KVKK Privacy Notice

Last updated: July 2, 2026

KVKK is the Turkish Personal Data Protection Law No. 6698 (Kişisel Verilerin Korunması Kanunu). This notice has been prepared by MedToDate (the "Data Controller") pursuant to Article 10 of KVKK to inform you about the processing of your personal data. The Turkish version of this notice is the governing text.

1. Personal data processed

• Identity and contact: full name, email address and profile picture (from your Google or Apple account; with Sign in with Apple, only the email address Apple shares).
• Transaction security: IP address, session token information, request logs.
• Usage data: assistant chat history, favorites, app preferences.

2. Purposes of processing

• Creating your account and authenticating you,
• Providing the app's features (calculators, assistant, drugs, literature),
• Ensuring information security and preventing abuse,
• Complying with legal obligations.

3. Legal grounds

Your data is processed under Article 5(2) of KVKK on the following legal grounds: the establishment and performance of a contract (b/c), compliance with a legal obligation (ç) and legitimate interest (f).

4. Transfers

Authentication is performed through Google (Firebase Authentication) infrastructure, and authentication data may therefore be processed on Google's servers; if you sign in with Apple, Apple's infrastructure is used. Questions you type into the AI assistant and the content of PDFs you attach are transferred to AI providers located abroad (Google Gemini, OpenAI, Anthropic) only with your explicit consent and solely to generate an answer; your name and email address are not transferred, and you can withdraw your consent from the Profile screen. Beyond this, your data is not sold to third parties in Turkey or abroad and is not transferred for marketing purposes.

5. Retention period

Data is retained for as long as your account remains active and for the periods required by applicable legislation; at the end of that period it is deleted, destroyed or anonymized.

6. Data subject rights (KVKK Article 11)

• To learn whether your personal data is processed and, if so, to request information about it,
• To learn the purpose of processing and whether the data is used in line with that purpose,
• To request correction of incomplete or inaccurately processed data,
• To request deletion or destruction of your data within the framework of KVKK Article 7,
• To object to an outcome against you arising from analysis of your data exclusively by automated systems,
• To claim compensation for damages suffered due to unlawful processing.

7. How to apply

You can send your requests to destek@medtodate.net with the subject line "KVKK Application". Applications are concluded free of charge within 30 days at the latest.

See also our Privacy Policy and Cookie Policy.