Privacy Policy
Last updated: 30 October 2026 · Türkçe
- DoPulse has no ads and no tracking tools such as Google Analytics. We don't sell your data or share it for marketing.
- You can use the app without an account; your workouts then stay on your phone and nothing is sent to the server.
- With an account, your workouts are stored on our server in the European Union. Only you and the approved coaches you add with their code can see them.
- You can delete your account at any time in the app or at dopulse.com.tr/hesap-sil; your data on the server is deleted immediately.
1. Data controller
Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is:
Serkan Çevik
Etimesgut, Ankara, Türkiye
Email: [email protected]
This policy covers the DoPulse mobile app and the dopulse.com.tr website.
2. What data we process
| Data | When | Details |
|---|---|---|
| Account | When you create an account | Full name, email, password (stored in a form that can't be reversed), athlete/coach role, optional profile picture. |
| Profile | If you enter it | Birth year, sex, weight, maximum and resting heart rate, your max lifts (1RM). Used for heart rate zones and calorie estimates. |
| Workouts | When you record a workout | Second-by-second heart rate, RR intervals, HIIT round times, duration, calorie estimate, effort rating; strength sessions (exercise, sets, reps, weight); programs assigned by your coach. |
| Location | Outdoor runs only | GPS route, distance and pace while recording. No location is collected after the run ends. Location isn't used on a treadmill or in other workouts. On the Run tab, before you start, location is used on the phone to show you on the map but isn't saved. |
| Device information | While using the app | The name of the band you connect; if you send a bug report, the app version and Android/iOS version. |
| Correspondence | If you write to us | Bug reports and emails (with your name and email if you provide them). |
| Security logs | When connecting to the server | IP address, request time and type. Kept to prevent abuse (such as password guessing and spam) and deleted automatically after 5 days. |
Without an account, none of this is sent to the server (unless you send a bug report).
3. Health data and explicit consent
Heart rate and workout data may count as special category personal data (health data) under KVKK. We therefore process it on the server only with the explicit consent you give when creating an account (KVKK art. 6). You can withdraw consent at any time by deleting your account; this doesn't affect processing done before then.
4. Why we process data (purpose and legal basis)
- Providing the service: recording, analysing and backing up your workouts and moving them between devices. Basis: performance of a contract (art. 5/2-c); explicit consent for health data (art. 6).
- Sharing with your coach: only if you enter your coach's code. Basis: explicit consent.
- Security and abuse prevention: stopping fake accounts and limiting password attempts. Basis: legitimate interest (art. 5/2-f).
- Contacting you: email verification, coach applications, replies to bug reports. Basis: performance of a contract and legitimate interest.
- Legal obligations: providing information to authorities where the law requires it (art. 5/2-ç).
We don't use your data for advertising, profiling, marketing or training AI.
5. Who can see your data
- You: all of your data.
- Your coaches: only coaches approved by DoPulse whom you add by entering their code. They can see your workouts, runs, strength sessions, profile information, 1RM values and profile picture. They can't change or delete your data. You can remove a coach at any time; from then on they can't see any of your data. In team mode, your coach can record a workout to your account; the record is yours and you can delete it.
- The data controller (Serkan Çevik): when needed for technical support, security and fixing errors.
- Service providers: server hosting (Contabo GmbH, Germany, EU data centre) and network security/delivery (Cloudflare, Inc.). The run map background is loaded from OpenStreetMap (OpenStreetMap Foundation, United Kingdom); while it loads, OpenStreetMap sees the map area being viewed and your IP address, but your route and other data aren't sent to it. These providers process data only to provide the service.
- Authorities: only where legally required.
6. Where data is stored (transfers abroad)
With an account, your data is stored on our server in the European Union (Contabo, Germany); traffic between the app and the server passes encrypted (HTTPS) through the Cloudflare network. This is a transfer of data outside Türkiye. It takes place in line with KVKK art. 9 and based on the explicit consent you give when creating an account.
Your workouts are also stored on your own phone; the app works offline.
7. How long we keep data
- Account and workout data: as long as your account is open. When you delete your account it is removed from the server immediately. Copies in server backups, kept to protect against data loss, are permanently deleted when those backups expire and are removed automatically; until then they are used only to restore after a failure.
- Security logs: 5 days.
- Bug reports: until the issue is resolved; if you delete your account, your name and email are removed and the text stays anonymous.
- Data on your phone: stays there until you delete the app; we can't see or delete it.
8. Children
- Children under 13 can't create an account on their own. The account must be created by a parent or guardian, or by a coach together with them.
- Users aged 13–18 use the app with a parent's or guardian's permission and confirm this when creating an account.
- A parent or guardian can write to [email protected] to access their child's data or have the account deleted.
9. App permissions
- Bluetooth: to connect to heart rate bands.
- Location: to measure distance and pace on outdoor runs and show you on the map.
- Notifications: to show the "DoPulse is recording" notification while recording.
- Camera and photos: only when you choose or take a profile picture.
10. Security
All connections are encrypted with HTTPS; passwords are stored in a form that can't be reversed; profile pictures are protected and visible only to authorised people; access rules are enforced on the server for every record; password attempts and form submissions are limited. No system is 100% secure; if a breach occurs, we will inform you and the Turkish Personal Data Protection Board as KVKK requires.
11. Your rights (KVKK art. 11)
You can ask to:
- Find out whether your data is processed and get information about it,
- Learn the purpose of processing and whether it's used accordingly,
- Know who your data is transferred to in Türkiye or abroad,
- Have incomplete or incorrect data corrected,
- Have your data deleted or destroyed,
- Have those corrections and deletions passed on to recipients,
- Object to a result against you that comes from automated analysis,
- Claim compensation if you suffer damage from unlawful processing.
Send requests from your registered email to [email protected]; we reply free of charge within 30 days. If you aren't satisfied, you can complain to the Personal Data Protection Board. If you are in the European Economic Area, you can exercise your similar GDPR rights at the same address.
12. Deleting your account and data
Delete your account in the app under Profile → My info → Delete my account, or at dopulse.com.tr/hesap-sil with your email and password. Your account, profile picture, all workout, run and strength records and links to coaches are removed from the server immediately.
13. Changes
We may update this policy. If there is a significant change, we will let you know in the app or by email. The current version is always on this page. If this English version and the Turkish version differ, the Turkish version applies.