This Privacy Policy explains how Jüri60 (“we”) process personal data when you use the Jüri60 website and mobile app. We act as data controller under Türkiye’s Personal Data Protection Law (KVKK) No. 6698.
Data we process
Account: email, display name, username (@), password (hash only), optional phone, biography, profile photo, birth date and gender (if you provide them)
Identity provider: Google account ID and email when signing in with Google; birth date, gender, profile photo, and phone number when granted
Usage: questions, votes, hashtags, follow/block lists, group membership, reports, bookmarks, likes / dislikes, Mind Match similarity scores, compatibility dilemmas and match chat messages, Verified badge applications
, Daily Contest predictions, badge statisticsTechnical: session token (JWT), device key, app version, language preference, mobile push token (when you allow notifications)
Payments: order number, package info (we do not store card details)
- Contact matching (mobile only, optional): If you grant permission, one-way SHA-256 hashes of phone numbers and emails from your device address book are sent to the server. Contact names and raw phone numbers/emails are never uploaded or stored. We may retain those hashes on your account so we can show which friends already use Jüri60 and notify you when a contact joins (reverse notify). Hashes are deleted when your account is deleted or when you revoke access and clear/replace your contact hash set. We also keep hash fields derived from your own account phone/email for comparison only.
- Appear in contacts (optional): By default you may show a mutual-contacts badge when both you and another member have each other in synced address books and both keep this setting on. You can turn it off in notification/privacy settings; one-way contact matching can still work without the mutual badge.
Purposes
Account and session management, voting and matching services, profile identity, security and moderation, Gold / credit orders, notifications, legal obligations, and support.
Retention
We keep data while your account is active and for applicable legal retention periods. After an account deletion request we delete or anonymize data within a reasonable time, except where law requires retention.
Third parties
Google (sign-in and optional Google Pay)
Google Tag Manager / Google Analytics when enabled by the operator
Infrastructure and email providers needed to run the service
Your rights
You may request access, correction, or deletion via Contact or kvkk@juri60.com.