KVKK Notice
WODLINE is being incorporated. The registered company name, address and MERSIS number will be published on this page once incorporation is complete. Until then, please send any request to privacy@wodline.app.
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform you about the personal data WODLINE processes as a data controller. The Turkish version of this notice is the governing text; this English version is provided for convenience.
1. Data controller
- Data controller
- WODLINE
- privacy@wodline.app
2. Scope of this notice
WODLINE is a software platform used by gyms. There are two different roles on the platform:
- Data for which WODLINE is the controller: website visitors, people who request a demo, gym owner and manager accounts, data relating to the security of platform accounts, and athletes' personal account data independent of a gym (personal space, their own workouts, athlete profile, social network activity, AI Coach use and notification preferences). This notice covers this data.
- Data for which gyms are the controllers: the membership, booking, attendance, training, performance and body measurement data of a gym's members, coaches and staff. WODLINE processes this data on behalf of the gym and on its instructions as a data processor. Informing people and obtaining explicit consent for this data is the gym's obligation; you can address your requests to your gym first.
3. Personal data processed, purposes and legal grounds
| Data category | Examples | Purpose | Legal ground (KVKK art. 5/2) |
|---|---|---|---|
| Identity and contact | Name, email address, username | Creating accounts, replying to demo requests, service messages | Establishing and performing a contract (c) |
| Customer transactions | Gym name, city, member count range, request and support content, subscription details | Preparing offers, subscription and billing processes, support | Establishing and performing a contract (c); legal obligation (ç) |
| Transaction security | IP address, session and device information, login records, error logs | Account security, preventing abuse, detecting and fixing errors | Legal obligation (ç); legitimate interest (f) |
| Training and performance | Workouts you create and plan yourself, scores, benchmark results, personal records | Workout planning, progress tracking, reminders, calculating levels and badges | Performing a contract (c) |
| Data that may be health data | Body measurements you enter in your personal space; Apple Health data if you choose to connect it | Tracking measurements and progress | Your explicit consent (KVKK art. 6); you can withdraw it at any time |
| Pain and injury records (health data) | The body area and side you mark, type (pain, injury, strain), how long it has lasted, 0–10 severity and its updates, your notes; notes your coach adds to the record | Tracking your pain and injuries; letting your gym's coaches adapt your training | Your explicit consent (KVKK art. 6); optional, you can withdraw it at any time |
| Social network | Username, profile photo, follow relationships, activity summaries, reactions and comments | Interacting with other athletes according to the visibility you choose | Performing a contract (c); data made public by the data subject (d) |
| Messages between members | The text messages you exchange with another member, message settings; the last 30 messages of a chat that was reported | Written communication between members; reviewing reports and preventing abuse | Performing a contract (c); legitimate interest (f) |
| AI Coach and notifications | AI Coach messages and drafts; device notification key | Generating AI Coach replies; sending reminders and notifications | Performing a contract (c) |
| Account authentication | Password (stored only as an irreversible hash) | Signing in securely | Performing a contract (c) |
WODLINE does not use the data covered by this notice for marketing. If commercial electronic messages are ever needed, they will only be sent with your separate consent.
Pain and injury records
- Optional. The log opens only after you read the text shown in the app before your first entry and tap "I agree". Without consent your membership and classes continue the same; only the pain log is not kept. Consent is asked separately for this purpose and is never ticked in advance.
- Who sees it: you and the people in a coaching role at your gym (owner, manager, head coach, coach, personal trainer). The front desk role does not. Coaches see only the records your consent covers, that is records created after you gave it; earlier records are visible to you only. Records are not shared with other gyms or with other athletes.
- Withdrawing: you can withdraw consent at any time in the app under Privacy and sharing → Health data permissions. From that moment coaches can no longer see the records; they stay visible to you only for 30 days and are then deleted. In the same place, "Delete my data now" deletes them straight away. When you leave a gym your consent there closes and the same 30 days apply; when you delete your account these records are deleted at once.
- Consent records (which text version you agreed to, when, and when you withdrew) and deletion records are kept as evidence, without any health value.
4. How data is collected
Your personal data is collected electronically through website forms, sign-up and login screens, the mobile app and support correspondence, and automatically through session cookies and server logs.
5. Transfers of personal data
Personal data may be transferred to the following groups of recipients, only as far as needed for the purposes above and with the necessary technical and organisational measures:
- Hosting and infrastructure providers (app hosting, database and file storage)
- Email delivery providers (account activation, password reset, notifications)
- Error monitoring and security providers
- The AI provider, when you use the AI Coach feature
- Platform providers delivering device notifications, if you allowed them (e.g. Apple)
- Other athletes on WODLINE, according to the visibility settings you choose
- Competent public authorities, where required by law
Our database is hosted on servers in the European Union (Germany). As some of our service providers' servers are abroad, your personal data may be transferred abroad in line with the safeguards in Article 9 of KVKK (e.g. standard contracts notified to the Personal Data Protection Authority). The current list of service providers is in the Privacy Policy.
6. Retention
Personal data is kept for as long as the purpose of processing requires and for the retention and limitation periods set by law, after which it is deleted, destroyed or anonymised. You can delete your account from within the app; what is deleted is described in the Privacy Policy.
7. Your rights under Article 11 of KVKK
By applying to WODLINE as the data controller, you have the right to:
- learn whether your personal data is processed,
- request information about it if it has been processed,
- learn the purpose of processing and whether it is used for that purpose,
- know the third parties, in Türkiye or abroad, to whom it has been transferred,
- request correction if it is incomplete or incorrect,
- request its deletion or destruction under Article 7 of KVKK,
- request that corrections, deletions and destructions be notified to the third parties it was transferred to,
- object to a result against you arising solely from automated analysis of the processed data,
- claim compensation if you suffer damage due to unlawful processing.
8. How to apply
You can send your requests, with information identifying you, to privacy@wodline.app in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Requests are answered free of charge within 30 days at the latest, depending on their nature. We forward requests about data for which gyms are the controllers to the gym concerned and help the gym respond.