1Who is responsible
The MarineBase mobile app and the marinebase.app website are operated by Yağız Altınışık, who is the data controller under the EU General Data Protection Regulation (GDPR) and Türkiye’s Personal Data Protection Law No. 6698 (KVKK).
Contact: destek@marinebase.app
Postal address: Altındağ Mah. 100. Yıl Bulvarı, Yıldırım Apt. No: 28/3, 07050 Muratpaşa / Antalya, Türkiye
Users in Türkiye can also read the KVKK information notice (in Turkish).
2What data we process
We process only the data the app needs to work. The table shows when each item is created and who can see it.
| Data | When and how | Who can see it |
|---|---|---|
| Account details: name, email address, phone number with country code | You enter them when you sign up. Your password is stored only as a hash by the authentication service and never in our profile records. Verification and password reset codes are sent to your email. | Your name and phone number are public in your listings. Your email is visible only to you and the operator. |
| Session data | When you sign in, a session refresh token is stored in your device’s secure storage (the iOS Keychain). | Only your device. It is deleted when you sign out. |
| Listing details: title, description, boat type, year, length, cabins, capacity, sale price or daily charter rate, marina and city, listing date | You enter them when you publish a listing. | Public, including people without an account. |
| Listing photos | 1–10 photos you pick from your library or take with the camera. Only the photos you select are uploaded. | Served from a public link. |
| Business profile: business name, description, website, contact details, address, specialities | Filled in optionally by holders of the Professional or Corporate package. | Public. |
| Favourites, in-app notifications, notification setting | Created as you use the app. | Only you. |
| Listing interactions | Recorded at most once a day when a signed-in user opens someone else’s listing, or calls or messages the seller. | The listing owner sees only total view, contact and favourite counts, never who viewed. |
| Reports and blocks: reason, description, listing title, review outcome; users you block | Created when you report a listing or block a user. | Reports are visible only to the operator; the listing owner is not told who reported. Your block list is visible only to you. |
| Support requests | Messages you send through the in-app support form (available to package holders) or by email. | Only the operator. |
| Purchase records: order number, Apple transaction IDs, product, price and currency, environment (Apple sandbox or live), purchase, renewal, expiry and refund dates, subscription and auto-renewal status, the package entitlements granted, Apple notification type | Created when you make an in-app purchase (Apple StoreKit 2) and from Apple’s App Store Server Notifications. When you buy, when you restore purchases and, if you are signed in, when the app starts or you open the packages screen, the transaction information signed by Apple is sent to our server for verification. To match a purchase to your order, a randomly generated order ID is passed to Apple; it contains no name or email address. Apple takes the payment; your card or bank details never reach us. | You (your transaction history) and the operator. |
| Free-listing record: protected identifier derived from your phone number, first registration date, date of the last annual free listing | Created when you register and when you publish a free listing. The identifier is a keyed hash (HMAC) of the phone number and contains no plain phone number or email. | Nobody; it is used only on the server to check entitlements. |
| Location (optional) | Used only if you allow it. On the home screen it is processed on your device to sort nearby marinas. The weather screen works with the fixed coordinates of its preset coastal places and does not use your location unless you choose “My location”. If you do, your coordinates are sent to Open-Meteo for the forecast and to Apple’s location services to find the city name. | Not stored on our servers. |
| Preferences on your device: language, whether you accepted the welcome notice | Stored on your device. | Only your device. |
| Technical data: IP address, request time, client information | May be logged in our service providers’ systems for security and operation when the app connects to them. | Service providers and the operator. |
What we do not process. We do not access your contacts, microphone, or health or financial data. We do not use the advertising identifier or track you across other apps and websites. We send no push notifications or marketing email. Questions you type into the Marine assistant are answered on your device and are not sent to a server.
Device permissions. MarineBase asks only for camera, photo library (when you add listing photos) and location (while you use the app). It does not ask for motion or Face ID access, and it does not collect or process motion sensor data or biometric data (including Face ID). The app’s iOS permission texts include motion and Face ID descriptions because software libraries linked into the app contain code that refers to those iOS features; MarineBase does not use them.
3Purposes and legal bases
We process your data for the purposes below. Legal bases are given under the GDPR (for users in the EU, EEA and UK) and correspond to KVKK Article 5(2).
| Purpose | Data | Legal basis |
|---|---|---|
| Creating your account, sign-in and email verification | Account and session data | Contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Publishing your listing and letting buyers contact you | Listing details, photos, name, phone number, business profile | Contract |
| Favourites, in-app notifications and listing statistics | Favourites, notifications, listing interactions | Contract; legitimate interests for statistics (Art. 6(1)(f)) |
| Preventing abuse of the free listing allowance | Free-listing record, phone number | Legitimate interests |
| Granting paid packages, verifying purchases, handling refunds and disputes | Purchase records | Contract; establishing, exercising or defending legal claims |
| Keeping financial records | Purchase records | Legal obligation (Art. 6(1)(c)) |
| Reviewing reports, checking content for objectionable terms before it is published, removing content that breaks the rules, protecting users | Reports, blocks, listing details; for the pre-publication check, the listing title and description, profile name and business profile text | Contract; legitimate interests; legal claims |
| Answering support requests | Support messages, account details | Contract; legitimate interests |
| Forecasts and nearby marinas | Location (optional) | Contract (providing the feature you ask for); you can withdraw location access at any time in iOS Settings |
| Security and operation of the service | Technical data | Legitimate interests; legal obligation |
We do not use your data for profiling, and we make no decisions about your account by automated means alone. The only automated step is a pre-publication content check: the listing title and description, profile name and business profile text are compared with a list of blocked terms on our server before they are saved, and content that matches is rejected. The check runs on our server and your text is not sent to any third party for it. See the Terms of Use.
