Privacy Policy
1. Introduction
This Privacy Policy ("Policy") explains how BRİFTEK REKLAM YAZILIM TİCARET LİMİTED ŞİRKETİ ("Briftek", "Company", "we", "us") collects, uses, stores, and protects the personal data of users ("User", "you") of the YasamAtlas mobile application ("App", "Service").
By using the App, you confirm that you have read, understood, and agreed to this Policy.
Age Restriction: YasamAtlas is intended for use only by individuals aged 18 and over. If you are under 18, please do not use the App or share any personal information.
2. Data Controller Information
| Legal Name | BRİFTEK REKLAM YAZILIM TİCARET LİMİTED ŞİRKETİ |
| Registered Address | Caferağa Mah. Moda Cad. No:5 Kadıköy/İstanbul, Türkiye |
| Tax Office / Number | Kadıköy / 1871750630 |
| VERBİS Registration | Registered (Turkish Data Controllers' Registry) |
| info@briftek.com.tr | |
| Data Protection Inquiries | info@briftek.com.tr |
| Website | https://yasamatlas.app |
3. Personal Data We Collect
3.1. Account Information
- Email address (required for registration and login)
- Password (stored in hashed form; we have no access to plain text)
- Account creation date
3.2. Documents and Content You Upload
- Documents: PDF, image, and text files you upload, such as insurance policies, contracts, warranty documents, and subscription papers
- Document metadata: File name, upload date, file size, document type
- AI analysis output: Summaries, Q&A responses, and analysis results generated from your documents
- Question and answer history: Questions you ask the AI and the responses received
3.3. Usage Data
- In-app interactions: Which features you use, how many documents you upload, how many AI queries you make
- Credit/quota usage: Free and paid plan consumption data
- Device information: Operating system, app version, language preference
3.4. Payment Data
- Subscription status: Active plan, plan start and end dates
- Payment transaction identifiers: Subscription identifiers provided by Google Play and Apple App Store
IMPORTANT: Briftek does not collect, store, or process your credit card information, bank account details, or any other payment instrument data. All payments are processed through Google Play Billing infrastructure and Apple App Store; these details belong to and are managed by the respective platform providers.
3.5. Communication Data
- Information you share when contacting us (email content, request topic, etc.)
4. Purposes of Processing
Your personal data is processed for the following purposes:
- Creating and managing your App account
- Providing document upload, storage, and viewing services
- Delivering AI-powered analysis, summarization, and Q&A features
- Managing subscriptions and payment processes
- Responding to customer support requests
- Improving service quality and security
- Fulfilling legal obligations
- Preventing fraud, abuse, and security threats
5. Legal Basis for Processing
Your personal data is processed under the Turkish Personal Data Protection Law No. 6698 ("KVKK") on the following legal grounds:
- Necessary for the performance of a contract (KVKK Art. 5/2-c): Fulfilling the service agreement
- Necessary for compliance with a legal obligation (KVKK Art. 5/2-ç): Tax, commercial, and consumer law obligations
- Legitimate interests (KVKK Art. 5/2-f): Service improvement, security, fraud prevention
- Explicit consent (KVKK Art. 5/1): For processing not covered by other legal bases
For users in the European Economic Area (EEA), the equivalent legal bases under GDPR Article 6 are: contractual necessity, legal obligation, legitimate interests, and consent.
6. AI Processing — Important Disclosure
YasamAtlas uses Amazon Bedrock through Amazon Web Services (AWS) to analyze your document content and answer your questions. In this regard:
- The content of documents you upload is sent to AWS Bedrock for AI processing
- AWS Bedrock services are hosted in the United States (us-east-1) region
- Your document content is not used by AWS for AI model training (per AWS Bedrock's standard policy)
- AI queries and responses are stored in encrypted form linked to your account
This processing is essential for using the core features of the Service. If you do not wish to use AI analysis, you may choose not to use this feature of the App.
7. Where Your Data Is Stored — International Data Transfers
Your personal data is stored on Amazon Web Services (AWS) infrastructure in the us-east-1 (Northern Virginia, USA) region. This means your data is transferred internationally.
