Legal information
28 is operated from Türkiye and processes personal data under the Turkish Personal Data Protection Law No. 6698. Every text that applies when you use the app and this site is listed below.
Last updated: 10 September 2026
These are translations. The Turkish originals are the versions that govern; where an English text and its Turkish counterpart differ, the Turkish prevails. The Turkish set is here.
Identity details are still to be filled in. The fields shown as dotted gaps — the data controller's name and surname, national ID number, business address, tax and MERSİS details and registered electronic mail address — will be entered once the sole proprietorship has been registered. Until those fields are completed and the texts approved by a lawyer specialising in data protection and technology law, the documents are not final. The app is currently in a closed test run through Apple TestFlight; participation is voluntary and by invitation.
Protection of personal data
Which personal data we process and why, who we share it with, how long we keep it, and how you exercise your rights.
- Personal Data Processing Notice Data categories, purposes of processing and legal grounds; transfers within Türkiye and abroad; retention periods; your rights under Article 11.
- Explicit Consent Five separate items of consent — persona, location, transfer abroad, analytics SDK and marketing messages. Each is given and withdrawn independently.
- Privacy Policy A shorter, more accessible summary of the Notice, prepared for App Store requirements.
- Data Subject Request Where and how to send requests for information, correction, erasure and objection to processing.
Using the app
The agreement between the parties when you use 28.
- Terms of Use Membership agreement: the age limit of 18, community rules, responsibility when meeting in person, notice-and-takedown, termination and jurisdiction.
Technologies and tracking
The software development kits actually used in the app, device identifiers and local storage.
- Cookie and SDK Policy The line between strictly necessary technologies and the analytics SDK that requires explicit consent, retention periods and how to manage your preferences.
Commercial communication
Campaign and promotional messages are governed by Law No. 6563, separately from the data protection legislation.
- Commercial Electronic Message Consent Permission for SMS, email and marketing notifications; İYS registration and the three-business-day right to opt out.
Contact
Requests about your personal data are answered within 30 days at the latest.
- kvkk@28istanbul.com Applications under the data protection legislation and questions about privacy.
- support@28istanbul.com Content and profile reports, objections to account decisions.