4Public information
A listing you publish is visible to everyone who uses the app, including people without an account, together with its title, description, boat details, price, marina and city, photos, seller name and contact phone number. The seller name and phone number are added from your profile automatically. Your business profile is public too.
Others can save or share public information, and once you delete a listing we have no control over such copies. Make sure your photos do not show licence plates, home addresses, other people’s faces or documents. Photo files may contain technical information added by your device (metadata).
6International transfers
Our providers’ servers may be located outside your country, for example in the European Union, the United States or other countries. Your personal data may therefore be transferred to and processed in those countries. To ask about the safeguards for these transfers, write to destek@marinebase.app.
7How long we keep data
We keep data for as long as it is needed for the purpose it was collected for, and then delete it.
| Record | Retention |
|---|---|
| Account and profile, listings, photos, business profile, favourites, notifications, blocks, listing interactions | While your account exists. Deleted when you delete your account. Deleting a single listing deletes that listing and its photos. |
| Unpublished or expired listings | Stay in My listings, visible only to you, until you delete them or your account. |
| Free-listing record (protected identifier, first registration and last free listing dates) | Kept after account deletion for as long as it is needed to apply the free listing rule. No automatic deletion period is currently set for this record. |
| Purchase, transaction and payment notification records | Unlinked from your account when it is deleted; kept for as long as financial and legal obligations under the applicable legislation require. |
| Report records | For as long as needed to keep moderation history and handle possible disputes; unlinked from the reporter when their account is deleted. |
| Support requests and support email | For as long as needed to resolve the request and any related dispute. |
| Admin audit records | For as long as needed to prevent abuse and keep actions traceable. |
| Backups and provider logs | Until the provider’s backup and log cycle has completed. |
| Preferences and session token on your device | On your device until you delete the app; the session token is deleted when you sign out. |
8Deleting your account
You can delete your account in the app at any time: Profile > Account > Privacy > Delete my account. Deletion starts as soon as you confirm, and you are signed out when it completes. If you cannot access the app, email destek@marinebase.app from the address registered to your account. For step-by-step instructions see Delete your account.
What is deleted
- Your account (email address and password hash) and profile (name, phone number, notification setting)
- All of your listings and their photo files
- Your business profile
- Your favourites, in-app notifications and block list
- View and contact records for your listings and those you created as a viewer
What is kept, and why
- Free-listing record. A protected identifier derived from your phone number, your first registration date and the date of your last annual free listing are kept. This stops the free listing allowance from being reset by registering again with the same number. The record contains no plain phone number or email address, but it is not anonymous: it matches again if the same number is entered.
- Purchase and transaction records. Orders, package entitlements and Apple transaction records are unlinked from your account and kept for as long as financial and legal obligations under the applicable legislation require.
- Report records. The report text, the listing title and the review outcome may be kept as moderation history, unlinked from you.
- Support requests and admin audit records. The link to your account is removed; personal details you wrote in a message may remain in its text. You can ask us to delete these records.
- Backups and provider logs. Deleted data may remain in these copies until the provider’s backup and log cycle has completed.
Removing the app from your phone does not delete your account. Deleting your account does not cancel an App Store subscription; cancel it on your iPhone under Settings > [your name] > Subscriptions.
9How we protect your data
Connections between the app and the servers are encrypted with HTTPS. Row-level access rules in the database mean each user can read and change only their own private records. Free-listing, purchase and report records are kept in a separate area the app cannot access directly. Your session token is kept in your device’s secure storage.
No system is completely secure. If we learn of a personal data breach, we will notify the competent authorities and the people affected as the law requires.
10Children
MarineBase is not directed at children under 13, and we do not knowingly collect personal data from them. You must be at least 18 to create an account and publish listings. If you believe a child has given us personal data, write to destek@marinebase.app and we will delete it.
11Your rights
You can change your name under Edit profile and delete your listings and your account in the app. Depending on where you live, you also have these rights:
Users in the EU, EEA and UK (GDPR)
- access to your personal data and a copy of it,
- rectification of inaccurate data,
- erasure,
- restriction of processing,
- data portability for data you provided to us,
- objection to processing based on legitimate interests,
- withdrawal of consent at any time, for example by turning off location access in iOS Settings,
- lodging a complaint with your local data protection authority.
Users in Türkiye (KVKK Article 11)
You can learn whether your data is processed and request information about it; learn the purpose of processing and whether data is used accordingly; know the third parties in Türkiye or abroad to which it is transferred; ask for correction, deletion or destruction and for these to be notified to recipients; object to a result against you arising solely from automated analysis; and claim compensation for damage caused by unlawful processing. Details are in the KVKK information notice.
To exercise your rights, email destek@marinebase.app from the address registered to your account. We may ask for information to confirm your identity. We answer within one month (GDPR) and at the latest within 30 days (KVKK), free of charge.
12This website
marinebase.app sets no cookies of its own, contains no analytics, advertising or social media tools, and loads no fonts or code from other servers. The site is hosted on Cloudflare, which processes technical data such as visitors’ IP addresses to deliver the site and protect it from abuse, and may set a strictly necessary security cookie.
13Changes
We may update this policy when the app or our practices change. The current version is always published at this address with the date at the top. We announce significant changes in the app or on this page before they take effect.
14Contact
For any privacy question or request: destek@marinebase.app. Data controller: Yağız Altınışık.