This transfer is carried out under your explicit consent in accordance with KVKK Art. 9. By creating an account, you are deemed to have consented to this transfer.
For users in the EEA: The transfer is conducted with appropriate safeguards as required under GDPR Articles 44–49, including AWS's Standard Contractual Clauses and Data Processing Addendum.
AWS holds international security certifications including ISO 27001, ISO 27017, ISO 27018, and SOC 1/2/3, and protects your data using industry-standard encryption methods.
8. Sharing With Third Parties
Your personal data may be shared with third parties only in the following limited circumstances:
| Third Party | Purpose | Data Shared |
|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure, storage, account management | Account information, documents, AI queries |
| Amazon Bedrock | AI analysis | Document content, query text |
| Google LLC (Google Play Billing) | Subscription payment processing | Subscription identifier, payment status |
| Apple Inc. | iOS subscription payment processing | Subscription identifier, payment status |
| Legal authorities | Compliance with legal obligations | Requested data only |
Briftek does not sell, rent, or transfer your personal data to third parties for marketing purposes.
9. Data Retention Periods
| Data Type | Retention Period |
|---|---|
| Account information | Duration of active account + 30 days after account deletion |
| Uploaded documents | Duration of active account; deleted immediately upon account deletion |
| AI query/response history | Duration of active account; deleted upon account deletion |
| Payment/subscription records | 10 years per Turkish Commercial Code Art. 82 |
| Communication/support records | 3 years |
| Security log records | 2 years |
10. Account Deletion and Data Erasure
You may delete your account at any time through the App or by emailing info@briftek.com.tr.
When your account is deleted:
- All uploaded documents are permanently erased
- Your AI query and response history is deleted
- Your account profile information is anonymized or deleted within 30 days
- Records required by legal obligation (e.g., billing records) are retained for the legally required period
11. Data Security
We have implemented the following technical and organizational measures to protect your personal data:
- Encryption in transit (TLS 1.2+)
- Encryption at rest (AES-256)
- Access control (AWS IAM role-based authorization)
- User-based data isolation (each user can only access their own data)
- Regular security updates
- Limited employee access
Despite all measures, please note that no data transmission over the internet is 100% secure.
12. Your Rights
Under KVKK Art. 11, you have the following rights:
- To learn whether your personal data is being processed
- To request information regarding such processing
- To learn the purpose of processing and whether it is used for that purpose
- To know the third parties to whom your data has been transferred, domestically or internationally
- To request rectification of incomplete or inaccurate data
- To request erasure or destruction within the conditions set forth in KVKK
- To request notification of the actions in (d) and (e) to third parties to whom the data has been transferred
- To object to outcomes adverse to you arising from automated processing
- To claim compensation for damages arising from unlawful processing of your personal data
For users in the EEA: You also have the rights under GDPR Articles 15–22, including the right to data portability and the right to object.
How to Exercise Your Rights: Send an email to info@briftek.com.tr or write to our company address. Your request will be processed within 30 days.
13. Cookies and Similar Technologies
Our mobile application does not use traditional web cookies. However, the App stores secure tokens on your device for session management. These are used solely for login and session continuity.
The landing page (https://yasamatlas.app) may use technically essential cookies that do not perform user tracking.
14. Children's Privacy
YasamAtlas is not intended for individuals under 18 years of age and we do not knowingly collect personal data from this age group. If we become aware that a user under 18 has provided personal data, we will promptly delete the relevant data.
15. Policy Changes
This Policy may be updated from time to time. Significant changes will be communicated via in-app notification or email. The current version will always be available at https://yasamatlas.app/privacy-policy.
16. Contact
For any questions, requests, or complaints regarding this Policy or your personal data:
Email: info@briftek.com.tr
Address: BRİFTEK REKLAM YAZILIM TİCARET LİMİTED ŞİRKETİ
Caferağa Mah. Moda Cad. No:5 Kadıköy/İstanbul, Türkiye
This document is for informational purposes and does not constitute legal advice. Please consult an attorney for specific situations.