# Viral Pulse Privacy Policy
**Last updated:** August 11, 2026
**Effective date:** August 11, 2026
## 1. Data Controller
This Privacy Policy applies to the personal data processed in the Viral Pulse application and related services operated by Yasin [Your Surname] (Individual Developer).
**Data Controller:**
* **Title:** Yasin Guzel (Individual Developer)
* **Address:** Konya, Turkey
* **Email:** infoygyazilim@gmail.com
* **Data Subject Request Address:** infoygyazilim@gmail.com
## 2. What Data Do We Collect?
### 2.1. Account and Identity Information
When you log in with Google or Apple, the following information may be received: Firebase user ID, email address, first and last name, display name, profile photo, login provider, account creation, and last login time.
### 2.2. Profile Information
Provided by the user or determined from device settings: country and country code, language preference, profile photo, username, social media links, profile information related to campaigns may be processed.
### 2.3. Campaign and Content Information
In case you create a campaign or participate in a campaign: campaign title, campaign description, campaign category, target country, target number of users, reward and budget information, uploaded video, video file information, campaign status, campaign dates, profile image uploaded by the user may be processed and displayed to other users depending on the nature of the service.
### 2.4. Post and Verification Information
For the purpose of verifying a social media post: post URL, standardized/canonical URL, post date, public description and title information, public username or author information, video duration, campaign-specific tag, verification results, appeal and report records, moderation decisions, fraud/risk signals may be processed. Viral Pulse may send a technical request to the public URL submitted by the user for post verification. Access to private accounts or content without access permission is not guaranteed.
### 2.5. Device and Technical Information
For the purpose of security, account integrity, and preventing abuse: SHA-256 hash generated from device ID or installation ID, device, application and operating system information, Firebase App Check information, hash generated from IP address, connection and transaction times, error and performance logs, FCM token for app notifications, device and session security signals may be processed. IP address and device information are kept in hashed form directly where possible. Hashing does not mean the data is completely anonymous; it may continue to qualify as personal data for security and fraud prevention purposes.
### 2.6. VP and Transaction Information
Within the scope of the in-platform economy: VP/microVP balance, locked balance, earned rewards, campaign budgets, commissions, wallet transaction records, rewarded ad sessions, reward verification records may be processed. Viral Pulse does not collect bank account, IBAN, or payment card information in its current structure. If such a feature is added in the future, further information will be provided.
### 2.7. Notification Information
To send application notifications: Firebase Cloud Messaging token, notification type, notification time, notification content, relevant campaign or task information may be processed. You can turn off notification permissions from your device settings.
### 2.8. Advertising Information
In case you use rewarded ads, Google AdMob and related advertising providers may process: ad impressions, ad interactions, ad rewards, ad verification information, device and advertising identifiers, approximate country or region information. The privacy policies of the advertising providers apply separately.
## 3. For What Purposes Do We Use the Data?
Personal data is processed for the following purposes:
* creating an account and verifying identity,
* managing the account and profile,
* providing campaign and task services,
* hosting video and profile files,
* verifying post links,
* executing VP calculations and transaction records,
* managing rewarded ad processes,
* preventing fraud, forgery, and abuse,
* making device and IP-based security checks,
* conducting appeal, report, and moderation processes,
* sending notifications,
* improving service performance and security,
* detecting technical problems,
* fulfilling legal obligations,
* meeting the demands of authorized public institutions,
* resolving disputes and protecting our rights.
## 4. Legal Grounds
Personal data may be processed on the following legal grounds according to applicable legislation: establishment or performance of the contract, fulfillment of legal obligations, establishment, exercise or protection of a right, legitimate interest regarding service security and prevention of abuse, explicit consent, fulfilling the demands of authorized institutions. You can withdraw your consent at any time in transactions based on explicit consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
## 5. Automated Evaluation and Fraud Prevention
Viral Pulse may utilize automated systems in task and post verifications. These systems may evaluate the following signals: repeated URLs, post time, compliance with campaign rules, device and IP repetitions, transaction frequency, account history, reports, previous security warnings. As a result of automated evaluation, the transaction may be rejected, put on hold, or directed to manual review. Where legislation requires, you can request an explanation about the decision and use the appeal mechanism. Appeals can be made via infoygyazilim@gmail.com
