KVKK Disclosure Notice

In short

OZJAM is an independent studio that publishes mobile apps. The apps we currently publish keep your data on your device and do not send it to us. Under KVKK, then, almost everything that actually reaches us is data you decided to send: the contact form and support e-mails. Alongside that, the server hosting this site keeps standard access logs, as every web server does.

The sections below take those items one at a time and set out, for each, the legal ground we rely on, who receives the data and how long it is kept. Where something does not exist or is not ours to state, we say so rather than papering over it.

The data controller

For the purposes of Law No. 6698, the data controller is OZJAM. The studio is based in Türkiye, and every request sent to the address below is read and answered directly rather than through a ticket system.

• Controller: the independent developer trading as OZJAM
• E-mail: support@ozjam.com
• Country: Türkiye

OZJAM is not a registered company; it is a personal venture run by an independent developer. There is therefore no trade register entry, tax number or KEP address. The e-mail address above is our official channel for requests, and every request is answered from it.

The personal data we process

Here is the full list of what OZJAM holds about you, and how each item got there.

That is the whole list. The site has no analytics, no advertising pixels, no heat maps and no visitor profiling; unless you write to us, you do not even leave us your name. We process no special categories of personal data — health, biometric or genetic data, religion, union membership and the like — and we would ask you not to put any into a support message.

How we collect it, and on what legal ground

We collect personal data in two ways: through the contact form on this site, and through e-mails you send us directly. Both are electronic, and the collection is partly automated. We buy no data from third parties and we take over no lists from anyone.

• Form submissions and support e-mails — the legal ground is Article 5/2(f): the controller’s legitimate interest, provided it does no harm to your fundamental rights and freedoms. That interest is simply being able to answer a person who uses our app. Where your message is about a problem in an app you installed, Article 5/2(c) — processing directly related to the performance of a contract — applies as well.
• The consent box on the form — before it is sent, the form asks you to confirm you have read this notice and the privacy policy. It is an acknowledgement, not explicit consent: the legal grounds above already exist, and ticking the box creates no new one.
• Server access logs — Article 5/2(f) again: keeping the site up, and spotting abuse or attacks. Where legislation requires a particular record to be kept, Article 5/2(ç) — compliance with a legal obligation — applies to that record.
• Browser preferences — oz-lang is written to your browser’s local storage and is never sent to the server, so they create no processing on our side. The detail is in the cookie policy.

Why we process it

Our purposes are a short list, and all of them revolve around your request:

• to understand and answer the question, bug report or suggestion you sent us;
• to reproduce and fix a fault in Warry, and to carry on the correspondence about it where that helps;
• to handle requests made under Article 11 and to conclude them within the periods the law sets;
• to keep the site available and to block abuse and automated spam;
• to answer a legal obligation or a properly made request from a competent authority.

There is no purpose beyond that list. We do not sell or rent your data, we do not use it for ad targeting, and we do not add you to a mailing list. We reply about the subject you raised, and we send no newsletter.

The Warry app and this notice

Warry produces no flow of data that this notice needs to cover. Your items, photos, receipts, prices and notes sit in a local database on your device and are not transmitted to OZJAM. Data that never arrives can have no retention period and no recipients.

There is one exception, and we write it plainly: advertising. Warry is free and covers its costs with a single banner ad at the bottom of the screen, served by Google AdMob. To serve it, Google may process device and app identifiers, an approximate location derived from your IP address, and your interaction with the ad, under its own policy. For that processing the controller is Google, not OZJAM, and your inventory is not part of the ad request. The details and Google’s own controls are at policies.google.com/technologies/ads.

On iOS, the App Tracking Transparency prompt decides whether the advertising identifier may be used at all, and declining it switches off no feature of the app. For the whole picture, see the Warry privacy policy.

