1. Purpose
HITDEV AI Teknoloji A.Ş. (“HITDEV AI” or “Company”) processes users’ personal data in accordance with applicable data protection laws, including but not limited to the Law on the Protection of Personal Data No. 6698 (“Law No. 6698”).
Personal data that you provide to the Company, or which is obtained through other means, may be processed by HITDEV AI as a Data Controller for specific and lawful purposes, in a limited and proportional manner, while ensuring data accuracy and currentness.
The data may be recorded, stored, preserved, reorganized, and transferred to authorized public bodies, or shared with third parties domestically and internationally under legal conditions or your explicit consent when required. It may also be subject to other legal processing methods and procedures.
This Privacy Policy outlines how HITDEV AI ensures compliance with Law No. 6698 and describes the collection, use, protection, sharing, and management of your personal data.
2. Collection of Personal Data and Method
HITDEV AI collects and processes personal data for the purposes outlined in this policy. This may include, but is not limited to, the following information:
- Name and surname
- Email address and phone number
- Purchase and order history (including in-app purchases)
- Uploaded photos or images, including multiple images submitted together in a single request
- Advertising ID (IDFA), Vendor ID (IDFV), and IP address
- Login credentials (username, email, password)
Data Categories and Types:
- Identity Information: Name and surname
- Contact Information: Phone number, email address
- Process Security: IP address, traffic data, device information, in-app purchase history, IDFA, IDFV, Token ID
- Visual and Audio Records: Photos uploaded by the user, and results generated from them
- Customer Transaction: Order history
- Marketing Data: IDFA, IDFV
Personal data may be collected via electronic or physical means, through devices, third-party platforms such as app stores, or tools integrated into our services. Log data such as IP address, device name, operating system version, application settings, and timestamps may also be collected automatically.
General Principles for Processing Personal Data:
- Lawfulness and good faith
- Accuracy and up-to-dateness
- Processing for specific, clear, and legitimate purposes
- Proportionality and data minimization
- Retention only for the period required by law or necessity
3. Processing of Facial and Image Data
3.1. Data Collected
When you use features involving photo or face processing, HITDEV AI may process facial data such as facial geometry, facial feature points (eyes, nose, mouth), symmetry characteristics, and full-face images.
3.2. Purpose of Processing Facial and Image Data
Facial data is processed exclusively to provide photo-editing services, AI-based image and video generation, improve output accuracy, and enhance application performance. Facial data is not used for identity verification, facial recognition, or authentication purposes.
3.3. Storage and Retention of Facial and Image Data
Uploaded images, the results generated from them, and the temporary files created during processing are retained only for as long as reasonably necessary to perform the operation you requested, deliver the result to you, and make it available in your in-app history, unless a longer retention period is required for legal, security, fraud-prevention, or operational purposes.
You may delete your uploaded images and generated results at any time from within the Application. Deletion removes the content from HITDEV AI systems.
Facial data extracted during processing is used only to perform the requested operation and is not used to build facial-recognition profiles or to identify individual users.
3.4. Storage Location and Security
Facial and image data is processed on secure cloud infrastructure and through the third-party AI processing providers engaged to deliver the relevant functionality. HITDEV AI applies encryption, restricted access, and secure communication channels to protect such data.
3.5. Sharing of Facial and Image Data
HITDEV AI does not sell, rent, or trade facial data or uploaded content. Your uploaded content may be transmitted to the third-party AI processing providers identified in Section 3.4 only where necessary to perform the operation you have requested.
3.6. Third Parties Handling Facial and Image Data
The providers identified in Section 3.4 process uploaded content on behalf of HITDEV AI, under written agreements containing confidentiality, security, and data-protection obligations. They may process the content only in order to deliver the result you requested, and may not use it for their own purposes.
3.7. Consent and Withdrawal
Before your content is transmitted to a third-party AI processing provider for the first time, the Application will ask for your explicit consent and will identify the providers concerned and the purpose of the transfer. No content is transmitted before that consent is given.
