Privacy Policy and Personal Data Protection Disclosure

1. Data Controller

This disclosure text has been prepared for TTHub (the "Application"), operated by CGR FİNANSAL DANIŞMANLIK TİCARET LİMİTED ŞİRKETİ, in accordance with the Personal Data Protection Law No. 6698 ("KVKK") and related legislation. The company acts as the data controller and provides the service under the TTHub brand.

2. Personal Data We Process

The following data may be processed when you use the Application:

• Identity Information: Name and surname
• Contact Information: Email address
• Personal Details: Date of birth (collected for age verification and category determination purposes, not shown to other users)
• Transaction Security Information: Password (encrypted), session and log records
• User Content and Tournament Data: Tournaments you participate in, match results, statistics; for organizers, club information, tournament details, participant lists, check-in status, payment markers and guest-player entries
• Club Rating Data: Where a club has enabled the club rating system, initial ratings, ratings updated after matches, and club rankings
• Notification Data: Information for sending notifications regarding tournament pairings, match times, score updates, and tournament processes
• Analytics and Usage Data: Device information (model, operating system, screen resolution), app usage statistics, page/screen views, click and interaction behaviors, session durations, crash reports, and app performance data (collected via Google Analytics / Firebase Analytics)
• Billing and Subscription Data: Paid plan selection, subscription status, billing period, Paddle customer / subscription / transaction identifiers, and payment outcome information. Payment-instrument data such as card numbers are not collected or stored by TTHub

3. Purposes of Processing Personal Data

Collected data is processed for the following purposes:

• Creating user registration and account management
• Tournament organization, pairing and fixture creation
• Participant check-in, payment tracking and guest-player management
• Recording match results and maintaining statistics
• Operating the club rating system and producing rankings
• Sending notifications to users about tournament processes
• Setting up, renewing and cancelling paid subscriptions and delivering plan entitlements
• Ensuring application security
• Monitoring and improving application performance
• Analyzing and enhancing user experience
• Error detection and resolution of technical issues
• Fulfilling legal obligations

4. Notifications (Push Notifications)

The Application may send instant notifications to users about tournament pairings, match times, and result updates. These notifications are delivered through device notification permission. Users can disable notifications at any time through device settings.

5. Transfer and Visibility of Personal Data

Other Users

TTHub is a tournament application. Your Name and Surname information is only visible to other logged-in users for the purpose of tracking tournament pairings and results. Date of birth and age information are not shown to other users. Your club rating may be visible to club members or publicly, depending on that club's settings.

Technical Service Providers

Third-party technical service providers offering cloud hosting, database, notification delivery, and system security services may be used for the operation of the Application infrastructure. These providers can only access data for the purpose of providing the service and under confidentiality obligations.

Payments and Subscriptions (Paddle)

Paid plan (Pro / Super) orders and subscription renewals are processed by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders; it collects payment, calculates tax, issues invoices and handles returns.

During checkout, your email address, billing details and payment-instrument data are submitted directly to Paddle. Card numbers, CVV codes and similar payment-instrument data are not processed or stored on TTHub servers. TTHub may receive from Paddle information such as customer identifiers, subscription status, plan / price details and transaction outcomes so we can fulfil your subscription.

For how Paddle processes personal data, see: paddle.com/legal/privacy

Analytics Service Providers

Google Analytics and Firebase Analytics services are used to monitor application performance and improve user experience. Anonymous or pseudonymous usage data, device information, and interaction statistics may be collected through these services. On the website, analytics cookies are enabled only with your consent. For more information about Google's privacy policy: policies.google.com/privacy

Legal Authorities

Data may be shared in accordance with lawful requests from authorized public institutions and organizations.

Your data is not sold or shared with third parties for advertising or marketing purposes. Unless you give separate marketing consent at Paddle checkout, we use buyer data received from Paddle only for order fulfilment, support and fraud prevention.

Cross-Border Transfers

Some infrastructure, analytics and payment services may be provided by entities established outside Türkiye (for example cloud hosting, Google / Firebase and Paddle). In that case your personal data may be transferred abroad to the extent necessary to deliver the service, in accordance with Article 9 of KVKK and related legislation.

6. Data Collection Method and Legal Basis

Your personal data is collected electronically through the mobile application and web panel. Processing activities rely on the following legal bases:

• KVKK Article 5/2-c: Conclusion or performance of a contract — account creation, tournament management, ratings, notifications, subscription / billing and related core services
• KVKK Article 5/2-f: Legitimate interest — application security, error detection, performance monitoring, fraud prevention and service improvement
• KVKK Article 5/1: Explicit consent — website analytics cookies and similar optional measurement tools (when given)
• KVKK Article 5/2-ç: Legal obligation — lawful requests from competent authorities

7. Data Retention Period

Your personal data is retained as long as your membership continues. Upon deletion of your account, your data will be deleted, destroyed, or anonymized within a reasonable period, subject to legal obligations.

8. Age Limit and Parental Consent

The Application is generally intended for users aged 13 and above.

Users under the age of 13 may only use the Application with the consent and supervision of a parent or legal guardian. If it is determined that data belonging to users under 13 has been processed without parental consent, the relevant account will be deleted.

9. Data Security

The Application implements reasonable technical and administrative security measures against unauthorized access, loss, misuse, or disclosure to ensure the security of personal data.

10. Your Rights Under KVKK

Pursuant to Article 11 of KVKK, you have the right to:

• Learn whether your personal data is being processed
• Request information about such processing if it has taken place
• Learn the purpose of processing and whether it is used in line with that purpose
• Know the third parties to whom data is transferred domestically or abroad
• Request correction if the data is incomplete or inaccurate
• Request deletion or destruction under the conditions set out in KVKK
• Request that correction, deletion or destruction be notified to third parties to whom the data was transferred
• Object to a result against you arising from analysis of the data exclusively by automated systems
• Claim compensation if you suffer damage due to unlawful processing

If we do not respond to your request, or you find the response insufficient, you may lodge a complaint with the Personal Data Protection Board (KVKK Kurulu).

Contact

To exercise your rights: hello@tthubs.com