Who the data is shared with

We sell your personal data to no one and transfer it nowhere for marketing. When we say transfer, we mean the technical providers that keep the service running:

• Our hosting provider — IHS Kurumsal Teknoloji Hizmetleri A.Ş. It hosts the site files and the support mailbox, and the access logs are created on its systems. The servers are located in Türkiye, so no transfer abroad is involved. Under KVKK it acts as a data processor, on our instructions.
• Google — in two separate places. The fonts on this site are loaded from Google Fonts, so as the page opens your browser’s request reaches Google’s servers carrying your IP address and browser details. And the banner in Warry is served by Google AdMob. In both cases Google acts on its own account, under its own policy.
• Competent authorities — only where legislation requires it and on a properly made request, within Article 8/2(a).

Transfers abroad

We initiate no transfer of personal data abroad. Two technical flows can still leave Türkiye: the Google Fonts request made by your browser, and the ad request made by Warry. Both go to Google’s global infrastructure and fall to be assessed under Article 9. Separately, downloading or updating the app is a transaction between you and Apple, governed by Apple’s privacy policy rather than this notice.

Retention and deletion

We keep personal data only for as long as the purpose that produced it lasts.

When the period ends, or the reason for processing disappears, we delete the data. You need no reason to ask for that sooner: say you want the correspondence gone, and it goes.

Data security

Article 12 requires a controller to provide an appropriate level of security. Our first line is not collecting the data at all: the best-protected record is the one that was never created. Beyond that:

• the site is served entirely over HTTPS, and the form is submitted over the same encrypted connection;
• form submissions are not written to a database, they are forwarded to the support mailbox as e-mail; there is no customer table to leak;
• the form carries a hidden trap field and simple server-side checks, purely to filter out automated spam;
• only the person running the studio opens the support mailbox — there are no other employees, agencies or subcontractors;
• our apps hold personal data on the device, so a server breach cannot expose your inventory.

If personal data is nevertheless obtained unlawfully by others, we will notify the people concerned and the Personal Data Protection Board without delay, as Article 12/5 requires.

Article 11: your rights

Article 11 gives you the right to apply to the controller and ask to:

1. learn whether your personal data is processed;
2. request information about it, if it has been processed;
3. learn the purpose of the processing and whether the data is used in line with it;
4. know the third parties in Türkiye or abroad to whom the data has been transferred;
5. have the data corrected if it is incomplete or wrong;
6. have the data erased or destroyed, within the conditions of Article 7;
7. have any correction or erasure notified to the third parties the data was transferred to;
8. object to a result reached against you solely by automated analysis of the data;
9. claim compensation where unlawful processing has caused you damage.

In practice most of these get a short answer, because there is so little on our side. If you have never written to us, we almost certainly do not know your name, and the first item closes with “not processed”. For your content in Warry, access and portability are already in your hands: the data is on your device and the delete button is inside the app.

How to make a request

You can make your request in Turkish, by any of these routes:

• By e-mail — write to support@ozjam.com with “KVKK başvurusu” in the subject line. This is the fastest route, and we accept it as a formal application.
• In writing — if you would rather send a signed letter, e-mail us first and we will give you a postal address to send it to.

The Communiqué on the Procedures and Principles of Application to the Data Controller asks an application to contain: your name and surname; your signature if it is in writing; your Turkish identity number, or your nationality and passport number if you are a foreign national; your address for notification; your e-mail address, telephone and fax number if you have given them; and the subject of your request. The more concrete you are about the subject, the faster we can close it.

We conclude applications free of charge, within thirty days at the latest. If a request genuinely involves additional cost, the tariff published by the Board allows a fee; we do not apply it to ordinary requests.

If our answer does not satisfy you

If we reject your application, if you find our answer inadequate, or if we do not answer within thirty days, Article 14 lets you complain to the Personal Data Protection Board: within thirty days of learning our answer, and in any case within sixty days of your application. The Board’s own channels are at kvkk.gov.tr.

Changes and contact

We update this notice as our processing changes: a new provider or a new category of data is reason enough. The effective date at the top of the page tells you when the text last moved. We cannot announce it to you separately, because we do not have most visitors’ e-mail addresses.

For anything to do with this notice, write to support@ozjam.com. The person running the studio reads it and answers, usually within a day, in Turkish or English.

The website itself is covered in the privacy policy, the two keys stored in your browser in the cookie policy, and the app in the Warry privacy policy.