KVKK Privacy Notice
Explains why and on what legal basis we process your personal data under Turkish Law No. 6698, and your rights.
Last updated: October 29, 2026
1. Data controller
This notice is provided by [Şirket unvanı] (“RNKHUB”) as data controller under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”). Address: [Şirket adresi]. MERSIS: [MERSİS numarası]. Email: info@rnkhub.com.
RNKHUB provides its services through the rnkhub.com website, the app.rnkhub.com application, mobile apps, and the studio management panel (together, the “Platform”).
For data that studios enter about their own members, the studio is the data controller and RNKHUB processes that data on the studio’s behalf as a data processor. Please address requests about such data to your studio first; requests sent to RNKHUB are forwarded to the relevant studio.
2. Personal data we process
| Category | Examples |
|---|---|
| Identity | First and last name, gender, date of birth |
| Contact | Email address, phone number, country |
| Customer transactions | Memberships, session packages, bookings, studio check-ins, orders and sales records |
| Financial | Payment and invoice records (card numbers are not stored by RNKHUB) |
| Security | Password hash, passkey and two-step verification data, IP address, browser and device information, session and sign-in logs |
| Visual | Profile photo; images that studios and coaches upload to their Hub profiles |
| Location | Branch addresses; the location you search for in the Hub |
| Marketing | Commercial message consent preferences and campaign delivery logs |
| Requests and complaints | Support tickets, contact and demo form messages |
| Health (special category) | Body measurements and assessments — only when this feature is used and with your explicit consent |
3. Purposes
- Creating your account, verifying your identity, and securely managing your session
- Handling memberships, session packages, bookings, studio check-ins, and sales
- Connecting studios with their members and coaches with their clients
- Publishing studio and coach profiles in the Hub and making them searchable
- Collecting payments, invoicing, and keeping accounting records
- Sending appointment, payment, and account notifications
- Responding to support tickets, contact, and demo forms
- Ensuring information security, preventing abuse and fraud, and fixing errors
- Sending commercial electronic messages about products and announcements if you have consented
- Meeting legal obligations and responding to requests from competent authorities
4. Legal bases
- Necessary for the conclusion or performance of a contract (KVKK Art. 5/2-c)
- Compliance with our legal obligations (Art. 5/2-ç)
- Establishment, exercise, or protection of a right (Art. 5/2-e)
- Our legitimate interests, provided your fundamental rights are not harmed (Art. 5/2-f)
- Data made public by you, such as your own Hub profile (Art. 5/2-d)
- Explicit consent (Art. 5/1 and Art. 6): commercial electronic messages, health data, and transfers abroad where described below
5. How we collect data
We collect personal data electronically, by automated and partly automated means, through Platform forms, account and profile settings, records studios enter in their panel, Google or Apple sign-in, cookies, and server logs.
6. Transfers
Limited to the purposes above, your data may be shared with studios and coaches you are a member of or connected to, with competent public authorities, and with the following service providers that help us run the Platform.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, and file storage | [Supabase sunucu bölgesi, ör. Frankfurt (Almanya)] |
| Vercel | Hosting of the website and application | USA and global servers |
| Resend | Email delivery (verification codes, notifications, form messages) | USA |
| Twilio | Sending verification codes by SMS | USA |
| Sentry | Application error monitoring | USA |
| Mapbox | Maps and address/location selection (Hub and branch addresses) | USA |
| Google, Apple | Authentication if you choose to sign in with these accounts | USA |
| [ödeme kuruluşu] | Payment collection (card details are not stored by RNKHUB) | Türkiye |
Transfers to providers with servers abroad are made under KVKK Art. 9 using the standard contracts announced by the Board or other appropriate safeguards, and with your explicit consent in occasional cases where these are not available.
7. Retention
We keep data while your account is open and for as long as the purpose requires. When you close your account, data is deleted, destroyed, or anonymized after the statutory retention periods (e.g., 10 years for commercial books and records) and the periods needed for potential disputes expire.
8. Your rights
Under KVKK Art. 11 you may learn whether your data is processed and request information about it; learn the purpose and whether it is used accordingly; know the third parties it is transferred to in Türkiye or abroad; request correction of incomplete or inaccurate data and deletion or destruction where the conditions are met, and notification of these to third parties; object to an adverse outcome resulting solely from automated analysis; and claim compensation for damage caused by unlawful processing.
You can close your account yourself in the app’s Settings.
9. How to apply
Send your request, with information that allows us to verify your identity, to info@rnkhub.com from the email address registered with us, to [KEP adresi] by registered electronic mail (KEP), or in writing to [Şirket adresi]. Requests are answered free of charge within 30 days at the latest; if the process requires an additional cost, the fee set by the Board may be charged.