Hullcore · KVKK
Data Deletion Instructions
This page explains how to have your personal data deleted from the Hullcore flagship application (mobile and web), whether or not you can currently sign in to your account. It supplements the Privacy Policy and is published to meet the Google Play and Apple App Store requirement for a public, unauthenticated account-deletion instructions page. Deletion requests are free of charge.
1. How to Request Deletion
You can request deletion of your personal data in any of the following ways:
- In the app (self-service): in the app's account settings, use the delete-account option to delete your account immediately, without contacting us.
- By e-mail: send your request from your registered e-mail address to info@hullcore.dev.
To exercise your formal rights under LPPD Article 11 (rather than a simple deletion request), use the KVKK Application Form.
2. What Gets Deleted
Deleting your account removes:
- Your account and profile information (name, e-mail address, credentials);
- Content and application data associated with your account (see Privacy Policy Section 2 for the full list of data categories);
- Records tied to your account, such as device/push tokens, stored preferences, and session data.
Privacy Policy Section 7 (Retention) and Section 8 (Deletion & Account Closure) set out exactly how each category is deleted, anonymized, or purged, and on what schedule.
3. When a Request Cannot Be Fulfilled
We may be unable to delete certain data immediately, or at all, where:
- The law requires us to keep it. Commercial and financial records must be retained for ten years under Turkish Commercial Code m.82, and tax documents for five years under Tax Procedure Law m.253. This data is kept in a restricted archive used solely to meet that obligation and is destroyed at the end of the statutory period.
- The data relates to an ongoing legal dispute or claim involving your account, until that matter is resolved.
- We cannot verify your identity. We may ask for additional information before acting on a deletion request and will not proceed until your identity is verified.
4. End-Customer Data & Controller/Processor Role
For the Hullcore flagship application, Hullcore (Osman Can Çınar) is the data controller for the personal data described on this page, and handles your deletion request directly.
Where the Hullcore platform is licensed to a separate business to run that business's own product, that business is the controller for its end-users' data and Hullcore acts as data processor; a request about such a product should be directed to that business in the first instance.
Where a deployment enables customer-held encryption keys (HYOK / an external key store) such that Hullcore cannot decrypt the personal data, Hullcore then acts as technical infrastructure only and not as a data processor with access to that data. In deployments where Hullcore holds the encryption key, Hullcore acts as the data processor described above.
5. Automatic Deletion & Retention Periods
You do not need to submit a request for most data: it is deleted, anonymized, or destroyed automatically once its retention period ends, as set out in the Privacy Policy Section 7 retention table. On account deletion, your data is removed from the device and backend and backups are purged on a 30-day cycle (Privacy Policy Section 8); if you withdraw consent or ask us to delete your data, it is destroyed without waiting for the periodic-destruction cycle (LPPD Art. 7). Records subject to a statutory retention period (see Section 3 above) follow that period instead. Beyond individual retention periods, periodic destruction of eligible personal data is otherwise carried out at intervals not exceeding six months, the standard set by the KVKK Personal Data Destruction Regulation.
6. Response Time
We acknowledge receipt of your deletion request and, under LPPD Art. 11 and the Communiqué on Procedures and Principles of Application to the Data Controller (10.03.2018), conclude it within thirty days at the latest, free of charge. We notify you again once the request has been completed, and inform any third party to whom the data was transferred, where applicable. If you are dissatisfied with the response, you may complain to the Personal Data Protection Board under LPPD Art. 14 within thirty days of learning the response and in any event within sixty days of your application.
7. Contact
For a deletion request or any question about this page:
- E-mail: info@hullcore.dev
- Location: İzmir, Karşıyaka
Hullcore (Osman Can Çınar) · legal@hullcore.dev · https://hullcore.dev Version 1.0 · effective on publication Prepared in compliance with Google Play Developer Policies, Apple App Store Review Guidelines, LPPD, and GDPR.