Privacy Policy

Effective Date: 15 October 2025
App Name: KriptoK
Company Legal Name: Sanal Kasam Teknoloji Anonim Şirketi
Contact Email: privacy@kriptokasam.com

1. Who We Are
We, Sanal Kasam Teknoloji Anonim Şirketi, provide the self-custodial DeFi wallet and swap application KriptoK. This Privacy Policy explains how we process your personal data under GDPR and Turkish Law (KVKK).

2. What We Do Not Collect
We never collect or store your private keys, seed phrases, or recovery phrases. You are solely responsible for safeguarding them.

3. Personal Data We Process
Depending on your usage, we process:

• On-chain data: wallet addresses, transaction hashes, blockchain interactions.
• Device & app data: device model, OS version, app version, crash logs, performance metrics.
• Network data: IP address, language, region, connectivity logs.
• Support & communication: email, feedback, attachments.
• Swap / DeFi interactions: metadata needed to display swap results; we do not control counterparty.
• Marketing (opt-in): email newsletters, push notifications.
  

4. Legal Bases
We rely on:

• Contractual necessity: to operate the wallet and swap features.
• Legitimate interests: security, fraud prevention, analytics.
• Consent: for optional marketing or analytics.
• Legal obligations: compliance with law.
  

5. Purposes of Use

• To operate, display balances/transactions, and execute swaps.
• To protect and secure the app (fraud detection, debugging).
• To respond to support requests.
• To send updates / marketing if you opted in.
• To comply with legal obligations.
  

6. Data Retention

• Off-chain data (logs, support tickets) kept only as long as necessary.
  On-chain data is immutable and public; we cannot delete it.
  

7. Security
We use encryption, access controls, secure servers, and other industry standards to protect off-chain data. You must protect your seed phrase, private keys, and device.

8. Your Rights
You have rights under GDPR and KVKK: access, correction, deletion, restriction, objection, portability, and withdraw consent.
To exercise them, send email to privacy@kriptokasam.com. We will respond within statutory time limits, explaining limitations around on-chain data.

9. International Transfers
Some processing may occur internationally. We rely on Standard Contractual Clauses (SCCs) under GDPR and KVKK standard contracts / explicit consent for cross-border transfers under Turkish law.

10. Children
The app is intended for users ages 18+. We do not knowingly process data of children under 18.

11. Third-Party Services / dApps
When you use swap / bridge / DeFi integrations, those services’ privacy policies apply. Review them before use. We do not control those third parties.

12. Changes to Policy
We may update this Privacy Policy. The updated version will appear in the app, and users will be notified of material changes.

13. Contact Information
Sanal Kasam Teknoloji Anonim Şirketi
Email: privacy@kriptokasam.com Address: Fenerbahçe Mah. İğrip Sk. No: 13 İç Kapı No: 1 Kadıköy/ İstanbul