Bina360 Privacy Policy

Last updated: 15 July 2026

1. Introduction

Bina360 ("Bina360", "we", "us", or "our") is committed to protecting your privacy and personal data in compliance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and other applicable data protection legislation.

This Privacy Policy explains what personal data we collect through the Bina360 mobile application (the "App"), how we use it, how and with whom we share it, how long we keep it, and the rights you have. Please read it together with our Terms of Service and, for Turkish users, our KVKK Clarification Notice (Aydınlatma Metni).

2. Data Controller

The data controller for personal data processed through the App is:

• Data controller: Bina360
• Email: [email protected]
• Phone: 0536 883 4450

If we appoint a data protection contact or representative, their details will be published here.

3. Personal Data We Collect

We collect the following categories of personal data.

3.1. Identity and account data

• Phone number used for authentication.
• Name, display name, and profile details.
• Role information (resident, manager, or super-admin).
• Invite-code usage and building-membership status.

3.2. Contact data

• Email address, when provided.
• Phone number for SMS or phone verification.

3.3. Location data

• GPS location used during address selection and building discovery.
• Building address and location data entered through the address picker.

3.4. Financial and payment data

• Dues records and payment status.
• Bank-transfer receipt uploads and the amounts you declare.
• Building bank details maintained by managers (bank name, IBAN, account holder).

3.5. Usage data

• Screens visited and features used within the App.
• Timestamps of actions such as payment submission, approval, and maintenance requests.
• Notifications and in-app messaging activity.

3.6. Documents and media

• Photos or PDF files you upload for identity, address verification, or payment receipts.
• Camera and local file access used only to enable document upload.

3.7. Technical data

• Device identifiers and platform information.
• App version and crash logs.
• Firebase authentication identifiers and session information.

3.8. Advertising and targeting data

• Interactions with advertisements shown in the active building pane.
• Location, region, city, mahalle, street, and radius criteria used to deliver targeted adverts.
• Advert preferences and display status for buildings within a target area.
• Metadata about adverts you choose to share externally, for example via WhatsApp.

We collect only the data needed for the purposes described below, and we do not knowingly collect special categories of personal data (such as health or biometric data) except where a document you voluntarily upload happens to contain it.

4. Legal Basis for Processing

We rely on the following legal bases under the KVKK:

• Performance of a contract — providing building-management services, dues and payment workflows, and account access.
• Compliance with a legal obligation — retaining records required by Turkish law.
• Legitimate interests — maintaining security, preventing fraud and misuse, and improving the App, balanced against your rights and freedoms.
• Explicit consent — optional features, targeted advertising, marketing communications, and push notifications where consent is required. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. How We Use Your Data

We use personal data to:

• Register and authenticate users.
• Create and manage building membership and roles.
• Enable dues collection, payment-receipt review, and manager approvals.
• Store and deliver maintenance requests, announcements, and votes.
• Provide in-app messaging and send notifications you have enabled.
• Provide customer support and help resolve disputes.
• Deliver targeted advertisements and promotional content to buildings and users within a selected radius or geographic area, where you have consented.
• Let you share adverts to WhatsApp or other platforms when you choose to do so.
• Maintain the security and integrity of the App and prevent fraud.
• Analyse usage and improve the App.
• Meet our legal and record-keeping obligations.

6. Data Sharing and Disclosure

We may share personal data with:

• Building managers, to the extent necessary for building management and dues processing.
• Super-admins, for platform administration and manager-application approval.
• Third-party service providers acting as data processors, including Google Firebase (Authentication, Firestore, Storage, Cloud Messaging, and Crashlytics), Google Sign-In (where you use it), and Expo (application build and update infrastructure). These providers process data only on our instructions.
• Third-party sharing platforms, such as WhatsApp, only when you initiate content sharing from the App.
• Law-enforcement authorities, courts, or regulators, when required by Turkish law or valid legal process.

We do not sell personal data, and we do not share it for third parties' own independent marketing purposes.

7. Storage and Security

Personal data is stored in Google Firebase services (Firestore, Storage, and related services). We apply technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction, including access controls, authentication, and security rules.

No method of transmission or storage is completely secure. If a personal-data breach occurs that is likely to result in a risk to your rights, we will notify the competent authority and affected users where required by applicable law.

8. Data Retention

We retain personal data only for as long as necessary for the purposes above and to comply with legal obligations. Indicative periods:

• Account and authentication data — for the duration of your account.
• Dues, payment, and receipt records — for the period required by accounting and tax legislation.
• Maintenance, messaging, and announcement records — for as long as needed for building operations and dispute resolution.
• Fraud and security investigation data — for as long as required to complete the investigation.

When a retention period ends, we delete, anonymise, or destroy the data in accordance with law.

9. Your Rights

Under the KVKK you have the right to:

• Learn whether your personal data is being processed, and request information about it.
• Learn the purpose of processing and whether data is used accordingly.
• Know the third parties to whom your data has been transferred, in Turkey or abroad.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction of your personal data.
• Request that corrections and deletions be notified to third parties to whom data was transferred.
• Object to outcomes produced solely by automated analysis.
• Claim compensation for damage arising from unlawful processing.
• Withdraw any consent you have given.

To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).

10. Account and Data Deletion

You may delete your account and associated personal data at any time from within the App (Settings → Account), or by emailing [email protected]. The in-app deletion process removes your authentication account and private records, removes uploaded files owned by you, and deletes or anonymises your personal data and user-generated content. Financial and audit records that we must retain by law or need to resolve disputes are kept only in de-identified form. A primary building manager must transfer the manager role before deleting the account so the building is not left unmanaged.

11. Advertising and Marketing Choices

Targeted advertising and marketing communications are provided only where you have consented. You can withdraw consent and manage advert and notification preferences in the App at any time. Content you choose to share to third-party platforms (such as WhatsApp) is then governed by those platforms' own terms and privacy policies.

12. Cookies and Similar Technologies

The App may use local storage and similar technologies for authentication state, user preferences, and performance monitoring. These are used to operate and improve the App, not for cross-site tracking.

13. Push Notifications and Device Permissions

With your permission, the App may request access to your device camera, photo library, location, local storage, and notifications to support receipt upload, building-location selection, and alerts. You can grant or revoke these permissions in your device settings; some features may not work without them.

14. Analytics and Crash Reporting

We use Firebase analytics and crash-reporting tools to understand how the App performs and to fix problems. This data is used in aggregated or pseudonymised form to improve stability and usability.

15. International Data Transfers

Personal data may be stored and processed on servers operated by Firebase and allied cloud providers, which may be located outside Turkey. Where data is transferred abroad, we rely on an adequacy decision, appropriate safeguards, your explicit consent, or another lawful basis under Article 9 of the KVKK, and we take the required technical and administrative measures.

16. Children's Privacy

The App is not intended for children under 18. We do not knowingly collect personal data from anyone under 18. If we learn that we have done so, we will delete it.

17. Automated Decision-Making

We do not make decisions that produce legal effects, or similarly significant effects, based solely on automated processing of your personal data. Dues approvals and building decisions are made by human managers.

18. Third-Party Links and Services

The App may reference or link to third-party services (such as Firebase, Google, Expo, Apple, and Google Play). We are not responsible for the privacy practices of those third parties; please review their policies.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through the App or other available channels, and we will update the "Last updated" date above.

20. Contact Us

If you have questions about this Privacy Policy, contact us at:

• Email: [email protected]
• Phone: 0536 883 4450