KVKK Disclosure — English Summary

KVKK Disclosure Text — English Summary

This document is prepared in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"). It informs users about how FitMusc collects, processes, and protects personal data.

Data Controller

FitMusc acts as the data controller responsible for your personal data. Contact: destek@fitmusc.com

Personal Data Processed

• Identity: Name, surname
• Contact: Email address
• Health Data (Sensitive): Height, weight, body measurements, health notes, allergies, medications
• Fitness Data: Workout logs, exercise sets and repetitions, training durations
• Nutrition Data: Meal plans, nutritional values, supplement schedules, shopping lists
• Security Data: Session information, IP address, device info, browser type, access times
• Notification Data: Push subscription, notification preferences, reminder settings

Health data is classified as sensitive personal data under KVKK and is processed based on your explicit consent with appropriate administrative and technical safeguards.

Processing Purposes and Legal Basis

• Performance of contract (Art. 5/2-c): Personalized plans, progress tracking, account management
• Explicit consent (Art. 5/1 & 6/2): Health data processing, AI-powered features, plan sharing
• Legitimate interest (Art. 5/2-f): Platform security, service improvement, statistical analysis
• Legal obligation (Art. 5/2-c): Regulatory compliance

Data Transfers

Data may be transferred to: Anthropic, PBC (USA) for AI features, Neon Tech, Inc. (USA) for database hosting, Mailjet SAS (France/EU) for email delivery, and Vercel, Inc. (USA) for platform hosting. International data transfers are conducted based on your explicit consent per KVKK Article 9.

Data Subject Rights (Article 11)

Under KVKK Article 11, you have the right to:

• Learn whether your personal data is processed
• Request information about processing activities
• Learn the purpose of processing and whether data is used accordingly
• Know the third parties to whom data is transferred
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of data under Article 7 conditions
• Request that corrections or deletions be notified to third parties
• Object to outcomes arising from exclusively automated analysis
• Claim compensation for damages caused by unlawful processing

How to Apply

To exercise your rights, contact us at destek@fitmusc.com with the subject line "KVKK Information Request". Your application must include identifying information and a clear description of your request. Applications are resolved within 30 days.