This policy explains how your personal data is processed when you use the Setlore mobile app and the setlore.com.tr website. It is based on the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).
1. Data controller
Miran Malgır, Mersin. Contact: [email protected]
2. What data we process
- Account: your email address, the user ID provided by Apple or Google if you signed in with them, your username and display name.
- Profile (optional): profile photo, short bio, link, gender and birthday. Gender and birthday are visible only to you.
- Workout data: workouts, exercises, sets, weight, reps, how hard each set felt, durations, notes and programs.
- Social content: workouts you share, likes, comments, follows, reports and blocks.
- Subscription: your Pro status, trial and end date. Your payment details never reach us; Apple or Google takes the payment.
- Settings: language, units, notification preferences.
If you use the app without an account, your workout data stays only on your phone and is not sent to us. Your subscription status and an anonymous purchase identifier are still processed by RevenueCat and by Apple or Google.
3. Purposes and legal bases
- Creating your account, backing up your data and syncing it across your devices, calculating your next workout targets: performance of a contract (KVKK Art. 5/2-c, GDPR Art. 6(1)(b)).
- Sharing your workouts with other users: your explicit consent (KVKK Art. 5/1, GDPR Art. 6(1)(a)). Without consent, your new workouts are visible only to you.
- Account security, preventing abuse and reviewing reported content: legitimate interest (KVKK Art. 5/2-f, GDPR Art. 6(1)(f)).
- Legal obligations: KVKK Art. 5/2-ç, GDPR Art. 6(1)(c).
We don't sell your data and don't use it for advertising.
4. Who we share it with
- Apple and Google: Sign in with Apple / Google and store payments.
- RevenueCat: verifying your subscription status.
- Hosting and email delivery providers: running our servers and sending sign-in code emails.
- Other users: only according to your sharing settings (everyone, followers or only me).
- Authorities: only when legally required.
5. International transfers
Some of the providers above process data outside Turkey and the EU. Transfers rely on safeguards such as KVKK Art. 9 and the GDPR standard contractual clauses.
6. Retention
We keep your data for as long as your account is open. When you delete your account in the app (Settings → Account settings → Delete account), your account is closed right away and your workouts, programs and profile are permanently deleted from our servers within 30 days. Signing in again during that time restores your account. Records that must be kept by law (such as store subscription transactions) are kept by Apple or Google for the required period.
7. Your rights
Under KVKK Art. 11 and GDPR Art. 15–22 you have the right to access, correct, delete and port your data (in the app: Settings → Export), to object to processing and to withdraw consent. To make a request, write to [email protected]. You can also complain to the Turkish Personal Data Protection Authority or the data protection authority in your country.
8. Children
Setlore is not designed for anyone under 16. If you are under 16, please don't create an account.
9. This website
setlore.com.tr does not use cookies, has no forms and does not track visitors. The hosting service may keep technical server logs (IP address, time) for security.
10. Changes
If we change this policy, we update the date on this page and tell you about significant changes in the app.