KobimPrivacy Notice
This notice is a draft and will be finalised after legal review. Highlighted fields are still to be filled in. The Turkish version prevails.
This notice explains how Kobim, the mobile app for business owners, their staff and their accountants ("Kobim"), processes personal data under Türkiye's Personal Data Protection Law No. 6698 ("KVKK").
Data controller
KLC Mobil A.Ş., address, MERSIS no: MERSIS number. Contact: kvkk@kobim.app
Personal data we process
| Category | Data |
|---|---|
| Identity | Name, surname, date of birth. Your national ID number is not stored in readable form; only an irreversible digest (HMAC) is kept. |
| Contact | Mobile phone number |
| Business | Business name, address, phone, tax office, line of business; tax number (encrypted, shown masked); tax registration certificate |
| Documents | Receipts, invoices, bank slips and similar documents uploaded by the business |
| Device and security | Device model, iOS and app version, the public part of the device's security key, notification token, sign-in and security logs |
| Consents | Acceptance of this notice and the privacy policy, marketing consent and its date |
During identity verification
- When your chip ID card is read over NFC, only your identity details and their signature data are read from the chip. Your photo is not read.
- With "View ID card", the card image is read only on your phone; it is not saved or sent to our servers.
- No biometric data (photo, face, fingerprint) is processed.
Purposes and legal grounds
- Creating your account, signing you in and providing the service: performance of a contract (KVKK art. 5/2-c)
- Tying the account to your registered device, preventing unauthorised access, keeping security logs: legitimate interest (art. 5/2-f) and the data security obligation (art. 12)
- Sending documents to the business's accountant: performance of a contract (art. 5/2-c)
- Legal retention and reporting duties: legal obligation (art. 5/2-ç)
- Sending offers and updates: only with your explicit consent and marketing permission (art. 5/1). This is optional and not needed to use the app.
Who we share data with
- Your accountant: your business details and the documents you upload are shared with the accountant working with your business.
- Infrastructure: data is stored on Google Cloud / Firebase in the European Union (Belgium). This is a transfer abroad under KVKK art. 9, made under standard contract / notification details.
- SMS and notifications: verification codes are sent through an SMS provider, notifications through Apple Push Notification service.
- Authorities: where required by law.
We do not sell your personal data or share it with third parties for advertising.
Retention
Data is kept while your account is open. When you delete your account, your personal data is deleted, and so are the business records if you are the business's only user. Records the law requires us to keep are kept for that period. Security audit logs are kept without personal data. Verification codes and sign-in attempts are deleted automatically after a short time.
Your rights
Under KVKK art. 11 you can ask whether your data is processed, request information about it, learn its purpose and recipients, ask for it to be corrected, deleted or destroyed, object to processing, and claim compensation for damage.
Send requests to kvkk@kobim.app. We reply within 30 days at the latest.
To delete your account, go to Settings, My Account, Delete Account in the app.
This website
kobim.app uses no cookies, visitor tracking or advertising tools. The site is hosted on Google Firebase Hosting, which may keep technical connection logs for security.