Privacy Policy and KVKK Information Notice

Effective date: May 22, 2026
Last updated: June 5, 2026
Data Controller / Service Provider: Köksal Fındık / PatiBase
Contact: info@patibase.app
Web: www.patibase.app

This Privacy Policy and KVKK (Turkish Personal Data Protection Law) Information Notice explains how your personal data is collected, processed, stored, and transferred, and what rights you have, within the scope of the PatiBase mobile application, website, and digital services provided by PatiBase.

PatiBase is a pet platform developed for pet owners, people rehoming animals, volunteers, and pet service providers. Through the app you can create a pet profile, use a QR/NFC-enabled digital pet profile, create lost or found pet listings, publish adoption listings, keep health records and reminders, and view veterinary clinics and pet shops on a map.

At PatiBase, we care about the privacy of your personal data. Your personal data is processed in accordance with applicable legislation, in particular the Personal Data Protection Law No. 6698 (KVKK).

This text is not a consent form. It has been prepared to inform you about the processing of your personal data. In cases requiring explicit consent, your permission may be requested separately.

1. Data Controller

Your personal data is processed by Köksal Fındık / PatiBase in the capacity of data controller.

Once incorporation is completed, this section will be updated with PatiBase's official company name, address, MERSİS number, tax information, and registered e-mail (KEP) address if available.

Contact: info@patibase.app
Web: www.patibase.app

2. Personal Data Collected

The following personal data may be processed while you use PatiBase:

2.1. Account Information

• First and last name
• Username
• Email address
• Phone number
• Profile photo
• Account creation date
• Account preferences
• Language and notification preferences

2.2. Pet Profile Information

• Pet's name
• Species
• Breed
• Gender
• Date of birth or age
• Weight
• Photos and videos
• Microchip information, if entered by the user
• Neutering, vaccination, or general care information
• Lost status and profile visibility preferences

Pet information may not be human personal data on its own. However, when processed together with the user account, contact details, location, or listing information, it may become attributable to the user.

2.3. Health Record and Reminder Information

• Vaccination records
• Medication records
• Veterinary visit notes
• Operation and treatment history
• Care, food, parasite treatment, and similar reminders
• Documents, photos, or notes uploaded by the user
• Reminder dates and notification preferences

This information relates to your pet and is not used by PatiBase to provide veterinary services. It is processed for record keeping, tracking, and reminder purposes.

2.4. Listing and Content Information

• Adoption listings
• Lost or found pet listings
• Listing descriptions
• Photos and videos
• City, district, and location information
• Reward information, if entered by the user
• Listing status, view, and interaction information
• Comments, messages, and report contents

2.5. QR/NFC Digital Profile Information

• Pet information linked to the QR or NFC profile
• Contact information the user has chosen to make visible
• Information displayed in case of a lost pet
• QR/NFC profile access records, if kept technically
• Profile sharing and visibility preferences

2.6. Location Information

• Approximate or precise location, depending on the permissions you grant
• Lost/found listing location
• Map search location
• Location data used to show nearby veterinarians and pet shops
• City, district, or address information entered manually by the user

Location data is processed only to provide the relevant features, display lost/found listings, operate map services, and improve the user experience.

2.7. Messaging and Communication Data

• Contents of messages between users
• Message date and time
• Messaging parties
• Reported messages
• Records required for security and abuse review

2.8. Device, Usage, and Technical Data

• IP address
• Device model
• Operating system
• App version
• Device identifiers
• Session information
• Push notification token
• Error and crash logs
• App usage data
• Page view and interaction data
• Log records

2.9. Transaction and Payment Information

If PatiBase offers paid services, QR/NFC products, subscriptions, or similar transactions in the future, the following data may be processed:

• Order information
• Invoice and delivery information
• Purchase history
• Payment status
• Transaction references from the payment provider

PatiBase does not directly store payment card details. Payment transactions may be carried out through third-party payment infrastructures.

2.10. Support and Request Information

• Your support requests
• Email correspondence
• Complaints and feedback
• Account deletion or data requests
• Your in-app notifications

3. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

• Creating and managing the user account
• Providing PatiBase services
• Creating and managing pet profiles
• Operating the QR/NFC digital profile feature
• Creating and displaying lost and found pet listings
• Publishing and managing adoption listings
• Providing the health record and reminder features
• Operating the veterinary and pet shop map
• Providing communication and messaging features between users
• Sending notifications
• Providing user support
• Running complaint, security, and moderation processes
• Preventing fraud, misuse, spam, and fake listings
• Measuring and improving app performance
• Analyzing error, crash, and security records
• Fulfilling legal obligations
• Responding to requests from competent authorities and institutions
• Improving the user experience
• Sending campaign, announcement, and marketing communications where you have given explicit consent

4. Legal Grounds for Processing Personal Data

Your personal data may be processed based on the processing conditions set out in the KVKK. The main legal grounds are:

