Your contribution is visible.
Your data is not left unprotected.
This notice covers the SmilesPlanet mobile app and the separate sponsor web portal. The two account systems are not linked.
Last updated: 5 September 2026
On this page
Responsibility and contact
SmilesPlanet is developed by Beyondend Dev. Developer: Erhan Olgunelma. Address: Zühtüpaşa, Rıfat Bey Sk. No:2 kat:3, 34724 Kadıköy / İstanbul, Türkiye. Privacy requests: team@beyondend.dev.
Information processed in the mobile app
We process account identifiers, your chosen name and information from your sign-in provider; the location and evidence media of your Reports/Smiles, optional signature photo and words; community votes, token/Smile activity, sapling and certificate records. Location and camera permissions support map and contribution features. On-device face/smile detection assists the photo flow; it does not approve contributions on behalf of the community.
Information processed in the sponsor portal
We process email and session information for sign-in; name, address, city, country and phone for billing; brand name, logo, advertising text, link, placement points and order records. Your card number and security code are not collected in a SmilesPlanet form: payment takes place on iyzico’s page. We retain the order result and provider transaction reference.
What can other people see?
Your selected public name, signature photo, words and evidence/location information may appear on the relevant maps and cards. A sponsor’s brand name, logo, message and link are public advertising content. Their email and billing address are not added to the advertising card. The sponsor dashboard displays view and claim counts; these do not represent unique people.
Purposes and legal bases
Data is used to provide accounts and advertising services, verify contributions, complete sapling claims, prevent abuse and respond to support requests. Depending on the circumstances, processing relies on entering into or performing a contract, legal obligations, protection of rights, or legitimate interests balanced against fundamental rights. Where consent is required, it is obtained separately; reading this notice alone is not consent to all processing.
Service providers and data transfers
Google Firebase processes mobile accounts and app data; Appwrite infrastructure processes sponsor accounts, campaigns and images. Authentication/email, hosting, map and network services may process necessary technical data. Required billing and transaction details are sent to iyzico for payments. For sapling claims, the name/sponsor reference and recipient email are sent to Ecologi for impact orders and email notifications. Integration automation carries these operations. Providers operating in different countries may involve cross-border processing; contact us about the providers used and transfer arrangements. Information may be disclosed to competent authorities when legally required.
Local storage and technical records
Sessions, necessary application preferences and map/image caches may be stored in your browser or device. Unsaved campaign arrangements stay in the open form’s memory; Save draft creates a server record. IP, time and error records may be processed for service security. An image cache should not be treated as a private personal-data area.
Retention and removal
Records are kept as required by the service, security and applicable legal retention obligations. Old unpaid sponsor drafts may be cleaned up during maintenance. Paid campaigns, transaction history and distributed saplings are not automatically erased by account cleanup. In the mobile app you can permanently remove your own signature photo and words. Send account and data deletion requests to team@beyondend.dev; they are assessed with identity verification and applicable retention obligations. Legal requirements may prevent all records from being deleted at once.
Your rights and requests
Your rights under Türkiye’s Personal Data Protection Law (KVKK), including information, access, correction, deletion/destruction when the conditions apply, learning about data recipients, objection and seeking compensation, remain unaffected. Write to team@beyondend.dev with your account and request. We may ask for information needed to verify your identity securely; do not send passwords or card details. In-app editing restrictions do not remove your legal right to request correction or deletion.