## 6. With Whom Can We Share Personal Data?
Personal data may be shared with the following parties only to the extent necessary:
* Firebase Authentication, Firestore, Cloud Functions, Firebase Cloud Messaging, and Firebase App Check services,
* Google Sign-In and Google's relevant authentication services,
* Apple authentication services,
* Google AdMob and ad verification services,
* Cloudflare R2 or similar file storage providers,
* social media platforms and public sharing pages,
* technical infrastructure, security, hosting, and support service providers,
* accounting, legal, and audit service providers,
* courts, law enforcement, regulatory bodies, and other authorized public institutions.
Campaign information and videos published within the scope of the campaign may be viewed by other Viral Pulse users depending on the nature of the campaign. If the user's post link is public, the link and public page information may be processed during the verification process.
## 7. International Data Transfer
The infrastructure of service providers used by Viral Pulse such as Firebase, Google, Apple, AdMob, and Cloudflare may be located outside Turkey or may process data on servers outside Turkey. Therefore, personal data may be transferred abroad within the framework of legal mechanisms in accordance with the applicable KVKK, GDPR, and other applicable data protection legislation. The user accepts that such international data transfer may be required in order for the service to be technically provided.
## 8. Retention Periods
Personal data may be stored as long as your account is active, as long as it is necessary for the provision of the service, during legal retention obligations, during disputes, audits, or security investigations. The applied periods are as follows:
* **Account and profile information:** As long as the account is active.
* **Campaign and transaction records:** 10 years.
* **Financial and VP transaction records:** 10 years.
* **Security, device, and IP hash records:** 24 months.
* **Support and appeal records:** 24 months.
* **Deletion request records:** 3 years.
* **After deletion or anonymization:** Only limited records necessary for legal and security purposes are kept anonymously.
## 9. Account Deletion
You can request to delete your account via the account deletion feature within the application or from the infoygyazilim@gmail.com address. The deletion process may require re-verifying the account, checking ongoing campaigns and tasks, finalizing pending verification and reward transactions. For accounts with pending tasks, appeals, rewards, or campaign transactions, the deletion process may be delayed until these transactions are completed. When the account is deleted, identifying information may be deleted or anonymized.
## 10. Security
Technical and administrative measures such as access controls, authentication, Firebase App Check, encryption, hashing, server-side controls, and transaction logs can be used to protect personal data. However, no method of transmission over the Internet or method of electronic storage provides a guarantee of absolute security. In case of suspected unauthorized access or data breach, necessary notifications will be made in accordance with applicable legislation.
## 11. Children's Privacy
Viral Pulse does not allow individuals under the age of 18 to use the service without the permission of a parent or legal guardian. If you think data has been collected in violation of the age limit, you can notify us at infoygyazilim@gmail.com Following the necessary examination, the relevant account and data may be deleted.
## 12. Cookies and Website
The Viral Pulse mobile application and the Viral Pulse website may use different technical mechanisms. On pages using Google Sites or another website hosting service, the relevant platform's own cookies, log records, and analytics technologies may be present. These technologies may be separate from the data processing activities in the Viral Pulse mobile app.
## 13. User Rights
Under applicable data protection laws, you may have the following rights: to learn whether your personal data is processed, to request information if processed, to learn the purpose of processing and whether they are used in accordance with the purpose, to know the third parties to whom they are transferred domestically or abroad, to request correction of incomplete or inaccurately processed data, to request deletion or destruction of data when legal conditions are met, to request notification of transactions to third parties, to object to the occurrence of a result against you due to automated systems, to claim compensation for damages due to unlawful processing. You can send your requests via infoygyazilim@gmail.com
## 14. Changes to the Privacy Policy
This Privacy Policy may be updated. The current text is published on our website. Important changes can be additionally notified via the app or email.
## 15. Contact
For your privacy and personal data requests:
* **Email:** infoygyazilim@gmail.com
* **Address:** Konya, Turkey
* **Data Controller:** Yasin Guzel (Individual Developer)