Privacy policy

Doğan Duman, Eskişehir, Türkiye is the data controller for the personal data processed through Luce, under Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR). Contact: hello@luce.show.

• Your account: e-mail address, name, username, profile photo and cover. Signing in with Google gives us your name, e-mail address and photo from Google.
• What you create: events, photos and videos, your library, reels, comments, likes, votes, messages, tasks and organization details.
• Taking part in events: your answers (going, maybe), whether you joined a show, and a random identifier for your phone during a show.
• What your phone allows: if an event asks for on-site presence, your location is checked against the venue during the show and not kept. Fan Cam video is streamed live while you are on it and not recorded. Spotlight photos you send are kept with the event.
• Notifications: your device's push token and your preferences.
• Payments: Creem handles your payment details. We receive your customer number, your plan, what you bought and whether it was paid, never your card.
• Technical data: IP address, browser and device type, and logs for security and troubleshooting. Your approximate location from your IP address may be used to show nearby events. A session cookie keeps you signed in, and your browser stores some preferences. Luce has no advertising or analytics trackers.

• To provide Luce: your account, events, shows, messages and plans (the contract between us).
• To keep Luce safe: preventing abuse, bots and fraud, and fixing faults (our legitimate interest).
• To take payments and keep records the law requires (legal obligation).
• To send the notifications you choose in your settings.

Automated tools translate event descriptions and check photos sent to big screens before they are shown.

We use these providers, each only for its part:

• Cloudflare: hosting, database, file storage, live connections, the bot check (Turnstile), and AI for translations and photo checks
• Creem: payments, as merchant of record
• Knock: notifications and the in-app inbox; Resend: e-mail delivery; Google Firebase: push notifications
• Google: signing in with Google, and maps
• Klipy and Pixabay: GIF and image search (only what you search for)

What you make public (public events, your profile, comments) can be seen by others; a private event can be seen by anyone with its link. We don't sell personal data.

These providers may process data outside Türkiye, including in the European Union and the United States. Such transfers are made as the KVKK and the GDPR allow, for example under standard contractual clauses or, where required, with your explicit consent.

We keep your data while your account exists. When you delete your account (Settings → Account), your profile, your own events and your files are deleted. Records the law requires us to keep, such as payment and tax records held by Creem, are kept for as long as it requires. Demo shows are deleted after 7 days, and server logs are kept only for a limited time.

Under Article 11 of the KVKK and, where it applies, the GDPR, you can ask whether we process your data and for information about it; to know its purpose and who it is shared with; to have it corrected or deleted; to object to a result reached only by automated means; to receive it in a portable form; and to claim compensation for unlawful processing. Where we rely on your consent, you can withdraw it.

Write to hello@luce.show. We answer within 30 days. You can also complain to the Personal Data Protection Authority (KVKK) or to the data protection authority where you live.

Accounts are for people aged 16 and over. If you believe a child has given us personal data, write to us and we will delete it.

Data is encrypted in transit, access to it is limited to what running Luce needs, and our providers protect it with their own safeguards. No system is perfectly secure; if a breach affects you, we tell you and the authority as the law requires.

We may update this policy. For changes that matter, we tell you by e-mail or in the app before they apply.