Privacy Policy

1. Data controller and scope

Kira360 A.Ş. ("Kira360", "we") acts as the data controller for the processing described in this policy, unless a specific service notice states otherwise. This policy applies to Kira360's iOS and Android applications, kira360.com.tr websites and related tenant and property owner services.

Privacy contact: destek@kira360.com.tr

2. Personal data we collect

Account and identity data

Name, email address, telephone number, account role, account identifiers, authentication records and profile information.

Lease and property data

Property details and images, addresses, lease agreements, tenant-owner relationships, deposit information, documents, notices and contract dates.

Payment and transaction data

Rent obligations, due dates, payment status, amounts, bank matching references, receipts, remittance information and accounting records. Kira360 does not request full card credentials through the account deletion form.

Maintenance and support data

Maintenance requests, descriptions, status updates, contact details and files such as photographs or PDF documents that you choose to upload.

Device, security and usage data

Device identifier, device model, operating system, app version, push notification token, IP address, session and security logs, crash or diagnostic data and interactions needed to operate and secure the service.

3. Purposes and legal bases

• Create and manage accounts, authenticate users and provide tenant or property owner features; based on performance of a contract or steps requested before entering a contract.
• Manage leases, rent tracking, maintenance, documents and support; based on contract performance and legitimate interests in operating the service.
• Maintain accounting, tax, compliance and dispute records; based on legal obligations and the establishment, exercise or defense of legal claims.
• Protect accounts, prevent fraud and investigate abuse; based on legal obligations and legitimate security interests.
• Send service, payment, maintenance and security notifications; based on contract performance, legal obligations or your device notification preference.
• Send optional marketing communications only where permitted and, when required, with consent. You may withdraw consent at any time.

4. Sharing and service providers

We share personal data only as necessary with authorized Kira360 personnel; property owners or tenants who are parties to the same lease relationship; banks, payment and accounting providers; hosting, storage, email, notification, security and technical support providers; professional advisers; and public authorities where legally required.

Push notifications may be delivered through Apple Push Notification service (APNs) or Google Firebase Cloud Messaging (FCM). These providers process device and delivery identifiers under their own terms and privacy notices.

5. International transfers

Some infrastructure, device notification or support providers may process data in other countries. Where a cross-border transfer occurs, Kira360 applies the transfer mechanism and safeguards required by applicable data protection law, including appropriate contractual and organizational measures.

6. Retention

We retain personal data only as long as needed for the purposes described above, an active account or lease, applicable statutory accounting and tax periods, security and fraud prevention, and the establishment, exercise or defense of legal claims. When the purpose and legal retention period end, data is deleted, anonymized or securely isolated.

7. Your rights and choices

Subject to applicable law, you may ask whether your data is processed; request access, correction, deletion or restriction; object to certain processing; request portability where applicable; withdraw consent; and lodge a complaint with the competent data protection authority.

To request account deletion without signing in, use the Account Deletion Request page.

Other privacy requests may be sent to destek@kira360.com.tr. We may request proportionate information to verify your identity and authority.

8. Security

Kira360 uses administrative, technical and physical safeguards designed to protect personal data, including access controls, session and token protections, authorization checks, secure file access, logging and incident response practices. No service can guarantee absolute security; please protect your device and credentials and report suspected misuse promptly.

9. Children

Kira360 is intended for adults who can enter into or participate in property and lease relationships. It is not directed to children, and we do not knowingly create accounts for children without a valid legal basis and required authorization.

10. Changes to this policy

We may update this policy when our services, legal obligations or processing practices change. The current version and effective date will always be published at this URL. Where a material change requires additional notice or consent, we will provide it through an appropriate channel.