Privacy Policy
Effective: 16 October 2026
This policy explains how your personal data is processed when you use the Pack a Match mobile app (the "App"). It serves as the notice required by Article 10 of Turkey's Personal Data Protection Law No. 6698 ("KVKK") and, for users in the European Union, Article 13 of the General Data Protection Regulation ("GDPR").
1. Data controller
2. What we process
| Data | Source | Purpose |
|---|---|---|
| Phone number or Google account email and account ID | You, at sign-in | Creating your account, verifying sign-in, making duplicate accounts harder |
| Name, date of birth (age), gender, the gender(s) you're interested in, age and distance preferences, relationship goal | You, when setting up your profile | Showing your card, finding suitable people, enforcing the 18+ rule |
| Photos, bio, interests, music/film/TV/game tastes and favourites, lifestyle answers, languages you speak | You | Showing your card and calculating compatibility |
| Location (latitude/longitude), city, country, time zone | Your device, with your permission | Finding people near you and showing distance. Other users never see your exact location, only an approximate distance and your city. |
| Packs you open, cards you see, requests sent and received, matches, messages | Your use of the App | Providing the service, applying daily limits, not showing the same person again |
| People you block, reports and report reasons | You, or other users about you | Keeping users safe, investigating abuse |
| Push token, device and app version, last active time, technical logs | Automatically from your device | Sending notifications, keeping the service secure and working |
Your gender together with the gender(s) you're interested in may reveal your sexual orientation, which is a special category of personal data under KVKK Article 6 and GDPR Article 9. We use it only for matching and on the basis of your explicit consent; who you're interested in is not shown on your profile.
There are no ads in the App. We don't sell your data or share it with anyone for advertising.
3. Legal bases
- Performance of a contract (KVKK 5/2-c, GDPR 6(1)(b)): your account, profile, matching, messaging and notifications.
- Legitimate interests (KVKK 5/2-f, GDPR 6(1)(f)): security, preventing abuse, handling reports, improving the service.
- Legal obligation (KVKK 5/2-ç, GDPR 6(1)(c)): requests from authorities and statutory retention duties.
- Establishing, exercising or defending legal claims (KVKK 5/2-e).
- Explicit consent (KVKK 6, GDPR 9(2)(a)): preferences that may reveal sexual orientation, and device location. You can withdraw consent at any time; the related features (matching, finding people nearby) then can't work.
4. Who sees your data
- Other users: your card is shown in packs and requests: your name, age, photos, city or approximate distance, interests, tastes, languages and bio. Only the person you're matched with sees your messages; if someone reports a chat, authorised moderators may read that chat to review the report.
- Service providers (processors): the App runs on Google's Firebase and Google Cloud services (sign-in, database, file storage, server functions, notifications). Your data is stored on Google's servers in Europe (Belgium and the EU multi-region).
- Catalogue services: when you search for a film, show, game, artist or anime for your profile, the search term is sent through our server to TMDB, IGDB (Twitch), Deezer and AniList. No identifier or other personal data of yours is sent to them.
- Authorities: where required by law or in response to a valid legal request.
5. International transfers
Because our providers store data outside Türkiye (mainly in the European Union), your data is transferred abroad. These transfers rely on the appropriate safeguards provided for in KVKK Article 9 (standard contracts) and, where needed, your explicit consent. Google's data processing terms and security measures apply.
6. How long we keep it
- Your profile, photos, requests, packs and messages are kept until you delete your account, and are deleted immediately when you do.
- A record of an ended match stays so the other person can see why it ended, but the messages and anything you shared in it are deleted with your account.
- Reports made about you may be kept for safety and possible legal claims for up to 2 years after your account is deleted.
- Technical server logs are deleted automatically after about 30 days.
- Data we must keep by law is kept for the period the law requires.
7. Security
Data is encrypted in transit and at rest. Access is limited to those who need it, and database rules ensure each user can only reach the data they're meant to see.
8. Age limit
Pack a Match is for people aged 18 and over only. We close accounts we find to belong to anyone under 18. If you see one, report it in the App or email us.
9. Your rights
Under KVKK Article 11 and, if you're in the EU, GDPR Articles 15–22, you can:
- learn whether your data is processed and request information about it,
- learn the purpose of processing and whether it's used accordingly,
- know the third parties in Türkiye or abroad it's transferred to,
- have it corrected if incomplete or wrong, have it erased where applicable, and have those third parties told,
- object to an outcome against you that results solely from automated analysis,
- claim compensation for damage caused by unlawful processing,
- receive a copy in a portable format, object to processing and withdraw your consent.
You can edit most of your profile in the App and delete your account yourself under Profile → Delete my account (Profil → Hesabımı sil) (details). For other requests, write to info@packamatch.com from, or mentioning, the phone number or email you signed in with. We reply free of charge within 30 days. If you're not satisfied, you can complain to the Turkish Personal Data Protection Authority or, in the EU, to the data protection authority of your country.
10. Changes
We may update this policy. We'll tell you about significant changes in the App. The current version is always on this page.