LEGAL / BEAUTY MIND

Privacy Policy

BEAUTY MIND mobile application • Last updated: 19 July 2026

At EDITECH YAZILIM BİLGİ TEKNOLOJİLERİ ANONİM ŞİRKETİ ("Company", "we", "us"), we take the privacy and security of your personal data seriously when you use the BEAUTY MIND mobile application ("App"). This Privacy Policy explains what personal data we process, for which purposes and on which legal bases, with whom we share it, how long we retain it, and how you can exercise your rights.

This Policy reflects our obligations under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and, where applicable, the European Union General Data Protection Regulation ("GDPR"). For users residing in Türkiye, a separate Data Protection Notice and Explicit Consent Text supplement this Policy.

1. Data Controller

EDITECH YAZILIM BİLGİ TEKNOLOJİLERİ ANONİM ŞİRKETİ

Address: Ayazağa Mah. Kemerburgaz Cad. Vadi İstanbul Park Sitesi 7A Blok No:7B Kat:2 İç Kapı No:4 Sarıyer – İstanbul 34396, Türkiye

MERSIS No: 0324115189700001 • E-mail: contact@editech.com.tr

2. Personal Data We Process

Identity and contact data: Name, e-mail address, and similar identifiers associated with your account.
Profile and preference data: Age, gender, skin type, skincare goals, and your in-app preferences.
Visual data (skin images): Photos you provide via the camera or your gallery for skin, face, aura, and product analysis. Skin-analysis results derived from these images may be treated as special-category (sensitive) data.
Health and lifestyle data: Where you grant permission, data accessed via Apple Health (HealthKit) such as sleep, steps, heart rate, and menstrual cycle, together with lifestyle information you enter.
Location data: Where you grant permission, your approximate location, used to provide recommendations based on environmental factors such as weather, UV, and pollen.
Usage and device data: App interactions, device type, operating-system version, language setting, and technical data required for the Service to function.
Transaction data: Subscription status and purchase history. We do not process your payment-card details; payments are handled by Apple.

3. Purposes of Processing

To create, manage, and authenticate your account.
To analyze your skin images and provide a skin score, skin age, and personalized care recommendations.
To generate personalized routines, magazine content, and AI-assisted guidance.
To provide daily recommendations based on environmental factors and your health data.
To manage subscriptions and access to premium features.
To measure service quality, resolve errors, and improve the App.
To comply with our legal obligations and protect our rights.

4. Legal Bases for Processing

We process your personal data on the following legal bases under KVKK Arts. 5 and 6 and, where applicable, GDPR Arts. 6 and 9:

Explicit consent: Special-category data such as skin images, the analysis results derived from them, and your health data are processed solely on the basis of your explicit consent, which you may withdraw at any time.
Performance of a contract: Processing necessary to manage your account and provide the services you request.
Legitimate interests: Ensuring service security, preventing misuse, and improving the App.
Legal obligation: Meeting retention and reporting obligations under applicable law.

5. Specific Notice on Skin Images

Important: Images you provide for skin, face, and aura analysis are transmitted over secure connections to our specialist skin-analysis technology provider so that the analysis can be performed. The analysis is carried out to produce measurements of skin characteristics from your image; it is not intended to uniquely identify you biometrically.

We process your images only to provide the analysis service and, where you request it, progress-tracking features such as "before/after" comparisons. We do not use or sell these images for advertising or third-party marketing. You may withdraw your consent to the processing of your skin images at any time and delete the relevant images from within the App.

6. AI-Assisted Processing

The App relies on AI service providers to generate personalized insights, recommendations, and magazine content. For this purpose, only information necessary to generate the content, such as skin scores, preferences, and environmental data, is transmitted to the relevant AI service. The personalization we provide does not constitute a decision that produces legal effects concerning you or similarly significantly affects you through solely automated means.

8. International Transfers

Some of the service providers we use may have servers located abroad. In such cases, your personal data may be transferred abroad in accordance with the conditions prescribed by KVKK and GDPR (through mechanisms such as your explicit consent or appropriate safeguards, including standard contractual clauses). We take the necessary measures to ensure an adequate level of protection.

9. Retention Periods

We retain your personal data only for as long as necessary for the purposes for which they are processed and for the retention periods prescribed by applicable law. When you delete your account, your personal data is deleted, destroyed, or anonymized within a reasonable period; however, data that must be retained to meet our legal obligations may continue to be stored for the relevant period.

10. Data Security

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, and misuse, including encryption in transit and at rest, access controls, data minimization, and regular security reviews. No system can guarantee absolute security; we recommend that you also take due care to protect your account.

11. Your Rights

Under KVKK Art. 11 and, where applicable, the GDPR, you have the right to:

Learn whether your personal data is processed and, if so, request information about it.
Learn the purpose of processing and whether the data is used in line with that purpose.
Request rectification of incomplete or inaccurate data.
Request erasure or destruction of your data.
Request restriction of, and object to, processing.
Request data portability and withdraw consent you have given.
Lodge a complaint with the competent supervisory authority if you believe processing is unlawful.

To exercise these rights, contact us at contact@editech.com.tr. We handle your request within the period prescribed by applicable law, free of charge (save for exceptional cases). Users residing in Türkiye have the right to lodge a complaint with the Personal Data Protection Authority.

12. Children's Privacy

The App is not directed at persons under the age of 18. Persons under 18 may use the App only under the supervision and with the consent of a parent or legal guardian. If we become aware that a child has provided us with personal data without valid consent, we will delete such data within a reasonable period.

13. Changes

We may update this Privacy Policy from time to time. We will notify material changes within the App or through other appropriate channels before they take effect. The most current version is always available within the App and on our website.

14. Contact