TheVoidHub Privacy Policy and KVKK Information Notice

Last updated: 22 May 2026

This Privacy Policy explains how we process your personal data when you use the TheVoidHub ("Application", "Service", "we") desktop, web, and mobile clients. It also serves as the information notice required by the Turkish Personal Data Protection Law No. 6698 ("KVKK"). The Turkish-language version remains the legally authoritative text; this English translation is provided for convenience.

1. Data Controller

Under KVKK, your personal data is processed by the following entity as the data controller:

• Data controller: Pinkontin Software
• Address: Istanbul, Türkiye
• Contact email: support@pinkontin.com

2. Personal Data We Process

When you use the Application, we process the following personal data:

• Account information: your email address, username, display name, and password. Your password is stored only in irreversibly hashed form. If you choose to sign in with Google, we receive your email address and name from Google.
• Profile information: your profile picture, status, and the profile settings you choose.
• Content you create: messages, images, and files you send; groups and channels you create.
• Technical data: connection logs (including IP address), device and application version information, and the push notification token used to deliver notifications to you.

We do not collect special categories of personal data (health, religion, biometric data, etc.); please do not share such data through the Application.

3. Purposes of Processing

We process your personal data only to provide the Service:

• to create and manage your account and authenticate you,
• to provide communication features, including messages, calls, and voice channels,
• to deliver notifications to you,
• to safeguard the Service and prevent abuse and fraud,
• to comply with our legal obligations and respond to requests from competent authorities.

We do not sell your personal data; we do not use it for advertising or cross-application tracking.

4. Legal Bases for Processing

Your personal data is processed under Article 5 of KVKK on the following legal bases:

• being directly related to the conclusion or performance of a contract (providing your account and the Service),
• compliance with our legal obligations as data controller,
• our legitimate interests, provided your fundamental rights and freedoms are not harmed (security and abuse prevention),
• your explicit consent, where required.

5. Voice Calls and Voice Channels

Voice channels and one-on-one calls are transmitted in real time; they are not recorded or stored by us.

6. Sharing of Personal Data

To deliver the Service, your personal data is shared only with the following service providers, to the extent the respective service requires:

• Google Firebase — account sign-in and push notification delivery,
• Resend — sending transactional email such as email verification,
• Contabo — our hosting provider, which stores the data needed to run the Service.

These providers process the data only within the scope of the service they deliver to us. In addition, disclosures to authorized public authorities may be made only where legally required under applicable legislation.

7. Cross-Border Transfers of Personal Data

The Service's servers are located in Germany, and some of our service providers (such as Google and Resend) are located outside of Türkiye. For this reason, your personal data is transferred abroad for the purpose of providing the Service, under Article 9 of KVKK. By creating an account and accepting this Privacy Policy, you acknowledge that you have been informed about the cross-border transfer of your personal data for the purposes stated in this policy.

8. Retention Periods and Account Deletion

Your account information and the content you create are retained for as long as your account is active. Connection logs are retained for one year, as required by applicable legislation.

When you delete your account, your account is deactivated; your personal data and content are retained for one year so that we can comply with legal obligations and respond to possible official requests, after which they are permanently deleted. A new account cannot be created with the email address of a deleted account.

9. Data Security

Your data is transmitted over encrypted connections (HTTPS/TLS). Passwords are stored only in hashed form. Appropriate technical and administrative measures are taken to prevent unlawful processing of personal data and unlawful access to it. In the event of a data breach, we will inform the Turkish Personal Data Protection Authority and the affected data subjects in the manner required by law.

10. Rights of the Data Subject (KVKK Article 11)

Under Article 11 of KVKK, you have the following rights regarding your personal data, exercisable by applying to the data controller:

• to learn whether your personal data is processed,
• if processed, to request information about it,
• to learn the purpose of processing and whether the data is used in accordance with that purpose,
• to know the third parties to whom the data is transferred domestically or abroad,
• to request correction if the data has been processed incompletely or incorrectly,
• to request erasure or destruction under the conditions set out in KVKK,
• to request that correction, erasure, or destruction be notified to third parties to whom the data has been transferred,
• to object to a result against you arising from analysis of the processed data exclusively by automated systems,
• to claim compensation for damages suffered as a result of unlawful processing.

To exercise these rights, contact us at support@pinkontin.com. Your request will be answered as soon as possible according to its nature, and in any case within thirty days.

11. Children's Privacy

TheVoidHub is not directed at children under the age of 13. We do not knowingly collect personal data from anyone we know to be under 13. If we become aware that we have processed data belonging to a child under 13, we delete it.

12. Cookies and Local Storage

Our web client uses browser storage only for essential functions (such as keeping your session open). We do not use cookies for advertising or tracking purposes.

13. Changes

This Privacy Policy may be updated from time to time. When updated, the "Last updated" date above is changed. We will notify you through the Application of significant changes.

14. Contact

For questions about this Privacy Policy or your personal data: support@pinkontin.com