1. Who are we?
This policy applies to the WeRoom mobile application, the weroom.app website, and related services (together, “WeRoom”). WeRoom is the data controller responsible for your personal data. You can contact us about privacy at hello@weroom.app.
2. What data do we process?
- Account and profile: Phone number, name, username, profile photo, biography, and verification information.
- Community and content: Follow relationships, club and event memberships, room participation information, messages, and shared photos, audio, and video.
- Live room data: Microphone and camera streams, recordings when room recording is enabled, transcripts created from speech, and moderation results.
- Device and security: IP address, a one-way hash of the device identifier, platform, device model, operating system and app version, session data, and security logs.
- Communications and notifications: Notification preferences, push-notification tokens, and your support requests.
- Contact matching: Only when you choose to continue, phone numbers are converted into one-way SHA-256 hashes on your device. Those hashes are sent to our server solely to return matching WeRoom accounts and are not retained. Contact names and plain phone numbers are never uploaded for this purpose.
3. Why do we use data, and on what legal basis?
| Purpose | Data | Legal basis |
|---|---|---|
| Create accounts, authenticate users, and provide the service | Phone, profile, session, and usage data | Entering into or performing a contract |
| Operate rooms, calls, messages, clubs, and events | Content, live room, participation, and communication data | Performance of a contract |
| Prevent fraud, abuse, and community violations | Device, IP, transcript, and moderation records | Legitimate interests, provided your fundamental rights and freedoms are not harmed; legal obligation where required |
| Enable camera, microphone, speech recognition, photo library, contacts, and notification features | Data accessed under the relevant permission | Performance of a contract where needed to provide the feature you request; explicit consent for optional access |
| Respond to legal requests and protect our rights | Account, content, and transaction records required by the request | Legal obligation; establishment, exercise, or protection of a legal right |
You can withdraw device permissions at any time in your device settings. The related feature may stop working when permission is withdrawn, but you can continue using core account features.
4. Automated moderation and speech transcripts
Conversations in live rooms may be transcribed for room previews and community safety. If profanity or severe abusive language is detected, the system may automatically ban the account. Room titles containing profanity or abusive language may be detected automatically and the room may be closed.
These processes may use speech transcripts, matched expressions, room and device information, and decision records. Automated systems can make mistakes. If you believe a decision is wrong, email hello@weroom.app with your username and a short explanation; your request will be reviewed by a person.
5. Who do we share data with?
We do not sell your data. We may share it only to the extent needed to provide the service with the following categories of recipients:
- Other users: Your profile, public rooms, club and event information, and content you choose to share.
- Infrastructure providers: Hosting and databases, live audio/video (LiveKit), file storage (Cloudflare R2), phone verification (Twilio), and notifications (Firebase/APNs).
- Moderation providers: Artificial intelligence services that review room titles for safety; only the limited content needed for the review is shared.
- Public authorities: Judicial and administrative authorities when disclosure is required by law.
Some service providers may be located outside Türkiye. When an international data transfer is necessary, we use the appropriate safeguards under Article 9 of Law No. 6698 and other applicable legal transfer mechanisms.
6. How long do we retain data?
We retain data for as long as needed to provide the relevant feature and fulfill the purposes described above, and afterward for applicable limitation and statutory retention periods. Following an account deletion request, your data is deleted, anonymized, or made inaccessible. Security, ban, and transaction records may be kept for a limited period to prevent abuse, comply with legal obligations, and defend our rights. Backup copies are removed through the normal deletion cycle.
7. Security
We apply appropriate technical and organizational measures, including transport security, access restrictions, secure session tokens, hashing of device information, and logging. No system can provide absolute security. To protect your account, never share your verification code with anyone.
8. Your rights under the KVKK
Under Article 11 of Law No. 6698, you have the right to:
- learn whether your personal data is processed and request information if it is,
- learn the purpose of processing and whether the data is used in line with that purpose,
- know the third parties to whom data is transferred in Türkiye or abroad,
- request correction of incomplete or inaccurate data,
- request deletion or destruction when the legal requirements are met and ask that these actions be communicated to third parties to whom the data was transferred,
- object to a result produced exclusively through automated analysis when it is against your interests, and
- claim compensation if you suffer damage because of unlawful processing.
You can submit a request, together with information that helps us verify your identity, to hello@weroom.app. We respond within the period set by law and, as a rule, free of charge.
9. Children’s privacy
WeRoom is not intended for children who cannot provide valid consent on their own under applicable law. If you believe we have processed data belonging to such a child, please contact us so we can investigate and take the necessary deletion steps.
10. Changes and contact
We may update this policy when the service or applicable law changes. We will announce material changes in the app or through another appropriate channel. For questions, email hello@weroom.app.