Privacy Policy
Privacy Policy
This policy explains how the Kunduzo application and web pages collect, use, store and protect your personal data. The information required by Article 10 of the Turkish Personal Data Protection Law (KVKK) is in the Privacy Notice; this policy gives the same information in one place, category by category, and contains the declarations the app stores require.
Effective date: 1 October 2026
Data controller: HİPOPOTAMYA BİLİŞİM LTD. ŞTİ., Değirmiçem Mah. Nail Bilen Cad. Uğur Plaza No:5/149 Şehitkamil/Gaziantep, Türkiye, info@hipopotamya.com
1. Data inventory
Each row is a data category: the purpose it is processed for, the legal ground, how long it is kept and to whom it is transferred. OVH, named in the transfer column, is the provider of the server and file store on which the application runs and all data is stored (European Union).
| Category | Purpose | Legal ground | Retention | Transfer |
|---|---|---|---|---|
| Identity and contact: full name, username, email address | Account management, sign-in, email notifications | Establishment and performance of a contract (KVKK Art. 5/2-c) | As long as the account is open | OVH; email delivery service provider (EU) |
| Profile: photo, short bio, city, country, home flying site, year you started flying, preferences | Displaying the profile and personalising the application | Performance of a contract (Art. 5/2-c) | As long as the account is open | OVH |
| Age declaration: the time you declared that you are over 18 | Offering the service to adults only | Establishment of a contract (Art. 5/2-c) | As long as the account is open | OVH |
| Flight records: raw IGC file, GPS track, take-off and landing coordinates, thermal points, statistics | Flight logbook, flight analysis, statistics, logbook export | Performance of a contract (Art. 5/2-c) | As long as the account is open; a flight deleted one by one is no longer shown, its record and raw IGC file are kept until the account is deleted | OVH |
| Your phone's current location | Showing sites and weather near you | Performance of a contract (Art. 5/2-c) | Not stored; used only for that search | OVH |
| Pilot card: licence, IPPI, endorsement, insurance, wing check, instructor grade, medical certificate date | Pilot card; document tracking and licence verification by the club you are a member of | Performance of a contract (Art. 5/2-c), the data controller's legitimate interest in providing clubs with a membership management service (Art. 5/2-f) | As long as the account is open | OVH |
| Health: blood type, allergy information | The emergency side of the pilot card | Explicit consent (KVKK Art. 6) | As long as the account is open; erased when the field is cleared | OVH (encrypted) |
| Emergency contact's name and phone number | The emergency side of the pilot card | The data controller's legitimate interest (Art. 5/2-f); the fields are enabled together with the health information explicit consent | As long as the account is open; erased when the field is cleared | OVH (encrypted) |
| Equipment and maintenance records | Equipment tracking and maintenance reminders | Performance of a contract (Art. 5/2-c) | As long as the account is open | OVH |
| Favourite sites | Quick access, morning weather notification | Performance of a contract (Art. 5/2-c) | As long as the account is open | OVH |
| Flight intent: site, day, time range, note | The "I'm going flying today" list | Performance of a contract (Art. 5/2-c) | Erased 30 days after the flying day | OVH |
| Landing timer and safety contacts: site, expected time, note, chosen people | The "landed safely" alert chain | Performance of a contract (Art. 5/2-c) | A closed timer 30 days; an unanswered one as long as the account is open | OVH |
| Pre-flight checklist completion record | Showing that the checklist was completed | Performance of a contract (Art. 5/2-c) | As long as the account is open | OVH |
| Community content: posts, comments, likes, follows, site reviews, field reports, weather forecast ratings | Community features | Performance of a contract (Art. 5/2-c) | As long as the account is open; a post or comment deleted one by one is no longer shown, its record is kept until the account is deleted; when the account is deleted, the files of post photos remain in the store | OVH |
| Club and league rankings: your name, username, your place in the ranking | Showing rankings | Performance of a contract (Art. 5/2-c) | The ranking of a closed period is frozen and remains with your name even if the account is deleted | OVH |
