Privacy Policy | Golden Born Society

1. Who we are and what this policy covers
Golden Born Society is operated by Mesut Can Coşkuncan, the data controller for the personal information described in this policy. This policy covers the Golden Born Society iOS and Android mobile applications, www.goldenbornsociety.com, and related membership, community and support services.
Contact: hello@goldenbornsociety.com
Postal address: Esentepe Mah. Büyükdere Cad. Levent 199 No:199 İç Kapı No:6, Şişli, İstanbul, Türkiye.
Telephone: +90 539 650 0891.
Our community is intended only for people aged 18 or older.

2. Information we process
Account and sign-in information: your name, email address, user identifiers, authentication and session information, and information returned by a sign-in provider when you choose Google, Apple or LinkedIn sign-in. Email/password credentials are handled through our authentication provider, Clerk.
Member profiles and professional information: your profile photo, biography, city/country, company or venture, role, company website, professional/social profile links, interests, connection goals and other onboarding or verification information you provide. Phone information is processed if you provide it. Some details are required to create or complete your membership profile; others are optional.
Community content and activity: connections, requests, messages, event listings and participation, reports, blocks, invitations, referrals, saved items, daily ritual or reflection entries, and other content or actions you submit through the service.
Subscriptions: membership status, product identifiers, purchase and transaction history, renewal/expiry information, entitlement records, trial information and subscription-provider identifiers. Apple or Google handles payment credentials for in-app purchases; we do not receive your full payment-card number from those purchases.
Device and service information: IP addresses, device or installation identifiers, device/operating-system information, app version, push-notification tokens, diagnostic and performance information, and subscription/paywall interactions. Our service providers may process this information when supplying authentication, hosting, messaging, subscription or monitoring services. Depending on platform permissions and SDK settings, device identifiers can include an Android advertising identifier; collecting an identifier is distinct from displaying advertisements.
Locations: your chosen profile city and locations, addresses or coordinates submitted for events. Address search and maps use mapping services. Displaying an event location is not the same as tracking your live GPS position. Our current app does not implement background GPS tracking. External map or directions applications operate under their own policies.
Support: the content of requests, correspondence and information needed to resolve an issue or verify a privacy request. Do not send passwords or full payment-card details to support.

3. Why we use information
We use account/profile information to authenticate you, administer membership, assess profile eligibility and operate the community. We use messages, connections and event information to provide the features you choose, and subscription records to grant and reconcile paid access.
We use technical data for security, fraud prevention, troubleshooting, service performance and subscription analytics. Reports and blocks help us moderate content and protect members. Notification tokens and preferences support event, social and service notifications; marketing communications are subject to applicable permissions and your choices.
Where Turkish data-protection law applies, the relevant bases include performance of our agreement for account and service delivery; legal obligations for required records and disclosures; legitimate interests for proportionate security, administration and service improvement; and establishment or protection of legal rights for disputes. We obtain explicit consent where a processing activity requires it, including applicable optional marketing or permission-based processing. This privacy notice is not a request for blanket consent.

4. What other people can see
Profile information and community content are shown to the members, recipients, participants or organizers relevant to the feature. Profile email visibility follows your available privacy setting. Messages are available to their recipients and may be accessed by authorized personnel where necessary for support, safety or legal obligations; they are not described as end-to-end encrypted.
Shared event links or exported invitations may expose event information outside the app. People who receive information can retain their own copies. Avoid including confidential business information, health records or sensitive personal information in community content or reflection notes.

5. Providers and disclosures
We use providers to operate the service, including Clerk for authentication; Convex for application data, storage and backend functions; Adapty for subscriptions, entitlements and purchase analytics; Expo for app services, push delivery and performance monitoring; Firebase Cloud Messaging and Apple notification services for device notifications; Google/Apple mapping services for maps and address functions; and Wix for the website. Apple, Google and LinkedIn also process information under their own terms when you use their sign-in or store services.
Providers receive information needed for their functions, such as account identifiers, subscription records, notification tokens or technical information. We may disclose relevant information to professional advisers or competent authorities where required by law or necessary to protect legal rights. We do not sell your personal information. Service-provider processing and sharing content with another member are not excluded by that statement.
Provider information: clerk.com/legal, convex.dev/security, adapty.io/privacy, expo.dev/privacy, firebase.google.com/support/privacy, policies.google.com/privacy, apple.com/legal/privacy, linkedin.com/legal/privacy-policy and wix.com/about/privacy.

6. International processing
The service is operated from Türkiye and uses international providers. Information can be processed outside your country, including in European and United States infrastructure used by those providers. Applicable transfer requirements, including Article 9 of the Turkish Personal Data Protection Law where relevant, apply independently of this policy. You may contact us for information about the providers, processing locations and transfer arrangements relevant to your information. Accepting this policy does not itself waive those requirements.

7. Security, device permissions and website storage
App communications with our service endpoints use encrypted transport. We apply access controls and other appropriate safeguards, but no service can guarantee absolute security. Protect your credentials and device, and notify us of suspected unauthorized access.
Photo/camera/media permissions support features you choose, such as uploading a profile or event image or saving an exported image. Notification permissions and preferences can be changed in the app or device settings. Denying an optional permission may limit the relevant feature.
The website and authentication services use cookies or similar storage for sessions, security and preferences. Any optional website analytics or marketing storage is subject to applicable consent controls. The mobile app also stores session and preference information; browser cookie controls do not control all mobile SDK processing.

8. Retention and deletion
We keep information while necessary to provide your account and chosen features. We also retain records only where a continuing purpose or legal requirement applies, such as purchase reconciliation, tax obligations, unresolved disputes or proportionate safety investigations.
Account closure and complete data erasure are different steps. You can use Profile → Settings → Delete Account to close your app account. To request deletion of the account and associated personal information without installing or reopening the app, email hello@goldenbornsociety.com from your registered email address with the subject “Account and Data Deletion”. The Account & Data Deletion section of our Cancellation & Refund Policy explains the request process and categories involved.
We review verified requests, remove or irreversibly anonymize information no longer needed, and coordinate relevant requests with our processors. If a record must be kept, we explain the category, reason and applicable retention period in our response. Residual backup copies follow the applicable provider deletion cycle and are not used to recreate an active account. A closed-account flag alone is not treated as completed erasure.
Deleting your app account does not automatically cancel an Apple or Google subscription. Manage renewal through the store where you subscribed. Cancellation is not a prerequisite to submitting a deletion request.

9. Your choices and rights
You can update supported profile information and notification preferences, remove your profile photo, and use available blocking/reporting features. For access, correction, deletion, restriction, objection, consent withdrawal or other rights that apply in your jurisdiction, contact hello@goldenbornsociety.com. Under Turkish law, rights also include information about processing and recipients, correction/deletion notifications to recipients, objection to adverse results from exclusively automated analysis, and compensation where statutory conditions are met.
We may request proportionate information to verify a request. We respond within applicable legal deadlines; Turkish-law applications are addressed within 30 days. You may also complain to the competent data-protection authority. Withdrawing consent does not affect earlier lawful processing and does not remove other lawful grounds for necessary processing.

10. Age, changes and contact
People under 18 must not create an account or use the community. Contact us if you believe a minor has supplied personal information so we can investigate and address it.
We update this policy when relevant practices change, revise the date above and provide additional notice where required. For privacy requests, contact the operator using the details in section 1.