Privacy Policy and KVKK Noteice
Last updated: 19 July 2026
This notice is prepared under Turkey’s Personal Data Protection Law No. 6698 (“KVKK”) to inform you how your personal data is processed by Unnab (the “Platform”). As a platform offering well-being and movement content, we process your data only to provide and improve the service, and only to the extent necessary.
1. Data Controller
Your personal data is processed by the data controller operating the Unnab platform. To exercise the rights described here or for any questions, you can write to bilgi@unnab.com.
2. Personal Data We Process
- Account information: your name, email address, your password (stored in an irreversibly encrypted form) and, if used, your Google sign-in identifier.
- Profile and survey answers: age, gender preference, height, weight, goal, exercise experience, activity level and your preferred duration/days.
- Health and well-being data: diagnosed conditions, movement limitations, sensitive areas, water/sleep/movement/breathing and mood records, body measurements, medication and supplement details.
- Usage data: completed programs, plan progress, and technical records for session and security purposes (e.g. a hashed form of IP information).
3. Your Health Data and Explicit Consent
The health-related data above is special-category personal data under Article 6 of the KVKK and is processed only with your explicit consent. We use this data to create a suitable movement plan for you, to show safety warnings and to let you track your progress. You may withdraw your consent at any time, after which the related processing stops. Unnab does not use this data for diagnosis or treatment.
4. Purposes of Processing
- Creating and managing your account,
- Preparing personalized programs and recommendations,
- Enabling your daily well-being tracking,
- Ensuring the security of the service and preventing misuse,
- Communicating with you about the service by email.
5. Legal Grounds
Data for operating the account and service is processed on the ground of performance of a contract; security records on legitimate interest and legal obligation; and health data on the ground of explicit consent.
6. Transfer of Data
Your data is shared, only to the extent necessary to provide the service and under confidentiality obligations, with our hosting and email infrastructure providers, and with Google solely for authentication when you choose to sign in with Google. Your data is not sold or rented to third parties for marketing.
7. Retention Periods
Your personal data is retained while your account is active and for the periods required by applicable law. When you request deletion of your account or data, your data is deleted or anonymized, subject to legal retention obligations.
8. Your Rights (KVKK Art. 11)
You have the right to learn whether your personal data is processed, to request information, to learn the purpose of processing, to request correction, deletion or destruction if processed incompletely/incorrectly, to object to processing and to request compensation for damages. To exercise these rights, you can contact bilgi@unnab.com.
9. Data Security
Your passwords are stored irreversibly, connections are encrypted with HTTPS, and access to your data is limited to what is necessary to operate the service. We handle your health data with particular care.
10. Changes
We may update this notice from time to time. The current version is always published on this page and the “last updated” date is changed.
Related documents: Privacy & KVKK · Terms of Use · Cookie Policy