Privacy

Controller

Startiva is an app by ARI BULUT DEPOLAMA BİLİŞİM TİCARET A.Ş., Güldallar İş Merkezi, Akçaburgaz, Hadımköy Yolu Cd. No:84, 34522 Esenyurt / İstanbul, Türkiye, the controller of your data. We apply Turkey's data protection law (KVKK) and, where applicable, the EU GDPR. To exercise your rights or request deletion of your account, email [email protected].

What we store

Account: email address, name and the password stored only as an encrypted hash (never in plain text). Session: a random identifier in a technical cookie, together with the IP address and browser or device type for that session. Usage: your coin balance, your account transactions, the ideas you unlock, the reports you send and the invite links you create. Purchases: the Google Play purchase identifier, to verify it and credit your coins. Security: technical logs with IP address to prevent abuse.

Sign in with Google

If you sign in with Google (where available), Google gives us your email address, your name and a Google account identifier to create or open your account. We never receive your Google password.

Legal basis

We process your data to perform our contract with you (your account, unlocked ideas and purchases), for our legitimate interests (keeping the service secure, preventing abuse and measuring website traffic) and to meet legal obligations (for example keeping purchase records). You can manage this by deleting your account.

Why we use it

To give you access to your account, keep your ideas and coins, verify purchases, protect the service from abuse and fix data you report. We do not sell your data, show ads or use third-party tracking tools.

Payments

In-app payments are processed by Google Play. Google Play shares a purchase identifier with us to confirm the purchase and credit your coins; we never receive or store card details.

Who we share it with

We do not sell your data and use no advertising or third-party analytics. We share data only with: Google (Google Play for payments and, if you use it, Sign in with Google) and the infrastructure provider that hosts our servers, acting on our instructions.

Where it is stored and transfers

Your data is stored on our servers, not on your phone. The controller is based in Türkiye and applies the KVKK. Where your data is processed outside your country, we rely on appropriate safeguards under the KVKK and, where applicable, the GDPR.

How long we keep it

Your account, coins, unlocked ideas and reports are kept while your account exists and are deleted when you ask us to delete it, except records we must keep by law (such as purchase records). Security attempt counters are deleted within 2 days; website statistics within 400 days.

Security

Passwords are stored only as a strong one-way hash (Argon2id), never in plain text. All traffic uses HTTPS and sign-in attempts are rate-limited to prevent abuse.

Cookies

Signing in uses one strictly necessary cookie to keep you logged in (SameSite=Strict); we use no advertising or tracking cookies. Our website statistics use no cookies at all.

Website statistics

On this website we count visits and invite-link clicks on our own server, without cookies or third-party tools. We do not store your IP address or browser details: to count unique visitors they are combined with a random code that is replaced every day (the old one is deleted), so a visit cannot be linked to you. We keep the page viewed, the language, the device type and the site you came from, for at most 400 days.

Children

Startiva is intended for adults starting or planning a business and is not directed to children under 16; we do not knowingly collect their data.

Your rights

You can ask to access, correct, delete or export your data, and object to or restrict certain processing. To exercise your rights or request deletion of your account, email [email protected]. You may also complain to a data protection authority: in Türkiye, the Personal Data Protection Authority (KVKK Kurumu); in the EEA, your local supervisory authority.

Third-party data we show

Business data comes from OpenStreetMap (© OpenStreetMap contributors, ODbL) and city data from GeoNames (CC BY 4.0). It contains no personal data about Startiva users.

Changes

We may update this policy; the current version is always on this page. Last updated: 11 November 2026.