Last updated: 29 July 2026
1. What this policy covers
This privacy policy covers only visitor data on the alpfitplus.com website: what you type into the demo request form and the analytics records that show how the site is used.
Data processing inside the Alpfit Plus product (the management panel and the mobile app) is outside the scope of this text; the product side is described in a separate document.
The Turkish version of this text prevails; in case of any conflict between the Turkish and English versions, the Turkish text applies.
2. Data controller
For the purposes of this text the data controller is: Kıvanç Karavelioğlu — Tuzla / İstanbul.
For questions and requests: email info@kiwiailab.com, phone +90 535 937 59 55. These are channels we genuinely answer; you will hear back from the same address.
3. Data we process
When you use the site, the data falls into four groups:
- What you give us in the demo form: your name, club/business name, number of branches, phone and/or email, your optional message and the language of the page you filled in.
- Derived from the form: an irreversible digest of your IP address (ip_hash). Your raw IP address is never written to the record; the digest is used only to limit excessive requests from the same connection. We also keep the record time, notification status and environment produced by the system.
- Site analytics: the address and title of the page you visit, the referring address, campaign/click parameters, browser, operating system, device type, screen size, language and an approximate location derived from your IP address (country/region/city). No cookies are used and your IP address is not stored in the analytics record.
- Technical server logs: for requests served by the site and by our analytics server, your IP address, browser information and the request line are written to the access log — for security and debugging.
4. Why we process it
- To respond to your demo request and get in touch with you
- To make sure your request is not lost — it is written to durable storage first, then we are notified
- To limit abuse of the form
- To see how the site is used and improve the content
- To keep the site secure and to debug errors
5. Cookies
The site uses no cookies at all, and it writes nothing to your browser’s local storage.
Our analytics tool is cookieless and runs on our own server. Fonts are served from the site’s own domain; no third-party advertising or tracking resource is loaded when a page opens.
6. Where the data is stored and who we share it with
We do not sell or rent your data to third parties for marketing. The list below shows the systems your data passes through: the recipient, its role and the country where the data sits.
- Lead store on our own server (PocketBase) — the primary record of the demo request — Germany (Hetzner, Nuremberg)
- Analytics on our own server (Umami) — site usage statistics — Germany (same server)
- Resend — delivery of notification emails — sending happens from Ireland, the provider stores customer data in the United States
- Google Workspace — the team mailbox the request lands in — based in the United States
- Vercel — hosting of the site and the form endpoint — a United States based provider; content is served from the region closest to you
7. International transfers
Cross-border transfer is not a conditional possibility here: it happens with every demo request. Your request is written to our server in Germany, the notification email is sent from Ireland, and some of the providers we use store their data in the United States.
Which provider processes data in which country and for what purpose is listed one by one in section 6.
8. Retention periods
- Demo request record: automatically deleted after 12 months.
- Analytics records: they carry no identity, because no cookies are used and no IP address is stored.
- Technical server access logs: kept for security and debugging.
9. Your rights and how to reach us
Under the KVKK you have the right to learn whether your personal data is processed, to request information if it has been, to have it corrected if it is incomplete or incorrect, to request its deletion and to object to the processing.
The full list of rights, the legal grounds and the application procedure are set out in the KVKK Information Notice: alpfitplus.com/en/kvkk
For applications: info@kiwiailab.com · +90 535 937 59 55