Privacy Policy

• Account details: your name, email address and password. The password is stored by our infrastructure provider in hashed form; we cannot see it in plain text. Whether your email address is verified is recorded too.
• Session records: when you sign in, our infrastructure provider records your IP address, browser and operating system details and a country derived from the IP address together with the session.
• Content you enter: post texts, scheduled dates and times, tags, idea notes, channel names and posting times.
• Media you upload: the image and video files you attach to posts, and their file names.
• Publishing channels (Telegram, Bluesky, Mastodon), only if you connect one: the credential you enter (Telegram bot token and channel, Bluesky handle and app password, Mastodon server and access token). It is stored encrypted, can be read only by our publishing function and is never shown to you again. We also store the public name of the connected account and the result and link of each delivery.
• Waitlist, only if you join it: your email address, optionally the intended use you selected, and the interface language at the time.
• Support correspondence, only if you write to us: your email address and what you write.
• Mobile app only: if you turn notifications on, reminders are scheduled on your device by the operating system; nothing is pushed from a server. A photo or video you choose with the system picker is uploaded only when you attach it to a post.

We do not ask for special categories of personal data (health, religion, biometric data and the like); please do not put such data in post texts or files.

Data is collected electronically and directly from you, through the sign-up, sign-in, post, upload, channel and waitlist forms. Session records are created automatically at sign-in.

• No advertising or analytics trackers, pixels or third-party analytics scripts are used.
• The pages do not load fonts or scripts from external sources.
• No payment information is collected; the service is currently free.
• We do not read your feed, followers or messages on the networks you connect.

• Creating your account, signing you in, storing and showing your content and media, publishing your posts to the channels you connected, sending verification and password reset emails: necessary to set up and perform the contract between you and us (KVKK art. 5/2-c).
• Keeping your account and the service secure and preventing abuse, using session records: our legitimate interest, provided it does not harm your fundamental rights and freedoms (KVKK art. 5/2-f).
• Telling people on the waitlist about new features: your explicit consent, given by ticking the box on the form (KVKK art. 5/1). You can withdraw it at any time by writing to us.
• Answering your requests and lawful demands: compliance with our legal obligations (KVKK art. 5/2-ç).

No decisions are made about you solely by automated means, and no profiling takes place.

• Appwrite Cloud (processor): storage of account, session, content, media, channel credential and waitlist data; sending verification and password reset emails. Location: Frankfurt, Germany (EU).
• GitHub Pages (hosting): serving the site's files. Your content is not sent to GitHub; your IP address may be kept in GitHub's logs when you visit. Location: GitHub's global infrastructure (including the USA).
• Cloudflare and Google (only if you email us): mail to the support address is forwarded through Cloudflare and read in a Gmail mailbox.
• Telegram, Bluesky and your Mastodon server (only when you publish): the text and media of your post are sent, on your instruction, to the network you chose and are then subject to that network's own terms.

These providers' servers are outside Türkiye, so your data is transferred abroad within the meaning of KVKK art. 9.

No other analytics, advertising, AI or payment service is used. Your data is not sold or shared with anyone for advertising. The free tools (character counter, image resizer, hashtag formatter, time converter) run entirely in your browser; nothing you enter is sent to a server.

If this list changes, the policy is updated before the change takes effect.

To keep you signed in, our infrastructure provider's essential session cookie is used (in some browsers a session key in local storage instead). Apart from that, only the following is kept on your device and sent nowhere: language, theme, time zone, the YouTube title of a post, when a verification email was last requested, your progress in the “First steps” list, an automatic copy of a new post you have not saved yet, and the dates of the days you opened the app. There are no advertising or tracking cookies, which is why no cookie banner is shown.

The site's files may be kept in your browser's cache so that it opens offline. That cache holds no personal data and none of your content.

• Account, content, media and channel credentials: for as long as your account is open. You can delete your posts, ideas, files and channels in the app at any time.
• Settings > Account > “Delete my account” deletes your posts, channels, channel credentials, ideas, tags and uploaded files, then your account record (name, email, hashed password), and ends your session. The steps are on the Delete your account page.
• If the account record cannot be deleted at that moment, the account is closed and you are told so on screen; in that case writing to destek@demle.app is enough to have it erased.
• Waitlist entry: until you withdraw consent or the announced feature is released. Write to destek@demle.app to have it deleted; deleting your account does not delete it.
• Support correspondence: at most two years after your request is closed.
• Posts already published on social networks are kept in your account on that network, not with us; you can delete them there.

Connections are encrypted (HTTPS). Each user can reach only their own rows and files. Channel credentials are stored encrypted and never sent back to the browser. If we learn of a data breach, we notify the Turkish Personal Data Protection Board and the people affected within the periods the law sets.

• To learn whether your personal data is processed,
• To request information about the processing,
• To learn the purpose of the processing and whether the data is used accordingly,
• To know the third parties, in Türkiye or abroad, to whom the data is transferred,
• To have incomplete or inaccurate data corrected,
• To have the data erased or destroyed under the conditions of KVKK art. 7,
• To have corrections and erasures notified to the third parties who received the data,
• To object to a result against you that arises from analysis solely by automated systems,
• To claim compensation if you suffer damage from unlawful processing.

Write to destek@demle.app from the email address registered on your account (requests under KVKK must be in Turkish). We may ask for additional information to verify your identity. We answer as soon as possible and within thirty days at the latest, free of charge; if the request involves an additional cost, the tariff set by the Board may apply.

If your request is refused, the answer is insufficient or you receive no answer in time, you may complain to the Personal Data Protection Board within thirty days of learning the answer and in any case within sixty days of your request.

The data controller is among those exempt from registration with the Data Controllers' Registry (VERBİS) by headcount and annual balance-sheet criteria.

Demle is not intended for people under 18 and does not knowingly collect data from them.

If this policy changes, the current version is published on this page and the date above is updated. Significant changes are also announced in the app.