| Flying site contributions: site records, edits, site photos and their embedded location and capture time, site alerts | Keeping flying site information current for everyone | Performance of a contract (Art. 5/2-c), legitimate interest (Art. 5/2-f) | Kept with the link to you removed when the account is deleted | OVH |
| Club: membership, role, event attendance, ride sharing, announcement read status, competition attendance declaration | Club management and events | Performance of a contract (Art. 5/2-c), legitimate interest (Art. 5/2-f) | As long as the account is open; events and announcements you created are kept with the link to you removed | OVH |
| Calendar subscription address | Showing club events in your own calendar | Performance of a contract (Art. 5/2-c) | Until you close it or delete the account | OVH; the calendar service you subscribe with (your choice) |
| Session and device records, notification token | Sign-in, session management, notifications | Performance of a contract (Art. 5/2-c) | Until the session is closed; a device record unused for 180 days is erased | OVH; Google Firebase Cloud Messaging (USA) once push notifications are enabled |
| Notification history | The in-app notifications screen | Performance of a contract (Art. 5/2-c) | 30 days | OVH |
| Audit records, IP address and browser information | Information security, prevention of misuse | Legal obligation (Art. 5/2-ç), legitimate interest (Art. 5/2-f) | 2 years | OVH |
| Reports, blocks and moderation decisions | Protecting the community, handling appeals | Legitimate interest (Art. 5/2-f), protection of a right (Art. 5/2-e) | As long as the account is open; reports you made are kept with the link to you removed | OVH |
| Problem report, screenshot, device and version information, last screen opened, last lines of the application log | Support | Performance of a contract (Art. 5/2-c), legitimate interest (Art. 5/2-f) | When the account is deleted the screenshot is erased and the text is kept with the link to you removed | OVH; email delivery service provider (your name, message, device information and last screen are forwarded to our support mailbox) |
| Error and crash records | Keeping the service running | Legitimate interest (Art. 5/2-f) | As long as needed to operate the service | OVH; not sent to any third party |
| Consent record and the time the privacy notice was seen | Evidencing consent and information | Establishment and protection of a right (Art. 5/2-e), legal obligation (Art. 5/2-ç) | Kept with the link to you removed when the account is deleted | OVH |
| Export package | Giving you a copy of your data | Legal obligation (Art. 5/2-ç) | Account archive 48 hours, logbook backup 7 days | OVH; email delivery service provider (link only) |
| Email address and notification token for marketing communication | Announcement and campaign messages | Explicit consent (Art. 5/1) | Until consent is withdrawn | Email delivery service provider (EU) |
| Usage measurement | Improving the application | Explicit consent (Art. 5/1) | No measurement takes place; stated in the explicit consent text before it starts | No measurement takes place; stated in the explicit consent text before it starts |
| Location inference | Site suggestions and weather notifications suited to you | Explicit consent (Art. 5/1) | As long as the account is open; stops when consent is withdrawn | OVH |
| Your device's IP address when viewing maps | Displaying the map | Performance of a contract (Art. 5/2-c) | The provider's own records | Thunderforest (United Kingdom), directly from your device |
| Database and file backups: all of the data above | Restoring against data loss | Legitimate interest (Art. 5/2-f) | The database backup is taken daily and erased after 30 days; earlier versions of files are kept for at most 30 days | OVH |
Transfers abroad are made under KVKK Art. 9 by signing with the recipient the standard contract announced by the Personal Data Protection Board and notifying it to the Board.
2. What we do not collect
- Your date of birth and age are not asked for or stored; only the time of your declaration that you are over 18 is recorded.
- No payment card details are collected; the application is free of charge.
- No postal address, national identity number or passport details are requested.
- Your contacts are not accessed; you type in your emergency contact yourself.
- The application does not track your location in the background; your phone's location is read only when you ask for sites near you and is not stored. The application is not a navigation or variometer tool used during flight.
- No advertising identifier is used, and there is no advertising network or third-party analytics tool.
