Thank you for using KakaLab. We know you’re trusting this app with very personal information. This policy explains, in plain language, what data we process, why and how we process it, who we share it with and what rights you have. It is designed to meet our obligations under the Turkish Republic of Northern Cyprus Personal Data Protection Law No. 89/2007, the EU General Data Protection Regulation (“GDPR”) and Turkey’s Law No. 6698 on the Protection of Personal Data (“KVKK”).
1. Data controller
The controller of personal data processed through the KakaLab mobile app and the www.kakatakip.com website (together, the “Service”) is:
- Company: SOCIFLY SOFTWARE LTD
- Address: Güner Türkmen Sokak, No:5, Köşklüçiftlik, Nicosia / Turkish Republic of Northern Cyprus
- Phone: 0850 241 1 444
- Email: info@kakatakip.com
“We”, “us” and “our” refer to SOCIFLY SOFTWARE LTD.
2. What data we process
You don’t need to create an account or share your name, phone number or location to use KakaLab. We process the following data:
| Category | Examples |
|---|---|
| Health data (special category data) | Stool photos, Bristol type selections, entry dates and times, AI analysis results, any notes you add |
| Usage data | Streak, level and points; in-app preferences (language, notification settings) |
| Device and technical data | An anonymous user ID generated by the app, device model, OS and app version, IP address, error logs |
| Purchase data | Subscription status, product and transaction IDs, subscription start/end dates. Your card details never reach us; payments are processed by Apple or Google. |
| Contact data | Your email address and message content when you contact us |
When taking a photo, please make sure your face, other people or anything that could identify you is not in the frame.
3. Why we process data and our legal bases
| Purpose | Legal basis |
|---|---|
| Analyzing your photos and entries with AI, storing them in your history and showing them to you | Your explicit consent (GDPR Art. 9(2)(a); KVKK Art. 6(2)). Health data is processed only on the basis of the explicit consent you give in the app. |
| Providing the core features of the app (logging, streaks, levels, history) | Performance of a contract (GDPR Art. 6(1)(b)) |
| Verifying and managing subscriptions | Performance of a contract; legal obligation (GDPR Art. 6(1)(b), (c)) |
| Keeping the Service secure, fixing bugs, preventing abuse | Legitimate interests (GDPR Art. 6(1)(f)) |
| Responding to support requests | Performance of a contract; legitimate interests |
| Complying with legal obligations and requests from authorities | Legal obligation (GDPR Art. 6(1)(c)) |
We do not use your data for advertising, marketing profiles or sale to third parties. There are no ads in the app.
4. How the AI analysis works
When you use “Magic Analysis”, your photo is uploaded to our servers over an encrypted connection and sent to our AI service provider for analysis. The result is shown to you and stored in your history together with the photo.
- Analysis results are generated automatically and may be inaccurate; they are not a medical diagnosis.
- No automated decision producing legal or similarly significant effects on you is made based on the analysis.
- We do not use your photos to train AI models without your separate explicit consent.
5. Who we share data with
Your data is shared only to the extent necessary to provide the Service, with the following categories of recipients:
- Cloud hosting and storage providers: to store your photos and entries securely.
- AI service providers: to analyze photos.
- Apple, Google and subscription infrastructure providers: to verify and manage purchases.
- Public authorities: only where legally required.
- Corporate transactions: in a merger or acquisition, provided the protections in this policy continue to apply.
Our service providers process your data only on our instructions and under contractual confidentiality obligations.
6. International transfers
Our company is established in the Turkish Republic of Northern Cyprus, and our service providers may store data in other countries (for example in the EU or the US), so your data will be transferred outside your country. Where data is transferred out of the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Transfers from Turkey are made under the safeguards set out in Article 9 of the KVKK. Where such safeguards are not available, transfers are based on your explicit consent.
7. How long we keep data
- Your entries and photos are kept until you delete them or request deletion of all your data.
- When you delete an entry, its photo and analysis result are removed from our active systems and purged from backups within 30 days.
- Purchase records are kept for as long as required by law.
- Support correspondence is kept for up to 2 years after the request is resolved.
- Technical error logs are kept for up to 90 days.
8. How we protect your data
Data is transmitted between your device and our servers over an encrypted connection (TLS) and encrypted at rest. Access is limited to authorized personnel who need it to operate the Service. No system is 100% secure, but we take reasonable technical and organizational measures to protect your data, and we will make any notifications required by law in the event of a data breach.
9. Children’s privacy
KakaLab is not directed at children under 13 and we do not knowingly collect data from them. If you are under 18, you should use the app with the consent of a parent or legal guardian. If you believe we have processed a child’s data, please contact us at info@kakatakip.comand we will delete it.
10. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you,
- have inaccurate data corrected,
- have your data deleted,
- restrict or object to certain processing, including processing based on legitimate interests,
- receive your data in a portable format,
- object to decisions based solely on automated processing,
- learn which third parties your data has been transferred to (KVKK).
You can withdraw your consent at any time. If you do, AI analysis and photo storage will no longer be available; withdrawal does not affect the lawfulness of processing carried out before it.
Send your requests to info@kakatakip.com. We will respond free of charge within 30 days. You also have the right to lodge a complaint with the Personal Data Protection Board of the Turkish Republic of Northern Cyprus, the data protection authority in your EU country of residence, or Turkey’s Personal Data Protection Authority.
Steps for deleting your data are on the Data Deletion page.
11. Changes to this policy
We may update this policy from time to time. We will announce significant changes in the app or on this page. The “Last updated” date at the top shows the current version.
12. Contact
For any privacy questions or requests, contact SOCIFLY SOFTWARE LTD at info@kakatakip.com, by phone at 0850 241 1 444 or by post at Güner Türkmen Sokak, No:5, Köşklüçiftlik, Nicosia / Turkish Republic of Northern Cyprus.