Story CircleKVKK Privacy Notice
Information under art. 10 of Turkish Personal Data Protection Law No. 6698 (KVKK)
Last updated:
Service provider / data controller: Code2B
Contact: inside the app, Profile → Settings → Send feedback
This text is for information only; you are not asked to accept it.
This is an English translation provided for convenience. The Turkish text prevails. Türkçe metin
1. Data controller
The data controller for personal data processed through the Story Circle mobile app and website is Code2B ("we"). This notice is not a consent form; it is prepared to inform you how your personal data is processed. None of the processing described here relies on your explicit consent, so you are not asked for it separately.
2. Personal data processed
| Category | Data |
|---|---|
| Identity and account | Username, display name, date of birth, profile photo, bio, preferred language, account role and status, and the account ID provided by Google or Apple when you sign in with them. |
| Contact | Email address and verification status. |
| Content | Chapters and drafts you write, book descriptions, character and world descriptions, comments, community and chat messages, notes, reading lists, your reports and appeals. |
| Usage and interaction | The days and number of times you open the app; the books and chapters you read, your reading progress and times; likes, follows, ratings; records of claiming writing slots, saving drafts, submitting and publishing; when notifications reach you and are opened; your actions in the Service with their time. |
| Device and transaction security | IP address used to sign in, device name and model, operating system, app version, notification token, session and security records, error records. |
| In-app activity | Story Coin (SC) earning and spending records, levels and badges. |
| Moderation | Reports about you, content review results, enforcement measures and appeals. |
| Website visits | Page visited, language, referring site, device type and a daily-changing, one-way hashed visitor key. The raw IP address is not stored. |
3. Purposes and legal bases
| Purpose | Legal basis (KVKK art. 5/2) |
|---|---|
| Opening and managing the account, providing the Service: reading and writing books, writing slots, publishing, notifications, SC | Conclusion and performance of a contract (c) |
| Applying the age limit and age-based content hiding | Performance of a contract (c) and legal obligation (ç) |
| Automatic and human review of submitted content, handling reports and appeals | Legal obligation (ç, Law No. 5651) and legitimate interest (f) |
| Security of the Service; detecting abuse, cheating, bots and multiple accounts; debugging | Legitimate interest (f) |
| Improving the product: analysis of usage and interaction data, statistics, designing and testing new features, performance measurement | Legitimate interest (f) |
| Book and content recommendations, personalisation of the Service | Legitimate interest (f) |
| Developing and training artificial intelligence models (including story and text generation models) | Legitimate interest (f); the data used is separated from identity as described in Section 4 |
| Answering support requests and feedback | Performance of a contract (c) and legitimate interest (f) |
| Legal obligations; requests from competent authorities; protecting rights in legal disputes | Legal obligation (ç) and establishment, exercise or protection of a right (e) |
| Website visit statistics | Legitimate interest (f) |
In processing based on legitimate interest we balance our interest against your fundamental rights and freedoms: data is limited to what is necessary for these purposes, analyses are done with aggregated or pseudonymised data wherever possible, and personal data is not sold or shared with third parties for advertising.
4. Artificial intelligence
- Content review: the text of the chapter you submit is sent, together with the book title, synopsis and content warnings, to an AI service provider (Google Gemini or Anthropic Claude) for review before publication. Your name, email address and account details are not sent.
- Writing assistant: when you use the assistant, the relevant book text and character and rule descriptions are sent to the same providers.
- Model development and training: content on the Service (under the license in Section 7 of the Terms of Use) and usage data may be used to develop and train AI models. For this use the data is separated from information that directly identifies you, such as your name, email and user ID; usage data is aggregated. Content and data of users under 18 are not used for model training.
- Automated decision: content review is performed by an automated system and may result in your chapter not being published. You can appeal this result within the Service; your appeal is reviewed by a human (KVKK art. 11/1-g).
5. How data is collected
Your personal data is collected electronically, by automatic or partly automatic means, through sign-up and profile forms, the actions you take while using the Service, usage, device and security records kept automatically by the app and website, information passed on by Google or Apple when you sign in with them, and messages you send us.
6. Transfers
Your personal data may be transferred to the following recipients, limited to the purposes above:
| Recipient | Purpose | Country |
|---|---|---|
| Google (Gemini AI service) | Content review, writing assistant, model development | USA and other countries |
| Anthropic (Claude AI service) | Content review, writing assistant, model development | USA |
| Google (Firebase Cloud Messaging) | Delivering phone notifications | USA and other countries |
| Apple (Sign in with Apple, push notification service) | Sign in with Apple and iOS notifications | USA |
| Google (Sign in with Google, email delivery) | Sign in with Google; verification and information emails | USA and other countries |
| Sentry (Functional Software, Inc.) | Error records (user ID only; no name, email or content) | USA |
| Competent public authorities and courts | Legal obligations | Türkiye |
| The transferee in a merger or demerger of the Company or a transfer of the Service | Continuation of the Service | Transferee's country |
Transfers abroad are made under KVKK art. 9: for transfers to countries without an adequacy decision, the standard contracts set by the Board are concluded and notified to the Authority. Your personal data is not sold.
7. Retention
Personal data is kept for as long as required by the purpose of processing and by law; when the period ends it is deleted, destroyed or anonymised. The main periods are in the table in the Privacy Policy. When you delete your account, your account data is deleted or anonymised; your published content remains on the Service under the license, shown as "Deleted user". Records subject to a legal retention obligation (e.g. traffic records under Law No. 5651) are kept for the legal period.
8. Your rights (KVKK art. 11)
By applying to us you can:
- Learn whether your personal data is processed and, if so, request information about it.
- Learn the purpose of processing and whether it is used for that purpose.
- Know the third parties in Türkiye or abroad to whom it is transferred.
- Request correction if it is incomplete or inaccurate.
- Request deletion or destruction under the conditions in KVKK art. 7.
- Request that correction, deletion and destruction be notified to the third parties to whom it was transferred.
- Object to a result against you arising from analysis exclusively by automated systems.
- Claim compensation if you suffer damage due to unlawful processing.
You can apply in the app via Profile → Settings → Send feedback, stating that your request is under KVKK. Applications are concluded within 30 days at the latest and, as a rule, free of charge. You can always get a copy of your account data yourself via Settings → Download my data.