Eroviya TouchLegal
Information Notice on the Protection of Personal Data
1. Data controller
Your personal data is processed by EROVİYA E-TİCARET LİMİTED ŞİRKETİ (Kanal Mah. 4755 Sk. İsmail Zurnacı Apt. No: 8 İç Kapı No: 2, Kepez / Antalya, Türkiye; MERSİS 0368055992300001; Antalya Trade Registry 143344) as data controller, within the scope described below.
2. Personal data processed
| Category | Data |
|---|---|
| Identity | Display name (may be a nickname) |
| Contact | E-mail address |
| Transaction security | Password hash, session token, push notification token, IP address, request and error logs, app version |
| User transaction data | Connection and invite records; the parties, chosen device profile, maximum level, time and status of remote control sessions; block and report records |
No special categories of personal data (health, sexual life, etc.) are processed. Mixes, patterns, the PIN and sensor data you create in the app remain only on your device and are not transmitted to the company.
3. Purposes of processing
- Creating your user account, authentication and e-mail verification,
- Providing the app's services: device control, linking with a partner, consent-based remote control sessions, notifications, app updates,
- Ensuring security, preventing abuse, investigating reports and moderation,
- Debugging and maintaining service quality,
- Fulfilling legal obligations and responding to requests from competent authorities,
- Answering support requests.
4. Method of collection and legal basis
Your personal data is collected electronically and by automated means when you sign up for and use the app. It is processed on the legal bases of KVKK art. 5/2-c (necessity for the establishment or performance of a contract), art. 5/2-ç (the controller's legal obligation), art. 5/2-f (legitimate interest) and, with regard to notifications and transfers abroad, art. 5/1 and art. 9 (explicit consent).
5. Transfers
Within Türkiye, personal data is transferred to competent public institutions only where legally required. To deliver the service technically, data is transferred to the following providers abroad under KVKK art. 9, only to the extent necessary for the service:
- Hetzner Online GmbH (Germany) — server and database hosting,
- Google LLC (USA) — Android notifications via Firebase Cloud Messaging,
- Apple Inc. (USA) — iOS notifications via the Apple Push Notification service,
- Cloudflare, Inc. (USA) — domain name resolution and network protection,
- E-mail delivery provider — verification e-mails (to be named here once chosen).
Data is not transferred to or sold to third parties for advertising, marketing or profiling.
6. Retention
Account data is kept while the account exists; session, invite and report records for 12 months; server logs for 30 days. Personal data is deleted or anonymised within 30 days of an account deletion request. Detailed periods are in the Privacy Policy.
7. Your rights (KVKK art. 11)
- To learn whether your personal data is processed and, if so, to request information about it,
- To learn the purpose of processing and whether it is used in line with that purpose,
- To know the third parties to whom it is transferred, in Türkiye or abroad,
- To request correction if it is incomplete or inaccurate,
- To request erasure or destruction under KVKK art. 7,
- To request that correction, erasure or destruction be notified to third parties to whom data was transferred,
- To object to a result against you produced by analysis exclusively through automated systems,
- To claim compensation for damage caused by unlawful processing.
8. How to apply
In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, send your request from your registered e-mail address to hello@eroviya.com or in writing to the company address above. Requests are concluded free of charge within 30 days at the latest; where the procedure incurs a separate cost, the fee set by the Board may apply.