Data-protection notice (Turkish KVKK)

1. Data controller

The company that develops Lupy. Name, address, registry number and registered-email address: [DOĞRULA] · Contact: hey@justblastgames.com

2. Which data, for what purpose

• Contact data (your email address, what you write): if you join the waitlist or write to us; to reply to you.
• When you use the app: your project files, memory notes, the access keys of connected accounts and email/calendar content are processed on your Mac and stay there; we do not collect them. [DOĞRULA] Task text sent to the AI provider you chose is that provider's own responsibility (section 4).
• Account and subscription (when they open): the account identifier, information that comes from the login provider (Google, Apple), subscription status and period dates, license information (account identifier, plan, device identifier, expiry) and the identifier, type, name and first/last-seen time of registered devices are kept on the server to keep the subscription going, verify the license. Which information will come from the login provider is not yet verified. [DOĞRULA]
• Problem pack: if the app closes unexpectedly, the pack prepared on your Mac (version, operating system, latest crash records and log lines; passwords, emails and home path hidden) does not reach us by itself; it reaches us only if you send it.
• Phone link (when it opens): the paired device's identifier and public key, the notification address (token), the Mac's identifier and public key and the day of the last connection are kept in a file on your Mac, not on our server. [DOĞRULA]

3. How it is collected and the legal basis

You give your email address by writing and sending it yourself. Account and subscription data you give when you sign up and log in, yourself or through your login provider. The legal basis, and the places that need explicit consent (especially transfer abroad), need a lawyer's opinion. [DOĞRULA]

4. Who receives it

When you give a task to an AI provider (for example Anthropic/Claude, OpenAI/Codex, Google/Gemini), the text of the task goes to that provider. These providers may be abroad; the basis for transfer abroad under KVKK art. 9 (explicit consent or another route) is [DOĞRULA]. If you connect Gmail or your calendar, data is exchanged with Google under the permission you give. When subscriptions open, Stripe for payment, Google and Apple for login, and Firebase (Google) to host the license server are planned; these services being abroad, and the basis under KVKK art. 9, is [DOĞRULA]. Lupy shows you what went where for each task. Beyond that we do not sell your data or share it for advertising. [DOĞRULA]

5. Keeping and deleting

When you press "forget" on a memory note it is deleted for good. When you disconnect an account its access key is deleted. When you delete your Lupy account, your account, subscription and device records on the server are deleted; what stays is an "account deleted" line with no account identifier and a permanent deleted-account mark that holds a one-way digest made with a secret key, not the raw account identifier (to stop a deleted account from adding a device). How long the mark and the pre-deletion subscription event records are kept is not decided yet, and you can delete the account yourself in Settings (the sign-in section stays closed until release day). [DOĞRULA: not tried against a real server] How long emails sent to us are kept: [DOĞRULA]

6. Using your rights (KVKK art. 11)

About your personal data you may ask to: learn whether it is processed; ask for information if it is; learn whether it is used for its purpose; know the recipients it was passed to; have it corrected if incomplete or wrong; have it deleted or destroyed; have these steps notified to the recipients; object if an analysis made only by automated systems goes against you; and ask for compensation if you suffer harm from unlawful processing.

To apply, write to hey@justblastgames.com. The application methods the law sets (written, registered email, secure e-signature and so on) and the reply time will be added with a lawyer's approval. [DOĞRULA]