• Processing being necessary for the establishment or performance of a contract
• The data controller fulfilling its legal obligations
• Processing being mandatory for the establishment, exercise, or protection of a right
• Processing being necessary for PatiBase's legitimate interests, provided it does not harm the fundamental rights and freedoms of the data subject
• Processing of data made public by the data subject themselves
• Being expressly provided for by law
• Explicit consent having been given where explicit consent is required

For example:

• Your account information is processed to create your PatiBase account and provide the service.
• Your location information is processed to provide the map and lost/found listing features.
• Your health record and reminder data is processed to provide the record keeping and reminder features in the app.
• Complaint and security records are processed to prevent misuse and ensure platform security.
• Marketing and campaign communications are sent only when the necessary permission or explicit consent processes have been completed.

5. Methods of Collecting Personal Data

Your personal data may be collected electronically through the following methods:

• Information entered directly by the user through the mobile app
• Information submitted through the website
• Account creation and sign-in operations
• Creating pet profiles, listings, messages, and health records
• Use of the QR/NFC profile
• Location data obtained from the device where location permission is granted
• Support and contact forms
• Email correspondence
• Automatic technical records relating to app usage
• Analytics, error tracking, notification, map, and infrastructure services
• Third-party technical service providers

6. Transfer of Personal Data

Your personal data may be shared with the following persons and organizations in line with the purposes and legal grounds stated above:

• Hosting, database, and cloud infrastructure providers
• Notification, analytics, error tracking, and performance monitoring providers
• Map and location service providers
• Payment service providers, if paid services are offered
• Email, SMS, or communication infrastructure providers
• App stores and operating system providers
• Legal, financial, and technical advisors
• Competent public institutions and organizations
• Courts, enforcement offices, and other competent authorities
• Other users, where the user explicitly chooses to share

For example, when you create a lost listing, the information you choose to share in your listing may be shown to other users. Contact information you choose to make visible on your QR/NFC profile may be viewed by people who scan the QR code or NFC tag.

7. Third-Party Services Used

PatiBase may use certain third-party services to provide its services. These services may change over time.

Services used or that may be used include:

• Supabase: Authentication, database, storage, and infrastructure services
• Firebase / Google Analytics for Firebase: Analytics, performance, and usage measurement
• Expo: Notifications and app infrastructure
• Mapbox or similar map providers: Map and location features
• Bunny or similar media/CDN providers: Photo/video hosting and delivery
• Email or SMS service providers: Notification and verification processes
• App stores: App Store and Google Play distribution infrastructure
• Payment infrastructure providers: When paid services are introduced

These third-party services may have their own privacy policies and terms of use. PatiBase uses these services to the extent necessary to provide the service.

8. International Data Transfers

Some of the infrastructure, analytics, notification, map, media storage, or error tracking services used by PatiBase may be located abroad or provide services through servers located abroad.

For this reason, your personal data may be transferred to service providers abroad to the extent necessary for the provision of the service and the operation of the technical infrastructure.

International transfer processes are carried out in accordance with applicable personal data protection legislation. Where explicit consent or another legal mechanism is required, the necessary processes are conducted separately.

9. Location Data

PatiBase may process location data for the map, showing nearby veterinarians and pet shops, creating lost/found listings, and providing related features.

Location data may be processed as approximate or precise location, depending on your device's permission settings.

You can turn off location permission at any time from your device settings. If you turn off location permission, the map, nearby businesses, and location-based listing features may work in a limited way.

10. QR/NFC Profile and Lost Listing Information

The QR/NFC profile feature is designed to make it easier to reach you if your pet goes missing.

You decide which information appears on your QR/NFC profile. If you make your phone number, name, location, or similar information visible, it may be viewed by people who scan the QR code or NFC tag.

When you create a lost or found listing, the information you choose to share in the listing may be viewed by other users.

You must not share phone numbers, addresses, photos, or personal information belonging to third parties without permission, other than your own contact information.

11. Pet Health Record and Reminder Data

The PatiBase health record and reminder features are provided to help you keep care records for your pet.

This information may include vaccinations, medication, veterinary visits, operations, care, and similar records.

PatiBase does not provide veterinary services. Health record and reminder data does not replace a veterinary examination, diagnosis, or treatment.

If documents or photos you upload to this area contain personal data belonging to you or third parties, you are responsible for sharing that data.

12. Adoption and Listing Data

When you create an adoption listing, the information you share in the listing may be viewed by other users.

Pet information, photos/videos, city/district, descriptions, health and care information, contact preferences, and listing status shared in listings are processed by PatiBase.

Animal sales, deposits, commercial listings, or sharing misleading information are prohibited. Suspicious listings may be reviewed, removed, or restricted for security and moderation purposes.

13. Messaging, Complaints, and Moderation

PatiBase may allow users to communicate with each other in the context of adoption, lost listings, or other features.

