Privacy Policy

This Privacy Policy explains how Baltech Ventures (“Show More”, “we”, “us”) collects and uses personal data when you use the Show More application and websites (the “Service”). We are the data controller within the meaning of the EU General Data Protection Regulation (“GDPR”) and the Turkish Personal Data Protection Law No. 6698 (“KVKK”). You can reach us at [email protected] or at [registered company address].

This Policy should be read together with our Terms of Service.

Account

• Your phone number, used to sign in with a one-time SMS code. Verification codes are short-lived and deleted after use.
• Session data (a signed session token stored in a cookie) that keeps you signed in.

Profile

• Your name, birthdate (other users see your age, never your birthdate), photos, social links and your answers to the profile questions.
• Some profile questions are optional, and some answers may reveal information about your lifestyle or beliefs. You choose what to answer; we process those answers only to show your profile and power discovery filters, on the basis of your consent, and you can edit or remove them at any time.

Location

• Location coordinates you share during onboarding or when you update them. We use them to show distance and to power discovery. We do not track your location continuously in the background.

Messages, calls and broadcasts

• Messages you send in a chat: text, photos and voice messages. Photos are recompressed on our servers and hidden metadata (including embedded location data) is removed; voice messages are stored as recorded, together with their waveform.
• Gifts you send, and read/typing indicators (transient signals, not stored as history).
• Video call metadata: when a call started and ended, its duration, and its conditions (private or public, ticket price).
• Where call recording is enabled, the recording of the call and any replay published from it.
• Live broadcast data: the viewer list and counts, viewer chat messages (kept only in memory for the duration of the broadcast and deleted when it ends), and gifts sent during the broadcast.
• Ratings and feedback you submit after watching a broadcast.

Purchases and balances

• Your Spark wallet balance, earnings balance, and the transaction ledgers behind them (purchases, gifts, tickets, transfers).
• Your subscription plan and its billing status.
• Payment card details are collected directly by our payment processor, Stripe — they never reach or get stored on our servers. We keep only Stripe’s reference identifiers.

Safety and moderation

• Reports you make about other users and reports made about you (reason and the accounts involved).
• Your block list.
• If you delete your account: an audit record containing your deletion reason, a masked form of your phone number, and counts of the deleted data.

Technical

• Log and device data generated when you use the Service, such as IP address, browser type and timestamps, used for security and troubleshooting.

• To provide the Service — creating your account, showing profiles, matching, chat, calls, broadcasts, replays, wallet and subscriptions. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• To process optional profile answers and location — powering your profile and discovery. Legal basis: your consent (GDPR Art. 6(1)(a) and, for answers revealing special categories, Art. 9(2)(a); KVKK Arts. 5(1) and 6), which you can withdraw by editing your profile or deleting your account.
• To keep the Service safe — handling reports and blocks, preventing fraud and abuse, enforcing our Terms. Legal basis: our legitimate interest in a safe service (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• To process payments and keep required records — purchases, subscriptions, transaction ledgers, audit records. Legal basis: performance of the contract and compliance with legal obligations (GDPR Art. 6(1)(b)–(c); KVKK Art. 5(2)(c) and (ç)).
• To communicate with you about the Service — SMS sign-in codes and important service messages. Legal basis: performance of the contract.

We do not use your data for third-party advertising, and we do not sell it.

• Your profile — photos, name, age, distance and your answers — is shown to other users in discovery and matching, according to their filters.
• Your online status is visible to users you have a conversation with.
• A public broadcast is visible to every signed-in user (with a ticket, where one is set), including your name, photos, video, audio and the viewer chat.
• A replay published by you or by the person you called is visible to its audience for as long as it stays published.
• Blocking someone hides you from each other everywhere in the Service; the other person is not notified.

Think before you broadcast: anything you show in a public call can be seen by people you have not matched with.

We use a small number of service providers that process data on our behalf and under our instructions:

• Stripe — payment processing for Spark purchases and subscriptions.
• Agora — real-time video and audio infrastructure for calls and broadcasts, and call recording where enabled.
• Cloudflare — storage and delivery of media files (profile and chat photos, voice messages, recordings).
• SMS delivery providers — sending your sign-in codes.
• Hosting and database providers — running our servers and storing our data.

Beyond that, we disclose personal data only where the law requires it (for example a binding request from a competent authority), to defend legal claims, or — if our business is transferred — to the acquirer under the same protections. We never sell personal data.

Some of our providers process data outside your country, including in the United States and the European Union. Where data is transferred abroad we rely on the safeguards the law provides: for GDPR, adequacy decisions or the European Commission’s Standard Contractual Clauses; for KVKK Art. 9, adequacy decisions of the Personal Data Protection Board, appropriate safeguards, or your explicit consent where no other mechanism applies.

We keep your data while your account is active. Deleting your account (settings screen) is immediate and permanent: your profile, answers, photos (including stored files), likes, matches, chats and messages, block list, replays in which you appear, and Spark balance are deleted; an active subscription is cancelled immediately and your customer record at Stripe is deleted.

A limited set of records survives deletion:

• the deletion audit record (your deletion reason, a masked form of your phone number, counts of deleted data and any remaining balance), kept to document the deletion itself;
• transaction ledger entries, kept to meet financial and legal record-keeping obligations;
• reports, kept for the safety of other users.

Viewer chat in broadcasts is never persisted — it lives in memory and is discarded when the broadcast ends. Technical logs are kept for a limited period for security purposes. We may retain data longer where a legal obligation or an ongoing dispute requires it.

Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to its processing, to receive it in a portable format, to withdraw consent at any time (without affecting past processing), and to lodge a complaint with your supervisory authority.

Under KVKK Art. 11 you have the right to:

• learn whether your personal data is processed, and request information about it;
• learn the purpose of processing and whether the data is used accordingly;
• know the third parties, in Türkiye or abroad, to whom your data is transferred;
• request correction of incomplete or inaccurate data, and deletion or destruction of data where the legal grounds for processing no longer exist, and ask that recipients be notified of these steps;
• object to a result that is to your detriment and arises exclusively from automated analysis of your data;
• claim compensation for damage caused by unlawful processing.

You can exercise most rights directly in the app — edit or remove profile data on the edit screen, and delete your account in settings. For anything else, write to [email protected]; we respond within the time limits the law sets (30 days under KVKK, one month under GDPR). You may also complain to the Turkish Personal Data Protection Board (KVKK) or your local data protection authority (GDPR).

Data travels over encrypted connections. Payment card data never touches our servers, and payment events are accepted only with a verified signature. Photos you send in chat are stripped of hidden metadata before delivery. Access to personal data inside our team is limited to what a task requires. No system is perfectly secure — if we learn of a breach affecting you, we will notify you and the competent authority as the law requires.

The Service is for adults only. We do not knowingly allow anyone under 18 to use it; if we learn that an account belongs to a minor, we delete it.

We use a single, strictly necessary cookie: the session cookie that keeps you signed in. We do not use advertising or third-party analytics cookies. Because this cookie is essential for the Service to work, it does not require consent.

Discovery orders profiles using the filters and preferences you set. We do not make decisions with legal or similarly significant effects on you based solely on automated processing.

We may update this Policy as the Service evolves. If a change is material, we will notify you in the app before it takes effect. The date at the top shows when the Policy was last revised.

Data controller: Baltech Ventures, [registered company address]. Privacy questions and requests: [email protected].