This notice is prepared under Article 10 of Turkey's Personal Data Protection Law No. 6698 ('KVKK') to explain which of your personal data Modiva ('Modiva') processes while you use the app, for what purpose, on what legal basis, with whom it is shared, how long it is kept, and what rights you have under KVKK.
1. Data Controller
The data controller for personal data processed within Modiva is the operator of Modiva. Once a registered legal entity is established, this section will be updated with its name, address, and MERSİS number; until then, the contact channel for requests is the email address listed in section '8. How to Exercise Your Rights' below.
2. Categories of Personal Data Processed
Identity and contact data: full name, email address, username. Account security data: your bcrypt-hashed password (the plain-text password is never stored), session tokens. Visual data: product photos you add to your wardrobe, photos you share in Color of the Week. Location data: your device location (if you allow it), used to give weather-aware outfit suggestions. Usage and preference data: your style preferences, color palette, body type, mood/plan choices, Modiva Stylist chat messages, outfit history, friendships, and your likes/comments on Discover. Security-of-processing data: IP address and request logs (used to prevent abuse/attacks).
3. Purposes of Processing
Creating and authenticating your account; providing personalized outfit suggestions; generating weather-aware recommendations; letting Modiva Stylist respond with relevant context; wardrobe management; powering social features like friends, Discover, and Fashion Week; sending your daily reminder notification; securing the account and service (abuse detection, rate limiting); and fulfilling legal obligations.
4. Legal Basis for Processing
Under KVKK Art. 5/2, your data is processed where processing is directly related to the establishment or performance of a contract (the data needed to create your account and provide the service), where necessary for compliance with a legal obligation of the data controller (security logs), and where processing is necessary for the data controller's legitimate interest without harming your fundamental rights (fraud/abuse prevention); for optional features such as location and photo uploads, your explicit consent is obtained.
5. Recipients of Personal Data
Aside from sending your message/image to NVIDIA's AI API for Modiva Stylist and automatic image tagging, sending your location coordinates to the Open-Meteo service for weather, and sending your email address to the Resend email service for transactional emails like password resets, your data is never transferred to any other third party, sold, or shared for marketing purposes. These services are governed by their own privacy policies and process your data only to the extent necessary to provide their service to us.
6. Retention Period
Your data is kept for as long as your account is active. When you delete your account (Profile > Delete My Account), your wardrobe photos, outfit history, friendships, chat history, and all other personal data are permanently and irreversibly deleted from our systems — this completes within seconds. A copy of this data may remain for up to about 14 more days in the daily database backups taken for security purposes; these backups are used only for disaster recovery and are deleted automatically when that period ends. Only data subject to a legal retention obligation (if any) is kept for the period required by law.
7. Your Rights Under KVKK
Under Article 11 of KVKK, you have the right to: learn whether your personal data is being processed; request information about it if so; learn the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred, domestically or abroad; request correction if it is incomplete or inaccurate; request its deletion or destruction under the conditions set out in KVKK; request that any correction/deletion be notified to third parties to whom the data was transferred; object to a result that is to your detriment arising from analysis of your data exclusively through automated systems; and claim compensation for damages caused by unlawful processing.
8. How to Exercise Your Rights
To exercise the rights above, send us your request via Profile > Contact / Support. Requests are resolved within 30 days at the latest. You can also delete individual wardrobe items, chat history, and shared posts within the app at any time, permanently delete your entire account and all associated data via Profile > Delete My Account, and get a copy of all your data as JSON via Profile > Download Your Data. If you are not satisfied with the outcome of your request, you retain the right to file a complaint with Turkey's Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).