Privacy Policy

Last updated: April 2026

1. Data Controller

Data Controller: Zübeyr Toprak

Address: Kavacık Mah. Fatih Sultan Mehmet Cad. No:3/4, Beykoz/İstanbul, Türkiye

Email: info@sumer-app.com

SUMER is a social discovery application designed for adults aged 18 and over. This Privacy Policy explains how we collect, use, and protect your personal data when you use our application.

2. Data We Collect

Account Data: When you sign in with Apple or Google, we receive your authentication token and, if you choose to share it, your email address. We do not have access to your Apple or Google account password.

Profile Data: Date of birth (for age verification), gender preference for matching.

Usage Data: Match history, session duration, coin balance, and purchase history.

Technical Data: Device type, operating system version, app version, crash logs, and anonymized interaction data for product improvement.

Chat Messages: Message content is temporarily stored during active conversations. Messages are automatically and permanently deleted after the conversation ends. See Section 5 for details.

3. How We Use Your Data

We use your data to provide and maintain the SUMER service, verify your age and account, process in-app purchases, enforce our Community Guidelines and Terms of Service, respond to reports and support requests, improve our service and fix technical issues, and comply with applicable legal obligations.

4. Legal Basis for Processing

We process your data based on your consent (account creation and use of the service), performance of our contract with you (Terms of Service), our legitimate interests (platform safety, fraud prevention, service improvement), and compliance with legal obligations (Turkish Law No. 5651 traffic data retention, KVKK, GDPR where applicable).

5. Message Lifecycle and Deletion

SUMER is designed with privacy at its core. Chat messages are stored only during the active conversation session. When a conversation ends, all message content is permanently deleted within 24 hours using hard deletion (not soft deletion). No message content is retained after this period.

Exception — Reported Messages: If a message is reported by a user, a snapshot of the reported content is stored in a separate, access-restricted database for up to 90 days to facilitate investigation by our moderation team. After 90 days, reported message snapshots are permanently deleted.

Traffic Metadata: In compliance with Turkish Law No. 5651, we retain traffic metadata (timestamps, IP addresses, session identifiers) for 1 year. This metadata does not include message content.

6. Data Sharing

We do not sell your personal data. We may share data with service providers who assist us in operating our platform (hosting, analytics, payment processing), law enforcement authorities when required by applicable law or court order, and Apple or Google as part of the authentication and in-app purchase process.

7. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/SSL), secure server infrastructure, access controls and authentication for internal systems, and regular security reviews.

8. Your Rights

Under KVKK (Turkish Personal Data Protection Law) and GDPR (where applicable), you have the right to access your personal data, request correction of inaccurate data, request deletion of your data, object to processing of your data, and request data portability.

To exercise these rights, contact us at info@sumer-app.com. We will respond within 30 days.

You can delete your account and all associated data at any time through the Settings screen in the app.

9. Children's Privacy

SUMER is designed exclusively for adults aged 18 and over. We do not knowingly collect data from individuals under 18. Age verification is performed during account creation. If we discover that a user is under 18, their account will be immediately suspended and their data will be deleted.

10. International Data Transfers

Your data may be processed on servers located outside of Türkiye. In such cases, we ensure appropriate safeguards are in place in accordance with KVKK and GDPR requirements.

11. Data Retention

Account data is retained for as long as your account is active. Chat messages are deleted within 24 hours of conversation end. Reported message snapshots are retained for 90 days. Traffic metadata is retained for 1 year (Law No. 5651). Purchase records are retained as required by applicable tax and commercial law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated through the app or via email. Continued use of SUMER after changes constitutes acceptance of the updated policy.

13. Contact

For questions, concerns, or requests regarding your privacy, contact us at:

Email: info@sumer-app.com

Address: Kavacık Mah. Fatih Sultan Mehmet Cad. No:3/4, Beykoz/İstanbul, Türkiye