This notice explains how the personal data of physiotherapists and patients who use the PhysioLand mobile application (the "App", the "Service") is processed under the Turkish Personal Data Protection Law No. 6698 ("KVKK"). The Turkish version of this policy is the governing version; this English version is provided for convenience.
Your personal data is processed by PhysioLand as the data controller, within the scope and for the purposes described below.
You can send any request, question or application regarding the data controller to destek.physioland@gmail.com. Your applications are answered within the procedure and time limits described in Section 7 below.
The data processed differs depending on your role:
For all users: Full name, email address and for users in Türkiye, the phone number verified by SMS when creating an account (users abroad are verified by an email link instead; their number is not verified and is kept only for contact purposes). If you sign in with Google or Apple, the name and email address shared by these services. The notification token of your device, so that we can send notifications. App usage and transaction data (sign-in records, device information).
For physiotherapists, additionally: The graduation document you upload to verify that you are a physiotherapist (the e-Devlet graduate certificate, or a photo or scan of your diploma or graduation certificate; it is reviewed once and permanently deleted the moment it is approved or rejected, and no copy is kept); professional information (areas of expertise, years of experience, institution, city and district, profile photo); wallet and token transaction history, and bids placed on patient requests.
For patients, additionally (special category data): Health data (diagnosis, complaint, pain score, exercise history, clinical assessment notes); for patients who open an independent account, gender and date of birth (stored separately with restricted access); optionally, content you share in the social feed.
In messaging: Messages, photos and videos you send in chats. The camera, photo library and microphone are accessed only when you start taking or selecting a photo/video.
When a physiotherapist request is created: Request details (city, age, goal, complaint, treatment plan).
Location: Your device location is not collected. We record the city and district you select yourself.
Account Creation / Membership — Full name, email, phone; gender and date of birth for independent patient accounts. Purpose: member management, authentication. Legal ground: establishment/performance of a contract (Art. 5/2-c).
Phone / Email Verification — Phone number (Türkiye: by SMS) or email address (abroad: by a verification link). Purpose: preventing fake accounts and abuse, so that both patients and physiotherapists can communicate safely. Legal ground: legitimate interest (Art. 5/2-f).
Professional Verification (Physiotherapist) — Graduation certificate. Purpose: ensuring that only real physiotherapists can place bids. The document is reviewed only by the PhysioLand administrator and is permanently deleted from our systems the moment it is approved or rejected; this deletion is also performed automatically on the server, no copy is kept and it is never shared. Legal ground: legitimate interest, performance of a contract.
Exercise Program and Treatment Process — Diagnosis, complaint, pain score, exercise history, clinical notes. Purpose: creating the program and tracking progress. Legal ground: explicit consent (Art. 6), performance of a contract.
Physiotherapist Matching — Creating a Request (Patient) — City, age, goal, complaint, diagnosis. Purpose: matching with suitable physiotherapists. Legal ground: performance of a contract, explicit consent.
Physiotherapist Matching — Placing a Bid (Physiotherapist) — Bid message, professional information, token transactions. Legal ground: performance of a contract.
Messaging — Message content and photos/videos sent. Legal ground: performance of a contract.
Notifications — Device notification token. Purpose: sending notifications for events such as new messages, program changes and bids. You can turn notifications off in your device settings.
Payment / Token Purchases / Subscription — Purchase history, balance and subscription status. Your card details are processed by the store you use (Apple App Store on iPhone, Google Play on Android) and never reach us. Legal ground: performance of a contract, legal obligation.
Ratings / Reviews / Social Sharing — Rating, review and post text. Legal ground: legitimate interest (Art. 5/2-f).
Reports and Moderation — Reported content and records containing contact information. Purpose: removing content that violates the rules and protecting users. Legal ground: legitimate interest.
Support Requests — Contact information and request content. Legal ground: legitimate interest, performance of a contract.
Your explicit consent for your health data is obtained on a separate consent screen before you create an account, and you can withdraw it at any time (see Section 7).
Your data is not shared with third parties for advertising purposes and is never sold. The App does not use any software for advertising or user tracking.
Your data is retained for as long as your account is active and for as long as required by the purposes above. Your graduation document is reviewed once and deleted the moment a decision is made (apart from the infrastructure provider's short technical recovery period of at most 7 days). When you delete your account, your data is permanently deleted; only records subject to a legal retention obligation may be kept for the period required by the relevant legislation.
Your data is collected electronically through the forms you fill in within the App, the information you enter, and records created automatically while you use the App.
Apart from session management and basic functionality, the App does not use third-party cookies or tracking technologies for marketing or advertising purposes.
Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, to request information, to request correction or deletion of your data, to request that third parties to whom data has been transferred be notified, to object to a result arising from automated analysis, and to claim compensation if you suffer damage.
How to apply: You can apply in writing to destek.physioland@gmail.com together with a document proving your identity. Your application will be concluded free of charge within 30 days at the latest.
What you can do yourself in the App (Profile → Privacy and My Data): export your data in JSON format; permanently delete your account and all your data with a single tap. For the account deletion steps, see the Account and Data Deletion page (in Turkish).
When this policy is updated, significant changes are announced within the App. If the scope of your consent to the processing of health data changes, your consent will be requested again.
PhysioLand
Email: destek.physioland@gmail.com