Legal
KVKK privacy notice
This notice informs Cuisy users under Article 10 of Turkish Personal Data Protection Law No. 6698 (KVKK). The Turkish version is the binding one. For a plainer summary see the privacy policy.
1. Data controller
The data controller is Yunus Senem (independent developer, Antalya, Türkiye). Applications: [email protected] or the contact page.
2. Data processed and purposes
- Identity and contact: name, e-mail address, Apple or Google account ID. Purpose: creating and managing the account, verifying sign-in, sending verification and password reset messages, answering support requests.
- Professional details: rank, station specialties, city, bio, profile photo, experience, certificates and references. Purpose: providing the Kitchen CV, building teams, sharing documents with the kitchen you choose.
- Transfer preferences (job search status): only if you turn on "Open to transfer"; that you are open to a move, when you can start, preferred cities, desired rank, your "Hide from my current kitchen" and switch-off settings. Purpose: letting Executive and Sous Chefs at other kitchens and businesses verified by Cuisy find you in chef discovery. While on, it is shown to Executive and Sous Chefs of any kitchen and to the owner and recruiters of verified business accounts together with your name, rank, specialties, city and last 2 jobs; it is not shown to your current kitchen while "Hide from my current kitchen" is on, to people you blocked or who blocked you, or to other users.
- Business account (optional): only if you apply on behalf of a hotel, restaurant or catering business; business name, type, city, country, website, tax number (VKN), the authorised person's name and job title, a tax certificate or business licence, and optionally your corporate e-mail address on the website's domain (the verification code is sent there). Purpose: a Cuisy moderator checking by hand that the business is real, protecting cooks from fake job posts. The tax number, contact details and document are visible only to you and Cuisy moderators; the tax number is never looked up in any external registry. A verified business's name, type, city and website are shown to Cuisy users with a "Verified business" badge.
- Job posts and applications: a verified business's post; when you apply, your short note, the documents you choose to share and the application's status. Purpose: running the hiring process. Your application is visible only to you and the business you applied to (its owner and recruiters); the business sees your documents only if you pick them and only while the application is live.
- Core team listings and offers: the Executive Chef's team listing (availability, cities, note, the members picked and their ranks), each member's explicit consent, a verified business's offer and the answer; for an accepted offer, both sides' names, account emails and phones (the Executive Chef's Kitchen CV, the business contact's name and title). Purpose: running hiring as a team. Businesses see only an anonymous summary; contact details are shared only if the Executive Chef accepts the offer, and only with that business. A member can take their consent back at any time.
- Kitchen and communication content: kitchen membership, rank, department, channel messages and photos shared in channels, read status, shift and prep data. Purpose: letting the kitchen team communicate and plan work in the app.
- Security and moderation: reports, copies of reported content, block lists, session records, IP address, device details. Purpose: service and account security, fighting harassment and objectionable content, preventing abuse.
- Purchase information (Cuisy Plus): store (App Store or Google Play), product, subscription status, transaction ID (original transaction ID on iOS, purchase token on Android), period end, auto-renew flag, environment (production or sandbox) and Plus end date. No card or payment details are processed; Apple or Google takes the payment. Purpose: turning Cuisy Plus on and off when it ends, following renewals and refunds. The subscription record is visible only to you; your Plus status, including its end date and badge, is visible to other signed-in Cuisy users.
- Device: push notification token, notification preferences, an anonymous installation ID for app updates, language preference. Purpose: sending notifications, keeping the app up to date, showing the app in your language.
- Legal transaction: version and date of the terms and of this notice you accepted. Purpose: proof of acceptance.
No special categories of personal data (health, biometric data, etc.) are processed; health reports are not accepted.
3. Legal grounds
- Establishing and performing a contract (Art. 5/2-c): account, Kitchen CV, kitchen membership, messaging, notifications, business account verification, job posts, the job applications you choose to send and providing your Cuisy Plus subscription (performance of the contract).
- Legal obligation (Art. 5/2-ç): lawful requests from authorities.
- Establishing, exercising or protecting a right (Art. 5/2-e): records needed in a dispute, acceptance records.
- Legitimate interest (Art. 5/2-f): service and account security, moderation, technical records.
- Made public by you (Art. 5/2-d): details you share openly with other users in your Kitchen CV.
- Explicit consent (Art. 5/1): transfer preferences; processed only when you turn on "Open to transfer" yourself. You can withdraw consent at any time by turning it off; withdrawal does not affect processing before that moment.
4. Transfers
Within Türkiye: data is transferred to public authorities only when the law requires it. By the nature of the app, kitchen content is shown to the authorised members of the same kitchen. Your transfer preferences, while turned on, are shown to Executive and Sous Chefs of other kitchens and to the owner and recruiters of verified business accounts. The tax number, contact details and document of a business application are shown only to Cuisy moderators (not to recruiters). When you apply to a job post, your Kitchen CV, note and the documents you pick are shown only to that business (its owner and recruiters).
Abroad (KVKK Art. 9): to run the service, data is transferred to the following providers, limited to the stated purpose:
- Hetzner Online GmbH: hosting on Cuisy's own server (appwrite.ynssenem.dev) in data centres in the European Union (Germany and Finland). All app data is stored here.
- Cloudflare, Inc.: domain, encrypted (HTTPS) transmission and attack protection.
- Apple Inc. and Google LLC: verifying identity when you sign in with Apple or Google; delivering notifications to your device; taking payment for Cuisy Plus, verifying purchases and reporting subscription changes (renewal, cancellation, refund).
- 650 Industries, Inc. (Expo): delivering app updates; anonymous installation ID, app version and IP address.
These transfers follow the procedures set out in KVKK Art. 9. Data is not sold or used for advertising.
5. How data is collected
Data is collected electronically through the app: some of it you enter (profile, experience, documents, messages), some is created automatically while you use the app (session and technical records). If you sign in with Apple or Google, your e-mail address and, if provided, your name come from Apple or Google. Kitchen membership details may also be entered by the kitchen's Executive Chef and authorised staff.
6. Retention
Data is kept for the periods in section 5 of the privacy policy and is deleted, destroyed or anonymised when the period ends or when you delete your account. When you delete your account your Cuisy Plus subscription records are deleted too; your store subscription is not cancelled automatically, so cancel it separately in your App Store or Google Play settings.
7. Your rights under KVKK Art. 11
By applying to the data controller you can:
- learn whether your personal data is processed,
- request information if it is,
- learn the purpose of processing and whether data is used accordingly,
- know the third parties in Türkiye or abroad to whom data is transferred,
- request correction of incomplete or inaccurate data,
- request deletion or destruction under the conditions of KVKK Art. 7,
- request that corrections and deletions be notified to third parties who received the data,
- object to a result against you arising solely from automated analysis,
- claim compensation if you suffer damage from unlawful processing.
8. How to apply
Write to [email protected] from the e-mail address registered to your Cuisy account, stating your name and request clearly so we can verify your identity. Applications are concluded free of charge within 30 days at the latest. If you are not satisfied with the answer, you can complain to the Turkish Personal Data Protection Board.