Privacy policy

Version [Metin sürümü] · Effective date [Yürürlük tarihi]

This policy explains which personal data DocDecay ("the service", by HKSolutions) processes, why, for how long, and which rights you have. It applies to the DocDecay Android app, the web viewer at https://docdekay.needsolutions.net and the related server.

1. Controller and contact

• Controller: [HKSolutions yasal unvan] ([Şirket türü (ör. Ltd. Şti. / A.Ş. / şahıs şirketi)]), [HKSolutions tescilli adres]
• Tax office and number: [Vergi dairesi ve vergi numarası] · MERSIS: [MERSİS numarası]
• Registered electronic mail (KEP): [KEP adresi] · Phone: [İletişim telefonu]
• Privacy requests: [Kişisel veri başvuruları için e-posta adresi] · General support: support@needsolutions.net
• Contact person: [Veri sorumlusu irtibat kişisi] · Data protection officer: [Veri koruma görevlisi (varsa) veya "atanmamıştır"]
• EU representative (Art. 27 GDPR): [GDPR Madde 27 AB temsilcisi (gerekiyorsa) veya "gerekmiyor"]
• Grievance officer (India, DPDP Act): [Hindistan DPDP şikâyet yetkilisi (gerekiyorsa)]

2. How the service works, in short

A sender photographs or selects a document in the app. The server removes all image metadata (EXIF, including location), encrypts the image with AES-256-GCM and keeps it only in memory (RAM) for the lifetime chosen by the sender — at most 24 hours. The recipient opens a link. Each time the document is shown, the server bakes a visible watermark into the image with the recipient name entered by the sender, the recipient's IP address and the time (UTC). When the time or view limit is reached, or when the sender deletes it, the image is destroyed. Document images are never written to disk, logs or backups.

No technical measure can stop someone from photographing a screen with a second device. The service is designed to deter and to make a leak traceable, not to make it impossible.

3. Data about senders (app users)

The app does not ask for your name, e-mail address or phone number. An anonymous account is created on first use.

• Account identifiers: a random device identifier generated by the app and a hash of a random device secret (used to sign in), creation time and time of last sign-in.
• Language and plan (Free or Pro).
• Free quota: the number of documents created this calendar month, counted per account and per device. For the per-device count the app sends its app-scoped Android ID; the server stores only a keyed hash of it, never the identifier itself.
• Notifications (only if enabled): the Firebase Installation ID of the app, so that the server can send you a notification when your document is viewed or deleted.
• Subscription (only if you buy Pro): the Google Play purchase token (stored hashed and encrypted), product, plan, status, renewal and expiry dates, trial and test-purchase flags. Google Play processes the payment; we never receive your card or bank details. A random reference that contains no personal data is passed to Google Play to link the purchase to your account.
• Documents you create: the encrypted image (in memory only, see section 2) and its record: the recipient name you entered, lifetime, view limit, PIN (stored only as a salted hash, Pro), status, image dimensions and times. The record contains no image.
• Device integrity (only if enabled, see section 7): a verdict from Google Play Integrity and one recall bit.

4. Data about recipients (people who open a link)

Recipients do not need an account. Before the document is shown, the web viewer informs them that the session is recorded with their IP address and the time of access.

• Access records: IP address, browser user agent, time of the event, event type (viewed, wrong PIN, locked, denied, session ended) and how long the document stayed open.
• The recipient name entered by the sender, the IP address and the time are part of the visible watermark of each view.
• No location is determined from the IP address, and no cookies, tracking pixels or analytics are used in the viewer.

The sender sees these records in the app. Free accounts see masked IP addresses; Pro accounts see the full IP address and device details.

5. Purposes and legal bases

• Providing the service to senders (accounts, documents, links, notifications, subscriptions): performance of a contract (Art. 6(1)(b) GDPR; KVKK Art. 5(2)(c)).
• Watermarking and access records: our legitimate interest and the sender's legitimate interest in deterring and proving unauthorised copying and in security (Art. 6(1)(f) GDPR; KVKK Art. 5(2)(f)).
• Free quota per device and device integrity: prevention of abuse and fraud (Art. 6(1)(f) GDPR; KVKK Art. 5(2)(f)).
• Rate limiting and security logs: security of the service (Art. 6(1)(f) GDPR; KVKK Art. 5(2)(f)).
• Legal obligations, for example responding to authorities: Art. 6(1)(c) GDPR; KVKK Art. 5(2)(ç).

We do not use your data for advertising, profiling or sale. The app and the viewer contain no advertising or analytics SDKs.

6. Retention

• Document images: in memory only, deleted at the end of the chosen lifetime (maximum 24 hours), when the view limit is reached or when the sender deletes the link — whichever comes first.
• Access records of recipients: 365 days (about 12 months), then deleted automatically; earlier if the sender deletes the account.
• Account, document records and subscription records: until you delete the account. Free accounts that have not signed in for 180 days are deleted automatically.
• Free quota counters: the current and the previous calendar month only. When an account is deleted, its counter is deleted; the per-device counter (a number linked to a keyed hash) remains until the end of the month so that deleting and recreating accounts cannot bypass the Free limit.
• Server logs: contain masked IP addresses and no document content or tokens; they are rotated after a short period.
• Backups: encrypted daily backups of the database (records only, never document images) are kept for 30 days. Deleted data disappears from backups within this period.
• Rate-limit counters: a keyed hash of the IP address, kept for minutes.

7. Recipients of data and processors

• Hosting: [VDS sağlayıcısının unvanı ve veri merkezi ülkesi], which operates the servers on our behalf.
• Google Play (Google LLC / Google Ireland Limited): app distribution, payment processing and subscription status. Google processes payment data under its own terms.
• Firebase Cloud Messaging (Google): delivers notifications to the app. A notification contains the event type and the recipient name entered by the sender (for example "Your document for Alex has been viewed"), never the document.
• Google Play Integrity (only if enabled): checks that the app comes from Google Play and stores, on Google's servers, one bit meaning "this device used up its Free documents in month X". The bit lets the Free limit survive a reinstall or factory reset. It is not used to identify or track you.
• Authorities, where we are legally required.

Google may process data outside your country. Transfer mechanism: [Yurt dışına aktarım dayanağı (KVKK m.9 / GDPR Bölüm V) — hukukçu belirleyecek].

8. Your rights

You may request access, rectification, erasure, restriction, objection and data portability, and withdraw consent where processing is based on consent. Under KVKK Art. 11 you may also learn whether your data is processed, the purpose, the recipients at home and abroad, and request compensation for damage caused by unlawful processing. Write to [Kişisel veri başvuruları için e-posta adresi]. We answer within 30 days. Because accounts are anonymous, we may ask you for information from the app (the account reference shown in the app under Settings → About) to find your data.

You can delete your account at any time in the app under Settings → Delete account, or as described at https://docdekay.needsolutions.net/legal/account-deletion.

You also have the right to lodge a complaint with a supervisory authority: in Türkiye the Personal Data Protection Authority (KVKK), in the EU/EEA the authority of your country of residence, in India the Data Protection Board.

9. Security

Transport encryption (HTTPS, TLS 1.2 or higher), AES-256-GCM encryption of document images with per-document keys, removal of image metadata, server-side watermarking, screenshot blocking in the app, rate limits and PIN lockout (5 wrong attempts → 15 minutes), least-privilege database roles and append-only access records. VERBIS registration: [VERBİS kayıt durumu ve numarası].

10. Children

The service is not intended for persons under [Asgari kullanıcı yaşı (öneri: 18)].

11. Changes

We will publish changes on this page and update the effective date. Material changes are announced in the app.