KVKK
KVKK Notice (Turkey Personal Data Protection Law)
This notice explains how Expensiv (com.expensiv.app) processes personal data under Turkey’s Personal Data Protection Law No. 6698 (KVKK).
Last updated: 14 August 2026
Data controller
Data controller: Expensiv
Contact: support@expensiv.net
Web: https://www.expensiv.net
What data we process
- Account: email, password (stored securely by Supabase), optional display name
- Expense records: amount, date, category, note, currency
- Partner data: shared expense records with the person you connect
- Audio and images: only when you use voice entry or document reading
- Technical logs: limited server logs for security and troubleshooting (may include IP)
We do not collect location. We do not use advertising or marketing analytics.
Why we process data
- Create accounts and let you sign in
- Save, list, and report expenses
- Extract information from text, voice, and documents (AI)
- Manage shared expenses in partner mode
- Present low-confidence AI results for your approval
- Respond to support requests and keep the service secure
Who we share with
To provide the service, data may be transferred to:
- Supabase — auth and database
- Google Cloud — backend API
- Google Gemini — AI processing only when you use text, voice, or document features
These providers may process data outside Turkey (US/EU). Data is not sold for advertising.
In partner mode, the person you connect can see expenses you share with them.
How long we keep data
Data is kept while your account is open. After Settings → Account → Delete account, data is held for 30 more days; signing in again cancels deletion. After that, app data is removed. Details: account deletion page.
Security logs are kept briefly, then deleted or anonymized.
Your rights
Under KVKK Art. 11 you may learn whether your data is processed, request information, correction, deletion, and object to processing.
- Account deletion: Settings → Account → Delete account — account deletion page
- CSV export: download a monthly CSV from the transaction list
- Requests: support@expensiv.net — answered within 30 days
Security
Data is transmitted over HTTPS. Access is protected with JWT authentication and server-side authorization.
Other
The app is not directed at children under 13. This notice may be updated; the current version is at https://www.expensiv.net/kvkk.
For a general summary see the Privacy Policy.