Privacy Policy

Last updated: 31 May 2026

This Privacy Policy explains how Selma Nur Keskin (“we”, “us”, “our”) collects, uses, and protects your information when you use seen (“the App”), available at seenapp.online.

By using seen you agree to the terms set out in this policy. If you do not agree, do not use the App.

1. Who we are

Data controller: Selma Nur Keskin
Country of operation: Turkey
Contact for privacy questions: selmanurkeskin@gmail.com

2. Information we collect

We collect only the data needed to operate seen. We never sell your data.

a) Information you give us

Account info: username, display name, email address, password (stored only as a one-way bcrypt hash — we never see or store your plain password)
Profile info: profile picture, bio, location (free text), pronouns, accent color
Taste data: the movies, TV shows, books, and music you add to your profile
Posts: captions, photos, tagged friends, the media items you review
Reports: if you report content or another user, we store the report (reason + your account)

b) Information collected automatically

Session token: a JSON Web Token (JWT) issued at login, stored on your device in AsyncStorage. We do not use cookies.
Server logs: standard request logs (IP address, timestamp, request path) kept for up to 30 days for debugging and abuse prevention.

c) Information we do NOT collect

We do not collect precise location (GPS).
We do not use analytics or tracking SDKs.
We do not use advertising IDs.
We do not collect contacts, calendar, or microphone data.

3. How we use your information

We use your data only to:

Run the App: show your profile, posts, taste, and feed
Let you connect with other users (follow, tag, recommend)
Authenticate you on each request
Respond to reports and enforce community rules
Communicate about your account (e.g., security or policy changes)

We do not use your data for advertising or profiling.

4. Third-party services

The App makes API calls to the following services. These services receive only the search terms or metadata IDs you query — they do not receive your account or personal identifiers.

Service	What we send	Purpose
TMDB (themoviedb.org)	Search terms for movies/TV	Look up movies and shows
Google Books API	Search terms	Look up books
iTunes Search API (apple.com)	Search terms	Look up music
Neon (neon.tech)	Your account + content data	Database hosting (EU-based servers in Frankfurt)
Vercel (vercel.com)	Request data	API server hosting
Resend (resend.com)	Your email address	Transactional emails only (if applicable)

Each of these providers has its own privacy policy that governs how they handle data we send to them.

5. Where your data is stored

Your data is stored in PostgreSQL on Neon, hosted in the European Union (Frankfurt). If you access the App from outside the EU, your data may be transferred to and processed in the EU.

6. How long we keep your data

Account data: retained while your account is active.
Deleted accounts: when you delete your account from inside the App, your profile, posts, taste, and tags are removed immediately. Anonymized records (e.g., reports you made) may be retained for safety enforcement.
Server logs: up to 30 days.

7. Account deletion

You can delete your account at any time from the App: open your Profile → scroll to the bottom → tap delete account. Deletion is permanent and cannot be undone.

If you cannot access the App, email selmanurkeskin@gmail.com from your registered email and we will delete your account within 30 days.

8. Your rights

Under GDPR (EU) and KVKK (Turkey), you have the right to:

Access: request a copy of the data we hold about you
Correct: ask us to fix inaccurate data
Delete: ask us to erase your data (or do it yourself in-app)
Restrict: ask us to stop using your data
Object: object to certain types of processing
Portability: receive your data in a machine-readable format
Withdraw consent: at any time, where processing is based on consent
Complain: to your local data protection authority. In Turkey, this is the Kişisel Verileri Koruma Kurumu (KVKK).

To exercise any of these rights, email selmanurkeskin@gmail.com.

9. Security

We protect your data with:

HTTPS encryption in transit
Password hashing with bcrypt
JWT-based authentication
Database access restricted by network rules

No system is perfectly secure. If you believe your account has been compromised, contact us immediately.

10. Children

seen is intended for users aged 16 and over. We do not knowingly collect data from children under 16. If we learn that we have, we will delete it. If you believe a child under 16 has created an account, contact us at selmanurkeskin@gmail.com.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify users via the App or by email at least 14 days before they take effect. Continued use of the App after changes take effect means you accept the updated policy.

12. Contact

Questions about this policy or your data:

Email: selmanurkeskin@gmail.com
Data controller: Selma Nur Keskin