Messaging data may be processed to enable communication, evaluate complaints, prevent misuse, ensure security, and fulfill legal obligations.

Reported content may be reviewed by PatiBase. Where deemed necessary, the relevant content may be removed, its visibility limited, or action taken regarding the account.

14. Artificial Intelligence and Automated Systems

PatiBase may use AI-powered systems or automated analysis tools in some of its features.

These systems may be used for user support, content safety, detection of inappropriate content, recommendations, search, classification, or experience improvement.

AI-powered outputs carry no guarantee of absolute accuracy. Decisions should not be made based solely on automated outputs, especially on matters that may have health, safety, adoption, or legal consequences.

15. Notifications

PatiBase may send push notifications or in-app notifications about reminders, lost listings, adoption messages, security notices, system announcements, and similar topics.

You can manage your notification preferences from your device settings or within the app.

The necessary permission or explicit consent processes for marketing or campaign notifications are conducted separately.

16. Children's Privacy

PatiBase is not an app intended for children. To use PatiBase, you must meet the age and representation requirements under the applicable legislation.

If you believe that personal data belonging to children has been processed without permission, you can contact us at info@patibase.app.

17. Data Retention Period

Your personal data is stored for the period necessary for the processing purposes.

The following criteria are taken into account when determining retention periods:

• Whether your user account is active
• Whether the data is necessary for providing the relevant service
• Legal obligations
• Statute of limitations periods
• Security, complaint, and dispute processes
• Technical backup and log retention requirements

If you delete your account, your personal data may be deleted, anonymized, or stored in a limited manner for legal retention periods, in accordance with legislation, security, and technical requirements.

18. Security of Personal Data

PatiBase aims to take reasonable technical and administrative measures to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure.

In this context, methods such as access controls, authentication, authorization, secure data storage, logging, backups, and security monitoring may be used.

However, no data transmission over the internet or digital storage method is entirely risk-free. Therefore, protecting your account credentials and ensuring your device security is also your responsibility.

19. Information Made Public by the User

Listings, profiles, photos, descriptions, location, or contact information you share publicly or accessibly to other users on PatiBase may be viewed by others in line with your sharing preferences.

You should choose carefully which information you make visible, especially on QR/NFC profiles, lost listings, and adoption listings.

20. Account and Data Deletion

To delete your account or make a request regarding your personal data, you can use the account deletion area in the app or contact us at info@patibase.app.

After account deletion:

• Your account may be closed.
• Your profile information may be deleted or anonymized.
• Your published listings may be removed.
• Messaging, log, complaint, and security records may be stored for certain periods within the scope of legislation and legitimate interests.
• Records required by legal obligations may be stored for the relevant period.

21. Your Rights Under the KVKK

Under Article 11 of the KVKK, you have the right to apply to the data controller regarding your personal data. In this context, you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether the data is used in accordance with that purpose; to know the third parties to whom it is transferred; to request correction if it is incomplete or incorrectly processed; to request deletion or destruction; to request that certain operations be notified to third parties to whom the data has been transferred; to object to a result arising against you through automated systems; and to request compensation if you suffer damage due to unlawful processing.

To exercise these rights, you can contact us at the following address:

Email: info@patibase.app

Reasonable information may be requested in your application to verify your identity. Your requests are evaluated as soon as possible and within the legal time limits, depending on their nature.

22. Cases Requiring Explicit Consent

Your explicit consent may be requested separately for certain data processing activities.

Examples include:

• Sending marketing, campaign, and commercial electronic messages
• Making the contact information you select visible on your QR/NFC profile
• Displaying the contact and location information you select in a lost listing
• International data transfers where required
• Data processing activities that may be of a sensitive nature, where required

You can withdraw your explicit consent at any time. Withdrawing your explicit consent does not affect the lawfulness of data processing activities carried out before the date of withdrawal.

23. Cookies, SDKs, and Similar Technologies

The PatiBase website and mobile app may use cookies, SDKs, device identifiers, analytics tools, and similar technologies.

These technologies may be used for:

• Session management
• Security
• App performance
• Error analysis
• Improving the user experience
• Operating map and notification features
• Analytics measurement

Separate permission mechanisms may be provided where necessary for non-essential analytics or marketing technologies.

24. Changes to This Notice

PatiBase may update this Privacy Policy and KVKK Information Notice from time to time.

The updated text is published on this page. Significant changes may be communicated to users in the app, on the website, or by email.

We recommend that you check the current version of this text regularly.

25. Contact

You can contact us with questions about privacy, the KVKK, account deletion, data requests, or this notice:

Email: info@patibase.app
Web: www.patibase.app
Data Controller / Service Provider: Köksal Fındık / PatiBase

After incorporation, this section will be updated with the company name, address, tax information, MERSİS number, and registered e-mail (KEP) address if available.