AUCTA Privacy Policy
Last updated: November 7, 2026
AUCTA ("we", "us") is operated by Aytekin Karagöz, Eskişehir, Türkiye, who is the data controller for your personal data. Contact: aytekinkaragoz07+aucta@gmail.com.
What we collect
| Data | Why | Source |
|---|---|---|
| Email address | Sign-in codes, account recovery, service messages | You |
| Apple ID identifier (and name, first sign-in only) if you use Sign in with Apple | Sign-in | Apple |
| Profile: username, display name, city, bio | Your public collector profile | You |
| Collecting interests | Personalising Home and Showcase | You |
| Collections, pieces, stories, photos and videos | Showing your collections as you choose (public, followers or only you) | You |
| Follows, wishlist entries, reports, blocks | Social features and safety | You |
| Technical data: device type, OS version, app version, IP address, crash information | Running, securing and fixing the service | Your device / our providers |
We remove location data (EXIF/GPS) from photos on your device before upload. Videos are stored as uploaded and may contain metadata recorded by your phone (which can include location); check a video before you add it if that matters to you.
We do not sell personal data and do not use it for cross-app advertising or tracking.
Who can see what
- Public collections and pieces are visible to signed-in AUCTA users.
- Followers content is visible to people who follow you.
- Only me content is visible only to you.
- Your wishlist is private by default. When you wishlist someone's piece, they are told that a collector wants it, without your name unless you make that entry public.
- Blocking someone hides your content from each other and removes follows.
Service providers
We use processors who handle data for us under contract:
- Supabase (database, authentication, file storage) — region: EU (Ireland)
- Expo / EAS (app builds and updates)
- Apple and Google (app distribution, Sign in with Apple)
- Google (Gmail, used to send sign-in codes)
We do not use third-party analytics or advertising SDKs.
Your data is stored in the European Union. Some of these providers may process limited data in other countries, including the United States, under their own safeguards; by using AUCTA you consent to this transfer as required under KVKK.
How long we keep data
We keep your data while your account exists. When you delete your account (Settings → Delete account), we delete your profile, collections, pieces, photos, videos, follows, wishlist and notifications. Backups are overwritten within 30 days. We may keep limited records where the law requires it (for example, records related to reports of illegal content) for up to 12 months.
Your rights
Depending on where you live (including under KVKK and GDPR) you can ask to access, correct, export or delete your data, object to or restrict processing, and complain to a data protection authority (in Türkiye: KVKK Kurumu; in the EU: your local authority). Write to aytekinkaragoz07+aucta@gmail.com. You can delete your account at any time in the app, or by following the steps at https://aucta-pqt.pages.dev/delete-account/.
Children
AUCTA is not intended for children under 16. We do not knowingly collect their data.
Changes
We will update this page and the "Last updated" date when this policy changes, and tell you in the app about important changes.