Consent to the transfer required to generate your result is necessary for the generation features to function. If you decline, those features will not be available to you, but you may continue to use the rest of the Application. Consent to the storage of your uploads and results in your in-app history is optional and may be declined without affecting the generation features.
You may withdraw either consent at any time from Settings → Privacy within the Application. Withdrawal stops any further transfer and deletes content already stored.
4. Purposes and Legal Basis of Processing
4.1. Purposes of Processing
Ensuring compliance with legal obligations
Communication with users and providing user support
Improving and personalizing services
Performance of contracts and after-sales support
Ensuring information security and operational continuity
Marketing analysis and advertising activities (with user consent)
Storage, archiving, and complaint resolution
AI-based image processing
Retaining your uploads and results in your in-app history, where you have consented to this
4.2. Legal Grounds for Processing
Formation and execution of a contract
Compliance with legal obligations
Legitimate interests, provided that user rights and freedoms are not violated
Explicit user consent where required by law
5. Third-Party Sites and Applications
Our applications may contain links to third-party websites or services that are not controlled by HITDEV AI. We are not responsible for the content, privacy practices, or policies of such third-party services. Use of these services is at your own risk.
6. Cookies
Cookies are small data files stored on your device to improve user experience. Cookies do not access personal files stored on your device. You may manage or delete cookies through your browser settings.
7. Push Notifications
HITDEV AI may send push notifications regarding application updates or important alerts. You may manage or disable push notifications through your device settings at any time.
8. Data Retention
Personal data is retained only for the period required by applicable laws or necessary for the purpose of processing.
User-uploaded images and videos, as well as temporary processing files or intermediate outputs, are retained only for as long as reasonably necessary to perform the requested generation, editing, enhancement, or upscaling functionality and to provide the resulting output, unless otherwise required for legitimate operational, security, or legal purposes.
Personal data processed based on user consent is deleted or anonymized once the consent period expires or once you withdraw your consent.
9. Security Measures
HITDEV AI implements appropriate technical and administrative measures to protect personal data, including but not limited to:
- Antivirus and firewall protection
- VPN-secured system access
- Role-based access control
- Encryption and secure data transmission
- Logging and two-factor authentication
- Penetration testing and SIEM monitoring
- Information Security Management System (ISMS) compliance and staff training
- Physical security measures for paper-based records
- Cloud backups and disaster recovery systems
- Employee non-disclosure agreements
In the event of a personal data breach, affected users and the relevant authority will be notified in accordance with legal requirements, and necessary corrective actions will be taken.
10. Data Transfers
Personal data may be transferred domestically or internationally for the following purposes:
- Archiving and storage
- Operational activities and CRM processes
- Compliance with legal obligations
- Cloud infrastructure and AI-based processing of uploaded images
- Use of third-party services such as Adjust, Firebase Analytics, Facebook SDK, Google Cloud, where applicable
Depending on the feature used, certain service providers may receive uploaded images and related technical information solely in order to perform the requested processing operation.
11. Your Rights
Under Article 11 of Law No. 6698 and the GDPR (where applicable), you have the right to:
- Learn whether your personal data is processed
- Request information regarding data processing
- Request correction, deletion, or anonymization of personal data
- Object to processing based solely on automated decision-making
- Request data portability
- Withdraw your consent at any time, as described in Section 3.7, without affecting the lawfulness of processing carried out before withdrawal
- Submit complaints to relevant supervisory authorities
- You may delete your uploaded content and generated results at any time from within the Application.
- You may exercise your other rights by submitting a written request with proper identification to: support@hitdevai.co
- Requests will be responded to within thirty (30) days. If a request is rejected, a written explanation will be provided.
12. Updates to the Privacy Policy
HITDEV AI reserves the right to update this Privacy Policy when necessary. Continued use of our services following any updates constitutes acceptance of the revised policy.
13. Contact Information
Company Name: HITDEV AI Teknoloji A.Ş.
Address: Ataköy 7-8-9-10. Kısım Mahallesi Çobançeşme E-5 Yan Yol Caddesi No: 12/2/59, Bakırköy, İstanbul, Türkiye
Email: support@hitdevai.co
Phone: +90 501 189 60 94