KVKK Information Notice
Data controller
Nivorai is operated by İlkay Bora as an individual, not a registered company, based in Turkey. No separate tax number is issued for this activity. Contact: hello@nivorai.app, or find every way to reach the developer at ilkaybora.com.
Data subjects
Anyone who creates a Nivorai account, accepts an invite, or contacts us via email or support channels.
Categories of data
Identity (name as you provide it), contact (email), authentication (hashed password, 2FA secret), account activity (login timestamps, IP address for rate-limit and abuse prevention), product data you generate inside Nivorai (tasks, notes, journal, mood, finance, fitness, focus, habits), product analytics events (event names + short structured metadata, never free-form content), and billing metadata from Stripe.
Legal basis (KVKK Art. 5/6)
Performance of the service contract you sign up for; legal obligations (tax invoicing, anti-abuse); legitimate interest (security, fraud prevention, product analytics, product improvement); explicit consent (AI features, marketing communications, beyond the necessary).
Recipients
Stripe Payments Europe (Ireland), Resend (USA — transfers under EU Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable), Google Cloud / Gemini (USA — same SCC + DPF basis) and our hosting provider Hetzner. We do not transfer data to other third parties.
International transfers
Some processors are based outside Turkey/EU. Transfers occur under standard contractual clauses and the EU-US Data Privacy Framework where applicable.
Your rights
Under KVKK Art. 11 you may request information about your data, ask for correction, deletion or anonymisation, object to processing, and lodge a complaint with the Turkish Personal Data Protection Authority (KVKK). Use Settings → Account or hello@nivorai.app.