KVKK Privacy Notice
1. Controller and contact
The controller is Ali Yılmaz. Cute Meals is the name of the service and mobile application provided by Ali Yılmaz and is not a separate legal entity. Email: contact@cutemeals.com. Personal-data rights and request channel: https://cutemeals.com/veri-haklari.
2. Collection methods
Data is obtained through the mobile app and web forms, authentication services, camera/gallery uploads, usage records, app stores, subscription providers, support and security/crash records.
3. Categories and purposes
Identity/contact data supports accounts; child, health and nutrition data supports personalisation; photos and messages support AI; subscription data supports purchases; technical data supports security and continuity. See the Privacy Policy for the detailed inventory.
4. Why do we need allergy information?
The allergies and allergens you declare are special-category health data about the child. They are processed with your explicit consent for the following personalisation functions, not for diagnosis or treatment:
- Compare recipe ingredients with selected allergies and remove matching recipes or display a warning.
- Add intolerance and excluded-ingredient criteria derived from allergies to external recipe searches.
- Adjust meal suggestions, recipe ranking and ingredient alternatives to the child’s restrictions.
- When you use profile-aware AI, reduce the chance of a response conflicting with known allergies.
5. Legal bases
Account and core-service data relies on contract formation or performance; mandatory records on legal obligation or legal claims; proportionate security and error records on legitimate interests balanced against individual rights. Processing a child’s allergies, conditions and other health data for personalisation relies on separate explicit parental/guardian consent. Contract performance is not presented as an alternative basis for that health data.
6. Recipients, international transfers and risks
Allergy information is not made public or sold for advertising. When the relevant feature is used, necessary data may be transferred to Google Cloud and Supabase for hosting/database processing; Google Gemini for Cutey and photo analysis; OpenAI for certain AI recipe or nutrition functions; and Spoonacular as allergy-derived intolerance or exclusion terms for external recipe search.
These providers may be located outside Türkiye or process data on systems abroad. Although data minimisation, encrypted transmission and access controls are used, transfer is not risk-free. Each recurring international transfer must rely on an applicable KVKK Article 9 adequacy or appropriate-safeguard mechanism and be documented for the relevant provider.
- Unauthorised access or disclosure caused by a security incident, incorrect access control or network attack.
- Messages, profile context, IP address or technical records being combined and linked to the child or account.
- Data becoming subject to another country’s laws, government requests and provider retention or backup processes.
- Incomplete or incorrect AI or external-recipe data missing a hidden ingredient, cross-contact risk or allergen.
7. KVKK Article 11 rights
You may ask whether data is processed, request information, learn purposes and recipients, seek correction/deletion, request notification to recipients, object to automated outcomes and seek compensation where applicable.
8. How to apply
Email contact@cutemeals.com with “KVKK Data Subject Request”, your account email, request and preferred response method. Proportionate verification may be requested. Valid requests are resolved as soon as possible and within 30 days.