Information notice under Türkiye's KVKK
Data controller
Under Türkiye's Personal Data Protection Law No. 6698 (KVKK), the data controller is the individual who operates PureFaceLab (purefacelab.com) in Türkiye. For anything about your personal data, contact info@purefacelab.com. This notice is provided under Article 10 of the KVKK; our privacy policy covers the same processing for the GDPR.
What personal data we process
Identity and contact: name, email address. Customer transactions: plan, subscription status, period dates, Paddle customer and subscription IDs (card details never reach us). Security: IP address, browser information, session and error logs. Images: the photos you upload. Care records: skin profile, journal notes, products, routine and reminders. Possibly health-related information: notes you add yourself such as sensitivity or pregnancy, and photo analysis results. We do not process data for marketing or advertising.
Purposes
Creating and managing your account; providing care tracking and the photo archive; running subscriptions and payments through Paddle; photo analysis, only when you request it and with your explicit consent; sending account emails; keeping the service secure and preventing abuse; answering your requests; meeting legal obligations.
Legal grounds
Performance of a contract for your account, care tracking and subscription (KVKK art. 5/2-c); legal obligation (art. 5/2-ç); establishing, exercising or defending a right (art. 5/2-e); legitimate interest for security (art. 5/2-f). Explicit consent for possibly health-related information and photo analysis (art. 6). Adding this information and using analysis is optional; the rest of the site keeps working without it. Consent for the skin profile and care journal is asked separately on first use; you can withdraw it in Account → Settings, and these records are then deleted.
How we collect it
Directly from you, electronically, through the site and account forms. Payment details are collected by Paddle on its checkout. Technical data is created automatically through session cookies and server logs.
Transfers, including abroad
Your data is shared only with the providers needed to run the service: Supabase (database and storage, Germany), Vercel (hosting, USA), Resend (account emails, Ireland), Paddle (payments and invoicing, UK; as Merchant of Record under its own responsibility), Anthropic (only when you request an analysis, USA), Google (if you choose Google sign-in) and Cloudflare (security check). These servers are outside Türkiye; transfers abroad rely on the safeguards in KVKK art. 9 and, for photo analysis, on your explicit consent. Data may be shared with authorities where the law requires it. We do not sell your data.
Retention
Account data, photos and care records are kept while your account is open; when you delete your account, your records and photos in the app are deleted. You can delete analysis results one by one. Paddle keeps payment and invoice records for the legally required periods. Security logs and provider backups are deleted on their own schedules.
Your rights under KVKK art. 11
You may learn whether your data is processed and request information about it; learn the purpose and whether it is used accordingly; know the third parties it is transferred to in Türkiye or abroad; ask for incomplete or inaccurate data to be corrected; ask for deletion or destruction under KVKK art. 7; ask that these actions be notified to recipients; object to a result against you arising solely from automated analysis; and claim compensation for damage caused by unlawful processing.
How to apply
Send your request to info@purefacelab.com from your account's email address, with enough information for us to verify your identity. We answer within 30 days at the latest, free of charge as a rule. If you are not satisfied, you can complain to Türkiye's Personal Data Protection Board. You can also download or delete much of your data yourself in account settings. Last updated: 4 October 2026.
Write to us
For questions not answered here and for requests about your data, you can email us. For account matters, writing from your registered email address makes things easier; never share your password or the links in our emails. info@purefacelab.com