⚠️ Draft — final legal validity requires DPO / legal sign-off.

Privacy & KVKK Notice

Last updated: [DATE — PENDING LEGAL REVIEW]

This notice explains how AuriculoAI processes your personal data under Türkiye's Law No. 6698 (KVKK) and the GDPR.

Data controller

[LEGAL REVIEW REQUIRED: registered company name, address, VERBİS registration number, contact channel]

Personal data we process

Identity and contact data (email), ear images (special-category health data under KVKK Art. 6), consent records (timestamp, IP, version), and technical logs (user_id / capture_id).

Purposes of processing

Managing the early-access waitlist, providing and improving the service, and keeping legal and consent records.

Legal basis

Your explicit consent (KVKK Art. 5/1 and Art. 6/2 for special-category data). [LEGAL REVIEW REQUIRED: any additional legal bases]

Data transfers

Your data is not transferred abroad without your explicit consent. [LEGAL REVIEW REQUIRED: sub-processors, server location, EU transfer mechanism]

Retention

[LEGAL REVIEW REQUIRED: retention and deletion periods per data category]

Your rights (KVKK Art. 11)

You may request access, rectification, erasure, object to processing, and data portability. Requests: [LEGAL REVIEW REQUIRED: official request channel]

Contact

For privacy and data requests: privacy@auriculo.ai