This policy explains what data is processed when you use the Fux mobile app and website, why it is processed, and what rights you have over it.
Data controller: Enes Aktaş (individual)
Contact: enesaktas.ce@gmail.com
Account information. Your email address and its verification status. If you sign in with Google, Google passes us your email address. We never store your password — authentication runs through Google Firebase Authentication. If you supplied a date of birth in an earlier app version, it is retained only for the 18+ check; the current version records your explicit statement that you are 18 or over instead.
Profile information. Your username, display name, bio and profile picture. You enter these and can change them at any time.
Content you create and upload. The videos, images and audio files you generate in the app; the text prompts you write to generate them; image, video and audio files you select as generation inputs; captions and tags.
The photo you upload for a generation. A photo you select as the source of a generation is processed only to produce the video or image you asked for and to run the automated content safety check described in section 3. Even where the photo contains a face, no biometric template, face recognition profile or facial measurement data is derived from it or stored; the photo is not used to identify you or anyone else, to match one photo against another, or to build any system that recognises people. We also do not use the photos you upload to train AI models. The photo is sent to the provider in section 4 so that the model you chose can run, and after the result is produced it is kept with your account (section 6).
Your interactions. Your likes, comments, saves, follows and share links.
Your messages. The content of direct messages you send to other users. These messages are not end-to-end encrypted; they are stored on our servers and can be accessed in response to a lawful request or an abuse investigation.
Notification data. A push token for your device (Firebase Cloud Messaging) and your notification preferences.
App preferences. Your language, theme and autoplay settings.
Usage records. Your last-seen time, view and interaction counts on your content, the status of your generation jobs, and your credit ledger.
Your viewing history. Which posts you have viewed is recorded, and is used to rank the feed and to avoid showing you the same content again.
Your support requests. The subject and message of any support request you send us, along with any screenshot or video you attach.
Your reports and blocks. When you report content or a user, the reason you select and the description you write; and the list of users you have blocked.
Purchase information. Once in-app purchases are enabled, we store the transaction identifier the store (Google Play) sends us and the verification result. We never see or store your card details — payment happens entirely through Google Play.
Your data is shared only with the infrastructure providers required to run the service:
Some of these providers are located outside Türkiye; to that extent your data is transferred abroad.
The posts you publish, your username, profile picture, bio, follower count and comments are visible to other users of the app. If you create a share link for a post, anyone holding that link can view the post. Your direct messages are not public.
Your data is retained for as long as your account exists. When you delete your account, your profile, posts, messages and media files are deleted. Records we are legally required to keep — purchase records, for example — are retained for the period the law prescribes.
No separate automatic expiry applies to the photos you upload for a generation: the file is kept with your account until you delete it or delete your account. When you delete your account, every media file you uploaded or generated is removed from storage. What is erased, how long the deletion takes and which limited records continue to be held are set out on the account deletion page; if you want a single file removed, use the partial deletion route on that same page.
Under Turkish data protection law (KVKK art. 11) you have the right to learn whether your data is processed, to access it, to have it corrected or deleted, to object to processing, and to learn which third parties it has been transferred to. Write to enesaktas.ce@gmail.com with any such request; we respond within 30 days at the latest.
You can delete your account yourself at any time. In the Fux app, go to Settings → Account → Delete account; the same option is available in account settings on the web client, so you do not need to have the app installed. If you can reach neither route, email enesaktas.ce@gmail.com with "Account Deletion Request" as the subject; once we have verified the request we complete it within 30 days at the latest. What is erased after a deletion request, and which records are kept and for how long, is set out on the account deletion page.
All connections are encrypted over HTTPS, database access is restricted, and the admin panel requires authorisation. No system can guarantee complete security; if we become aware of a security incident we notify the affected users and, where required, the Turkish Personal Data Protection Authority.
Fux is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that such an account exists, we delete the account and its data.
When this policy changes, the "last updated" date on this page changes with it. For significant changes we also notify you inside the app.