Data Protection Notice (KVKK)

1. Data Controller

This notice is provided under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") to inform users of the VoleyPro mobile app.

Data controller: VoleyPro Contact: info@voleypro.com Service: VoleyPro mobile app (iOS and Android)

2. Personal Data We Process

• Identity data: first name, last name • Contact data: email address • Security data: your hashed password, session tokens, sign-up and sign-in records • Sports profile: level, position, training goals, weekly training frequency, preferred days, preferred session length and intensity • In-app usage data: training programs you create, drills and notes you add to them, drills you complete, and your training calendar

The app does not collect date of birth, national ID, location, contacts, photo library, biometric data, or any special category of personal data (including health data) within the meaning of Article 6 of the KVKK.

3. Purposes of Processing

• Creating your account, authenticating you and maintaining your session • Creating and storing your training programs and tracking your progress • Suggesting drills and programs that match your level and goals (in-app training wizard) • Scheduling reminder notifications on your device for planned sessions • Responding to your support requests • Keeping the app and your account secure and preventing misuse

4. Legal Grounds

Your data is processed under Article 5 of the KVKK on the following grounds:

• Art. 5/2-c: necessary for the conclusion or performance of a contract (opening your account and providing the service) • Art. 5/2-ç: compliance with a legal obligation of the data controller • Art. 5/2-f: legitimate interests of the data controller, provided your fundamental rights are not harmed (service security and improvement) • Art. 5/1: your explicit consent, for optional features only (e.g. notification permission)

5. Method of Collection

Your personal data is collected electronically and directly from you, through the forms you fill in when you register and while you use the app. The app contains no third-party analytics, advertising or tracking SDKs.

6. Transfer of Personal Data

Your personal data is never sold, rented or transferred to third parties for marketing, advertising or profiling purposes.

Your data is processed only on VoleyPro infrastructure located in Türkiye, and in-app videos and content are served from the same infrastructure. Your data is not transferred abroad.

Data may only be shared with public authorities that are legally competent, upon a duly made request and within the limits set by the applicable legislation.

7. Retention Periods

• Your account and profile data is kept for as long as your account is active. • When you delete your account, the personal data linked to it is erased, destroyed or anonymised within 6 months at the latest. • Where legislation requires certain records to be kept longer, they are retained only for that period and only for that purpose.

8. Data Security

Passwords are stored in an irreversibly hashed form, all traffic between the app and the server runs over an encrypted connection, and account data is accessible only to authorised personnel on a need-to-know basis. The technical and organisational measures required by Article 12 of the KVKK are in place and reviewed regularly.

9. Users Under 18

VoleyPro is a training app for athletes of all ages. If you are under 18, you should use the app only with the knowledge and permission of your parent or legal guardian. If you are a parent or guardian and want processing of your child’s data to stop, write to info@voleypro.com and the account and related data will be deleted.

10. Your Rights under Article 11

By applying to the data controller, you have the right to:

• Learn whether your personal data is processed; • Request information about it if it has been processed; • Learn the purpose of processing and whether the data is used accordingly; • Know the third parties to whom the data is transferred, in Türkiye or abroad; • Request correction of incomplete or inaccurate data; • Request erasure or destruction under the conditions of Article 7 of the KVKK; • Request that corrections and erasures be notified to third parties to whom the data was transferred; • Object to a result against you produced solely by automated analysis; • Claim compensation if you suffer damage due to unlawful processing.

11. How to Apply

To exercise your rights, send your request to info@voleypro.com. Requests are answered free of charge within 30 days at the latest; where the process incurs an additional cost, the fee set by the Board may apply.

You can also delete your account and data from within the app: Home > Profile and Settings > Delete Account.

12. Changes

This notice may be updated following changes in legislation or new features added to the app. The current version is always available in the app, and you will be informed in the app of any significant change.

Addendum: the voleypro.com Website

In addition to the VoleyPro mobile app, this document also applies to the voleypro.com website and web app. You sign in with the same account on the web, and the data listed above is processed on the same infrastructure for the same purposes.

Specific to the website, the following is also processed:

• Server access logs: IP address, browser and device information (user agent), the page requested, and the date and time. These logs are kept for a limited period, solely to keep the service secure, prevent misuse and diagnose errors, on the basis of legitimate interest (KVKK Art. 5/2-f). • Browser storage: The website does not use cookies. Your browser's local storage (localStorage) holds only your session tokens, your theme (dark/light) preference and your library view preference. None of it is used for advertising or tracking; session tokens are removed when you sign out, and you can clear all of it in your browser settings. • Sign in with Google: If you use this option you are redirected to Google's sign-in page, and with your consent Google shares your name, email address and Google account ID with VoleyPro. Google's own privacy policy applies to that step. This option is optional; you can also register with an email and password.

The website contains no third-party analytics, advertising or tracking tools; fonts and images are also served from VoleyPro servers.

To delete your account on the web: Settings > Delete my account. Questions: info@voleypro.com