC technology and QR code systems for gym access, attendance tracking, membership verification, and workout identification.

Media & Communication Data

  • Photos, videos, and audio/voice recordings uploaded by users
  • In-app messages

Purchase & Store Data

In-app purchases, subscriptions, and membership upgrades are processed through Apple App Store or Google Play Store. MOSSFİT does not directly store complete payment card information.

Device & Technical Information

  • Device model and operating system
  • IP address and application version
  • Device identifiers and advertising identifiers
  • NFC permission and usage data
Section 02

How We Use Your Information

Collected information is used exclusively for the following purposes:

  • Providing fitness and membership services
  • Enabling QR and NFC functionality
  • Tracking workouts and activity
  • Delivering water and diet tracking features
  • Enabling media and communication features
  • Processing subscriptions and purchases
  • Improving application performance
  • Providing customer support
  • Maintaining application security (including SSL encryption)
  • Displaying advertisements within the app
Section 03

Advertising & Analytics

MOSSFİT may display third-party advertisements. Advertising and analytics providers — including Google AdMob and Firebase Analytics — may collect device identifiers, advertising IDs, IP addresses, usage statistics, and interaction data to serve personalized or non-personalized ads and to analyze app performance.

iOS users (14.5+): Personalized advertising requires your permission under Apple's App Tracking Transparency (ATT) framework. You will be prompted separately for this consent. You can manage advertising preferences at any time through your device settings.
Section 04

Sensitive Personal Data

The Turkish Identification Number (TC Kimlik No) is collected only when strictly necessary — specifically during bank transfer (EFT/Havale) transactions for identity verification and legal compliance. This information is protected using reasonable security measures and is never sold to third parties.

Health and fitness data (workout history, nutrition information, etc.) is classified as special category personal data under Turkish PDPL (KVKK). Your explicit consent for processing this data will be obtained upon first launch of the application.

Activity & health-related data: On iOS, step data may be read from Apple HealthKit (with your permission) to power the step counter. On Android, the step counter uses the device motion sensor (ACTIVITY_RECOGNITION); the Android app does not use Google Health Connect. Step counts, estimated distance, and related fitness statistics are sent to our servers only to show your dashboard and sync your account — never for advertising or data mining.

Photos & videos: Profile pictures, receipts, and chat attachments are chosen through the system photo/file picker. The app does not request broad access to your entire photo or video library on Android.
Section 05

Media Uploads & User Content

You are responsible for the content you upload or share through the application, including photos, videos, audio recordings, and messages. MOSSFİT reserves the right to remove content that is unlawful or violates our community standards.

Section 06

Data Sharing

We do not sell your personal information. Information may be shared only in the following circumstances:

  • With service providers necessary for app functionality
  • With payment providers for transaction processing
  • With advertising and analytics partners (see Section 3)
  • When required by law or legal authorities (international transfers to Firebase, Google AdMob, etc. are covered by VERBIS registration)
  • To protect the rights, safety, and integrity of the application
Section 07

Data Security & Retention

We implement technical and organizational security measures — including SSL encryption — to protect your information against unauthorized access, loss, misuse, alteration, and disclosure. However, no digital platform can guarantee absolute security.

Retention Periods

Data Type Retention Period
Active account data Duration of membership
Data after account deletion Up to 3 years (legal obligations)
Transaction records Up to 10 years (applicable regulations)
Section 08

Your Rights

Depending on applicable laws — including the Turkish Personal Data Protection Law (KVKK Article 11) — you have the right to:

  • Learn whether your personal data is being processed
  • Access your personal data and request a copy
  • Request correction of inaccurate or incomplete data
  • Request deletion or destruction of your data
  • Request restriction of processing
  • Be notified when your data has been transferred to third parties
  • Withdraw consent at any time
To exercise any of these rights, submit a written request to iletisim@emreersahin.com.tr. Requests will be responded to within 30 days as required by law.
Section 09

Account & Data Deletion

You may delete your account and associated data at any time:

  • In-app: Settings → Account → Delete Account
  • By email: Send a request to iletisim@emreersahin.com.tr with the subject line "Account Deletion Request"

Upon deletion, your data will be permanently removed except where retention is required by applicable law (see Section 7).

Section 10

Children's Privacy

MOSSFİT is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe a child under 13 has registered, please contact us immediately so we can remove their data.

Section 11

Third-Party Services

The application may use the following third-party services, each governed by their own privacy policies:

  • Apple App Store Services
  • Google Play Services
  • Google AdMob (advertising)
  • Firebase (analytics, notifications, cloud storage)
  • Payment infrastructure providers
Section 12

Contact

For questions about this Privacy Policy or to exercise your rights under KVKK:

Data Controller Emre ERŞAHİN
Section 13

Changes to This Policy

This Privacy Policy may be updated from time to time. Updated versions will be published within the application and on official store pages. For significant changes, users will be notified in-app. We encourage you to review this policy periodically.