Privacy Choices And Data Rights

A signed-in member can download a machine-readable JSON copy from Settings → Your data → Download my data. The mobile app can instead send the same export to the verified email address already attached to the account; it does not accept a different destination address.

The export covers the member's account and profile, contributions, social and account records, legal choices, optional-analytics records and any historical inactive BiteData or demographic decision record still associated with the account. Other members' private data, credentials, security secrets and internal service keys are excluded.

Use Settings → Your data → Delete account in the website or app. The authenticated in-product flow verifies the request and permanently removes the account and directly associated data, subject to records that must be separated and retained for a documented legal claim, legal duty or hold.

Deletion is not a temporary deactivation. Restricted backups expire through their normal rotation, and detached minimum evidence cannot be used to restore the deleted account. The Privacy Notice describes the exact exceptions and retention periods.

This separate choice is off unless you grant the just-in-time consent shown in the app or website. It covers bounded product-use and reliability signals; it does not authorise advertising, sale of data, cross-app or cross-site tracking, session replay, raw search text or private-content collection.

You can grant or withdraw the choice in Settings → Privacy choices. Withdrawal stops new collection, clears the local queue and starts the bounded deletion process described in the Privacy Notice. A detached, value-minimised decision receipt can remain only for the documented legal-claims schedule.

BiteData business access and BiteData demographic collection are currently disabled. No new birth year, demographic gender category or Turkish province code is collected for BiteData, and the historical 2026-08-17.1 presentation is not issued for a new grant.

Any historical field or decision receipt is not an active BiteData input or future permission. Export, withdrawal, deletion and formal KVKK request paths remain available for retained historical records. A future launch requires new legal editions, store privacy declarations, a new just-in-time choice and prospective acceptance; no pre-activation contribution becomes commercially eligible retrospectively.

For a request not covered by self-service controls, apply to the controller, Ömer Taha Tonbaklar, through the legal channel. Include name and surname; Turkish identity number for Turkish citizens; nationality and passport or other identity number, if any, for foreign applicants; address for service; any notification email, telephone and fax details; the request; and relevant documents. A written application requires a signature and a representative must provide authority evidence. Ordinary email must come from an address previously provided to BiteScore and registered in its system.

Eligible requests are answered as soon as possible and within 30 days at the latest. A fee may be requested only where an applicable official tariff permits it. Do not send more identity data than is needed for verification.