Fanly — Privacy Policy

Effective date: June 12, 2026 · Last updated: June 12, 2026

This Privacy Policy explains how Clovy Yazılım Teknolojileri A.Ş. ("Clovy App Studio", "we", "us", "our") collects, uses, and shares information about you when you use the Fanly mobile application ("Fanly", "the App"). We are committed to protecting your privacy in accordance with the Turkish Personal Data Protection Law (KVKK No. 6698) and the EU General Data Protection Regulation (GDPR), where applicable.

1. Who we are

Fanly is operated by Clovy Yazılım Teknolojileri A.Ş., a company registered in Türkiye with its principal place of business in Ankara. For privacy-related questions, contact us at support@clovyappstudio.com.

2. Information we collect

2.1 Account information

Email address (when you create an account via Supabase Auth)
Encrypted password (stored by Supabase, never visible to us)
A unique user identifier generated by Supabase
Apple ID identifier (if you sign in with Apple)
Google account identifier (if you sign in with Google)

2.2 App-specific data

Fanly creates AI-generated sports avatars by inserting your likeness into sports moments. To provide its features, we process content you choose to upload, including:

Selfie photos and reference images you upload to generate avatars
Theme and style choices you make (sport, season, event, scene type)
AI-generated outputs produced from your inputs (photos and short videos)
Generation history (which workflows you ran, parameters, timestamps, and result identifiers)
Optional captions or display names you attach to outputs

Photos and biometric features derived from them are treated as a special category of personal data under KVKK and GDPR and receive heightened protection.

2.3 Purchase information (if applicable)

Subscription status, plan type, and entitlement state
App Store transaction identifiers (received from RevenueCat)

We do not collect or store credit card numbers or other payment instruments. All payments are processed by Apple and never reach our servers.

2.4 Device and usage data

Device model, operating system version, and app version
Apple Vendor ID (IDFV) and, with your consent, the Advertising Identifier (IDFA)
App interactions (which screens you view, which features you use)
Crash reports and diagnostic logs (no personal content)

2.5 Marketing attribution data

If you grant App Tracking Transparency permission on iOS, we collect the Advertising Identifier (IDFA) and limited install attribution data to measure the effectiveness of our marketing. You can revoke this permission at any time in Settings → Privacy & Security → Tracking.

3. How we use your information

To provide, operate, and improve the App's features
To personalize content based on your profile
To process subscriptions and verify entitlements
To diagnose technical issues and prevent abuse
To measure marketing campaign performance (only with your explicit ATT consent)
To communicate with you about service updates and respond to support requests

4. Third-party services

We share data with the following processors under contractual agreements that require them to safeguard your information:

Service	Purpose	Data shared	Privacy policy
Supabase	Authentication, photo and output storage	Email, user ID, uploaded photos, generated outputs	supabase.com/privacy
EachLabs	AI workflow execution (image and video generation)	Uploaded photos, theme parameters; outputs are returned to us	eachlabs.ai/privacy
RevenueCat	Subscription management and entitlements	Apple transaction identifiers, subscription status, user ID	revenuecat.com/privacy
Adjust	Install attribution and marketing measurement	IDFA (with ATT consent), device identifiers, install events	adjust.com/privacy-policy
Amplitude	Product analytics	Anonymous user ID, in-app events, device metadata	amplitude.com/privacy
Apple	App distribution, payments, push notifications	Apple ID-linked purchase data, IDFV, IDFA (with ATT consent)	apple.com/legal/privacy

We do not sell your personal data to third parties.

5. Data retention

We retain your account data for as long as your account is active. When you delete your account from within the App, we permanently remove your account and associated data within 30 days. Anonymized analytics events that cannot be linked back to you may be retained longer for product improvement.

6. International data transfers

Some of our processors are located outside Türkiye and the EU. Data transfers are protected by Standard Contractual Clauses or equivalent safeguards, as required by KVKK and GDPR.

7. Your rights

Under KVKK and GDPR you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Object to or restrict certain processing
Receive your data in a portable format
Withdraw consent for ATT-based tracking at any time
Lodge a complaint with the Turkish Personal Data Protection Authority (KVKK Kurumu)

To exercise these rights, email support@clovyappstudio.com. You can also delete your account directly inside the App at any time.

8. Children's privacy

Fanly is intended for users 13 years of age or older. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Security

We implement administrative, technical, and physical safeguards designed to protect your information. Communications between the App and our servers are encrypted in transit using TLS. Stored data is encrypted at rest by our infrastructure providers. Despite these safeguards, no system is completely secure, and we cannot guarantee absolute security.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The "Effective date" above indicates when the latest version took effect. Material changes will be communicated through the App or via email.

11. Contact

Clovy Yazılım Teknolojileri A.Ş.
Üniversiteler Mah. İhsan Doğramacı Bul. No: 31 İç Kapı No: 23
Çankaya / Ankara 06800, Türkiye
support@clovyappstudio.com