Personal Data Protection Notice

This Personal Data Protection Notice has been prepared to inform you about the processing of your personal data when you use the Youna website, mobile application, and related services, pursuant to Turkish Personal Data Protection Law No. 6698 (“KVKK”).

1. Data Controller

Your personal data is processed within the scope of the KVKK.

2. Personal Data We Process

When you use Youna, the following categories of personal data may be processed:

Identity and Account Information

  • First and last name

  • User ID

  • Profile information

  • Account creation information

Contact Information

  • Email address

  • Other contact information provided by the user, if applicable

User and Activity Information

  • Habits you create

  • Personal goals

  • Routines

  • Completed or postponed activities

  • Reminders

  • Progress and usage history

  • App preferences

Journal and Mood Information

If you use Youna’s journaling and mood-tracking features, the following information may be processed:

  • Mood selections

  • Journal entries

  • Personal notes

  • Other content voluntarily created by the user

Users may choose to enter health-related information or other sensitive personal data in journal entries or free-text fields. Providing such information is entirely optional, and such data is processed only to the extent necessary to provide the relevant feature.

Transaction Security and Technical Information

  • IP address

  • Device information

  • Operating system

  • App version

  • Session logs

  • Error and performance logs

  • Security logs

Usage Information

  • In-app interactions

  • Features used

  • Session and usage information

  • Preferences

  • Analytics data

3. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

  • Creating and managing your Youna account

  • Authentication and sign-in processes

  • Providing habit and goal-tracking features

  • Tracking user progress

  • Providing journaling and mood-tracking features

  • Personalizing the user experience

  • Saving user preferences

  • Sending reminders and notifications

  • Providing AI-powered features

  • Improving the Services and measuring performance

  • Identifying technical issues and errors

  • Maintaining information and system security

  • Preventing misuse and unauthorized access

  • Managing user requests and support processes

  • Complying with legal obligations

4. Legal Grounds for Processing Personal Data

Your personal data is processed based on the legal grounds specified in Article 5 and, where applicable, Article 6 of the KVKK.

Accordingly, personal data may be processed where:

  • Processing is directly related to the establishment or performance of a contract.

  • Processing is necessary for the data controller to comply with a legal obligation.

  • Processing is necessary for the establishment, exercise, or protection of a right.

  • Processing is necessary for the legitimate interests of the data controller, provided that such processing does not violate the fundamental rights and freedoms of the data subject.

  • Processing is expressly provided for by law.

  • Your explicit consent has been obtained where required.

Where sensitive personal data is processed, the conditions and necessary security measures set out under Article 6 of the KVKK are taken into consideration.

5. Methods of Collecting Personal Data

Your personal data may be collected electronically through fully or partially automated means, including:

  • The Youna mobile application

  • The Youna website

  • Registration and sign-in screens

  • Forms within the application

  • Habit and goal creation features

  • Journaling and mood-tracking features

  • User support channels

  • Cookies and similar technologies

  • Third-party sign-in services authorized by you

6. Transfer of Personal Data

Your personal data may be shared with service providers to the extent necessary to provide Youna’s services and in accordance with the provisions of the KVKK governing the transfer of personal data.

These service providers may include:

  • Cloud and data hosting providers

  • Authentication services

  • Analytics and performance services

  • Error-tracking systems

  • Notification infrastructure providers

  • Email service providers

  • Artificial intelligence service providers

  • Technical infrastructure providers

Your personal data may also be shared with legally authorized public authorities, institutions, or judicial authorities where properly requested in accordance with applicable law.

Personal data is not sold to third parties for commercial purposes.

7. International Data Transfers

The servers used by Youna’s cloud infrastructure, authentication, analytics, artificial intelligence, or other technology service providers may be located outside Türkiye.

As a result, your personal data may be transferred internationally.

International transfers of personal data are carried out in accordance with the requirements set out in Article 9 of the KVKK and applicable data transfer mechanisms.

Where required, your explicit consent may be obtained, or other appropriate transfer mechanisms provided under the KVKK may be used.

8. AI-Powered Features

Youna may use artificial intelligence technologies to provide personalized suggestions, habit and goal assessments, and similar features.

When these features are used, user data necessary for the relevant feature to function may be processed by artificial intelligence systems.

Youna follows the principle of data minimization and aims to process only the data necessary to provide the relevant service.

Content and recommendations generated by artificial intelligence do not constitute medical or psychological diagnosis, treatment, or professional healthcare services.

9. Retention and Deletion of Personal Data

Your personal data is retained for as long as necessary for the purposes for which it is processed and in accordance with applicable statutory retention periods.

When the reasons requiring the processing of your personal data no longer exist, your data is deleted, destroyed, or anonymized in accordance with the KVKK and applicable legislation.

If you delete your account, the necessary steps will be taken to delete or anonymize personal data associated with your account, except for information that must be retained by law.

10. Data Security

Youna takes appropriate technical and administrative measures to:

  • Prevent the unlawful processing of personal data

  • Prevent unauthorized access to personal data

  • Ensure the secure storage of personal data

Access to personal data is limited to the individuals and systems necessary for providing the Services.

11. Your Rights Under the KVKK

As a data subject, you have the following rights under Article 11 of the KVKK:

  • To learn whether your personal data is being processed

  • To request information if your personal data has been processed

  • To learn the purpose of processing your personal data and whether it is being used in accordance with that purpose

  • To know the third parties to whom your personal data has been transferred, whether within Türkiye or abroad

  • To request the correction of incomplete or inaccurate personal data

  • To request the deletion or destruction of your personal data where the conditions specified under the KVKK are met

  • To request that correction, deletion, or destruction of your personal data be communicated to third parties to whom your personal data has been transferred

  • To object to a result arising against you as a result of your personal data being analyzed exclusively through automated systems

  • To claim compensation for damages arising from the unlawful processing of your personal data

12. How to Exercise Your Rights

You may submit requests regarding your rights under the KVKK to Youna via:

  • Your first and last name

  • The subject of your application

  • Your request

  • Information necessary to verify your identity, where required

Applications will be reviewed and concluded as soon as reasonably possible and within the periods specified by applicable legislation, depending on the nature of the request.

13. Changes to This Notice

This Personal Data Protection Notice may be updated due to changes in Youna’s services, the technologies it uses, or applicable legislation.

The latest version of this Notice will be made available through the Youna website and/or mobile application.