3. External services that receive no personal data
Requests made for the weather forecast (Open-Meteo), airport observations (Aviation Weather Center, aviationweather.gov) and the written weather summary (artificial intelligence provider) contain only the flying site's coordinates, the airport code, the site's characteristics and forecast values. These requests are made by our server and contain no name, account, flight track or IP address of yours.
Downloading the application from Google Play or the App Store and signing in with Google or Apple take place in those companies' own services and are subject to their own privacy policies. When you sign in with Google or Apple, only your account identifier and email address are passed to us.
4. We do not sell your data
We do not sell or rent your personal data and we do not share it with anyone for advertising. In the event of lawful requests by competent public authorities, we may pass the personal data required by the request to those authorities.
5. Cookies
The mobile application does not use cookies. The web pages use only the session and security cookies strictly necessary to maintain a session and to submit forms securely; public flight pages and share images set no cookies at all. No advertising, tracking or analytics cookies are used.
6. App store data safety declarations
| Item | Declaration |
|---|---|
| Is data collected | Yes |
| Is data encrypted in transit | Yes, with HTTPS |
| Can deletion be requested | Yes, from within the application |
| Is data shared with third parties | Only with the providers that run the service; not shared for advertising |
| Location data | Yes: the flight files you upload and the information you enter; also, if you have granted permission, the phone's current precise location when you ask for sites near you (not stored). No background tracking |
| Health data | Yes, only if you enter it and with your explicit consent |
| Photos | Yes, only the photos you choose and upload |
| Contacts | No |
| Advertising identifier | No |
| Third-party analytics | No |
7. Visibility and control
- You choose who can see each flight: public, followers, club or only you. You can change the default in the settings.
- The default visibility of your flight intent is club, and you can change it.
- Your name, username, profile photo, licence level, whether your club has verified your licence and your place in club and league rankings are visible to other users.
- You can block other users and report content; blocking works both ways and is not notified to the other person.
- Your health information and emergency contact are stored encrypted and are visible only on your own screen.
- You can set your notification preferences and quiet hours. The landing alert of a pilot whose safety contact you have agreed to be is delivered during quiet hours as well.
- You can renew or close your calendar subscription address.
8. Security measures
- All data transfer is encrypted with HTTPS.
- Passwords are stored as irreversible hashes.
- Blood type, allergy information and the emergency contact's name and phone number are stored encrypted in the database.
- Raw IGC files, problem report screenshots and export packages are kept in non-public storage; download links are time-limited and signed. Profile photos and post photos are served from public addresses so that they can be displayed.
- Access rights are role-based; club data is accessible only to the officers of that club, and when a record belonging to someone else is requested, not even its existence is confirmed.
- Requests are rate limited; security-relevant actions are written to the audit log.
- When your password is reset, all your sessions are closed; you can see your open sessions in the application and close them one by one.
9. Children
Kunduzo is not directed at children and may be used only by people aged 18 or over. When you open an account you declare that you are over 18 and the time of the declaration is recorded; your date of birth is not asked for and no age check with an identity document is made. The account of a person we learn to be under 18 is closed and their data erased. If you believe that a person under 18 has given us data, write to info@hipopotamya.com.
10. Users in the United Kingdom and the European Union
If you are in the United Kingdom or the European Union, you have the rights of access, rectification, erasure, restriction of processing, data portability and objection under the UK GDPR and the GDPR. You can withdraw a consent you have given for processing based on consent at any time; withdrawal does not affect the lawfulness of earlier processing.
The data controller is HİPOPOTAMYA BİLİŞİM LTD. ŞTİ., established in Türkiye, and the servers of the service are in the European Union.
You may lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom or, in the European Union, with the data protection authority of the country where you are.
11. Changes to this policy
When this policy is updated, a new version is published and shown when you open the application. A published version is never changed afterwards.
12. Contact
HİPOPOTAMYA BİLİŞİM LTD. ŞTİ., Değirmiçem Mah. Nail Bilen Cad. Uğur Plaza No:5/149 Şehitkamil/Gaziantep, Türkiye
Email: info@hipopotamya.com · KEP: hipopotamyabilisim@hs06.kep.tr