Privacy Policy
Last updated: June 29, 2026
Overview
This Privacy Policy explains how Lecta ("Lecta", "we"), operated by Lecta, collects, uses and protects your personal data when you use the Lecta mobile app and the getlecta.app website. By using Lecta you confirm that you have read and understood this policy. The data controller for this service is Lecta, with its registered address at Sahrayıcedit, Kadıköy / İstanbul. For any privacy question you can reach us at hello@getlecta.app.
Data we collect
Account data: your name, email address, and any profile and cover photos. If you provide your phone number, we store it for your account (to contact you and, later and only if you separately opt in, for updates/promotions). For friend matching, your contacts’ numbers are irreversibly hashed on your device; we do not store those raw numbers. Content data: the places you save, your notes, collections, reactions and follow relationships. Usage and device data: device type, operating system, app version, crash logs and aggregated/anonymous usage statistics. Location: only when you grant permission, to show nearby places on the map. Contacts: only when you grant permission; your contacts’ numbers are hashed on your device and only these hashes are used for matching.
Why we process your data
We process your data to: provide the service and manage your account (performance of a contract); offer features such as contacts and location (your explicit consent); personalize your experience and improve the product; keep the service safe and prevent fraud and abuse (our legitimate interest); and comply with applicable law (legal obligation). Where processing is based on consent, you can withdraw it at any time.
Sharing and service providers
We do not sell your personal data. To run the service we share data with trusted providers that process it on our behalf: Supabase (hosting and database), PostHog (anonymous analytics), Sentry (crash/error logging), RevenueCat (subscription management), Mapbox (maps), Apple and Google (sign-in), and Vercel (web hosting). These providers process your data only on our instructions and under contract. We may also disclose data where required by law or a valid request from authorities.
International data transfers
Our service providers’ servers may be located outside Türkiye (for example, in the European Union or the United States), so your data may be processed abroad. Where this happens, we take appropriate safeguards (including contractual protections) as required by applicable law.
Retention and deletion
We keep your data for as long as your account is active and as needed to provide the service. You can permanently delete your account and all your content at any time from within the app via Settings → Delete account; this action is irreversible. After deletion, some data may remain briefly in routine backups or be retained where required by law, after which it is permanently deleted.
Your rights
Under applicable law (Türkiye’s KVKK and, where applicable, the GDPR) you have the right to: access your personal data; have it corrected or deleted; restrict or object to its processing; receive your data in a portable format; and withdraw consent where processing relies on it. To exercise these rights, contact us at hello@getlecta.app; we respond as soon as possible and within 30 days at the latest. If you'd like a copy of your data, you can request it by email from the app via Settings → Download my data; we respond within the same period.
Security
We apply industry-standard measures to protect your data: encryption in transit and at rest, row-level access control at the database layer, irreversible hashing of phone numbers used for matching, and data minimization. No system is 100% secure, but we take our responsibility to protect your data seriously.
Children’s privacy
Lecta is not directed to children under 13, and we do not knowingly collect data from them. If the age of digital consent in your country is higher (up to 16 in the European Union) and you are below it, you should use Lecta only with the consent of a parent or legal guardian. If we learn we have collected data from a child under 13, we will delete it.
Automated decisions
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. The personalization we use to improve your experience does not fall within this scope.
Right to complain
If you have a concern about how we handle your data, please contact us first at hello@getlecta.app. If we cannot resolve it, you have the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or, in the European Union, with the data protection authority in your country.
Changes and contact
We may update this policy from time to time and will notify you of significant changes through the app or website. The current version is always available on this page. You can send questions and requests to hello@getlecta.app.