Legal
Privacy Policy
Version: 1.3 · Effective date: 18 October 2026
ta.ke is anonymous to other people, not to us: we privately link your answers to your account so that your history, your safety controls and deletion work. We collect the minimum this needs, we do not sell personal data, we show no ads and we do not track you across other companies' apps or websites.
Controller (data controller / veri sorumlusu): Cemre Işıksal, an individual who operates ta.ke, based in İstanbul, Türkiye. Contact for all privacy matters: support@take.international. We have not appointed a data protection officer, as the law does not require one for a service of this size. EU and UK representative: we will appoint a representative under Article 27 of the GDPR and the UK GDPR before ta.ke is offered in the EU or UK, and name them here. Turkish users: see also our KVKK notice.
1. What we collect, why, and our legal basis
| Data | Why we use it | Legal basis (GDPR / KVKK) |
|---|---|---|
| Sign-in identifiers: Apple or Google account identifier, email address, an encrypted Apple token | Create and secure your account, sign you in, send one-time codes | Contract |
| Preferred name (optional) | Greet you in the app and widget; never shown to others | Contract |
| Daily answers, Curiosities, Still True and theme reflections, draft text | Run the product: WORLD, ME, MY TAKES | Contract |
| Broad location label (city, region or country) | Show it next to your answer in WORLD, only if you leave it on | Consent (you can turn it off at any time) |
| Felt This reactions, reports, blocks | Run WORLD and keep it safe | Contract; legitimate interest in safety |
| Device and session data: device type, app version, time zone, language, push token, session records | Deliver the daily question at the right local time, notifications, security | Contract; legitimate interest in security |
| Waitlist: email address, device language and time zone, your personal invite-a-friend code and, if you joined with a friend's link, that link (before you have an account) | Keep your place on the waitlist and send you one invite when it’s your turn | Steps you ask us to take before a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Security and request logs, including IP address | Prevent abuse, fix faults | Legitimate interest |
| Product-health events (e.g. "question opened"), never containing your text | Understand whether the product works | Legitimate interest |
| Moderation records | Enforce the Community Rules and the law | Legitimate interest; legal obligation |
| Support messages | Help you | Contract; legitimate interest |
The waitlist. When you join the waitlist on our website or in the app, we keep only your email address and your device's language and time zone, so that we can invite you in your language at a sensible time. We use your email only to send you one invite when it’s your turn. We never send the waitlist a newsletter or marketing, and we never share the list with anyone. If you are never invited, we delete your entry 12 months after you joined. After you join, you get a personal link you can send to one friend; if a friend joins with it, we note on both entries that you came together, so that we can invite you both in the same first wave. We never tell anyone who joined with their link, and we never show places or positions on the list. To leave the waitlist at any time, write to support@take.international from that address and we will delete your entry within 7 days. A bot check by Cloudflare Turnstile runs when you join on the website (see below).
We never collect your date of birth, precise or background location, contacts, photos or advertising identifiers. When you allow it, the app asks iOS for approximate location once, only to suggest your city; we do not store coordinates. Your text never goes into analytics or ordinary logs.
We use automated checks to help moderate content and to compute your private themes in ME. These do not produce decisions with legal or similarly significant effects on you; a person reviews a held answer when you ask. Some safety checks, translating answers shown in WORLD into other readers' languages, your private themes and Perspective in ME, and finding answers close in meaning (the "Closest to your take" and "Unexpected" views) use OpenAI's API: only the text of answers and Curiosities is sent, never your name, email, location or account details, and OpenAI does not use it to train its models. Each of these features is switched on only once the transfer safeguards described in section 3 are in place. On our website, Cloudflare Turnstile checks that forms are sent by a person, not a bot.
2. Who can see what
- Other users see your answers in WORLD without your name, email or a stable profile, with your broad location only if you choose. They never see your ME page, your history or your preferred name.
- Our staff access personal data only when needed for support, safety or legal reasons, on a least-privilege basis, and every access is logged.
- Service providers process data for us under contract: see the Sub-processors list. We do not let them use your data for their own purposes.
- Authorities may receive data when the law requires it or to protect someone's life or safety.
3. International transfers
We are based in Türkiye. Our main hosting is in Frankfurt, Germany (EU), and some providers process data in other countries, listed on the Sub-processors page (for example, sign-in emails are sent from Japan, and safety checks, translation and website bot protection run in the United States). We protect these transfers as the law of your country requires: for data from the EU or UK, through adequacy decisions (both cover Japan) or the European Commission's standard contractual clauses; for data from Türkiye, through the standard contracts set by the Personal Data Protection Board (controller to processor), signed with each provider and notified to the Personal Data Protection Authority within five business days, as Article 9 of Law No. 6698 requires. We do not rely on your consent for these transfers, and we do not send data to a provider before its contract is in place. You can ask us for a copy of the relevant safeguards at support@take.international.
4. How long we keep data
| Data | Kept for |
|---|---|
| Account, answers, MY TAKES, themes, Curiosities | Until you delete your account |
| WORLD public view of an answer | Removed within 24 hours after that question's WORLD closes |
| Drafts | Deleted when you submit, or when the question closes |
| Felt This linked to you | 30 days after the question closes |
| Raw product-health events and security logs (incl. IP) | 90 days |
| De-identified aggregate statistics | 24 months |
| Reports, appeals, moderation cases | 24 months after resolution |
| Support tickets | 24 months after closure |
| Waitlist entry, before an invite | Until we invite you; if we never do, 12 months after you joined; sooner if you ask us to remove it |
| Invite and waitlist records after an invite | 12 months after the invite is used, expires or is withdrawn |
| Backups | Rolling, at most 30 days |
| Record that an account was deleted (no content) | Up to 3 years, where required |
We keep data longer only where a law requires it (for example, traffic records under Turkish Law No. 5651, for the period that law sets) or under a specific legal or safety hold with a set end date. When a period ends, we delete the data or irreversibly anonymise it.
5. Deleting your account
Go to Settings → Privacy & Security → Delete account (or start at take.international/delete-account). We sign you out everywhere and remove you from WORLD at once, delete your data from our main systems within 24 hours, ask our providers to delete it within 24 hours, and let backups expire within 30 days.
6. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent. Turkish users have the rights in KVKK Article 11 (see our KVKK notice). California residents have the rights in the CCPA/CPRA: we do not sell or share personal information for cross-context behavioural advertising and we do not use sensitive personal information to infer characteristics. Make a request in the app or at take.international/privacy-request; we answer within 30 days (or the shorter period your law sets) and may ask you to confirm it is you. You can also complain to your data-protection authority, such as the Türkiye Personal Data Protection Authority (KVKK) or the authority in your EU country.
If you live outside Türkiye and the EU, our Regional Privacy Supplements add the information your local law requires.
7. Sensitive topics
Daily questions can lead you to write about health, beliefs or other sensitive matters. Write only what you are comfortable sharing. We do not use what you write to profile you for anyone else, and you control whether it appears in WORLD by choosing what to answer.
8. Security
Data is encrypted in transit; drafts and sign-in tokens are also encrypted at rest. Access is limited and logged. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
9. Children
ta.ke is for people aged 18 and over. We do not knowingly collect data from anyone younger and delete it when we learn of it.
10. Changes
We will tell you in the app before material changes take effect.
11. Contact
support@take.international · Cemre Işıksal (ta.ke), İstanbul, Türkiye.