Privacy Notice and Online Safety (UK)

How we process personal data under the UK GDPR, plus Online Safety Act information.

Last updated: November 2, 20264 min read

We do not ask for your consent to run the core service: we rely on the legal bases below. Push notifications use your phone's own permission prompt.

1. Data protection (UK GDPR and Data Protection Act 2018)

The Privacy Policy applies in full. UK specifics:

  • Controller: RETROBOND TEKNOLOJİ BİLİŞİM LİMİTED ŞİRKETİ, a limited liability company established in Turkey, Cumhuriyet Mah. Fatih Sultan Mehmet Blv. Cadde 224 No: 41 A/A, Nilüfer, Bursa, Türkiye. People and the Information Commissioner's Office can contact us directly at support@taketurn.co or by post to that address.
  • Legal bases. Contract (running your account, delivering Takes, friends and activity status), legitimate interests (age checks, safety, fraud and abuse prevention, the on-phone sensitive-content check, "People you may know", usage statistics and, once crash reporting is switched on, fixing crashes), legal obligation (answering authorities and reporting where UK law requires it). You may object to processing based on legitimate interests (Privacy Policy Section 11).
  • Activity status and "People you may know". Only your friends see your green dot (opened TakeTurn in the last 48 hours, never a time), and you can turn it off in Settings > Privacy > Show my activity status. Suggestions come mainly from your friend network; with few friends we also use your approximate country and whether people there opened TakeTurn in the last 3 days, only to choose and order suggestions, never shown (Privacy Policy Section 7.4).
  • Nothing read from your phone for statistics. The app sends no usage report of its own; usage statistics are counted on our servers from requests the app makes anyway, under a random code (Privacy Policy Sections 5 and 16).
  • On-phone sensitive-content check. Runs on the sender's and the recipient's phone only; nothing is uploaded for it, and only a yes/no mark travels with the Take.
  • Child sexual abuse material. Takes are not scanned automatically. A person reviews reports; apparent CSAM is removed, the account is banned, and it is reported as the law requires (Privacy Policy Section 3.9).
  • Age. Birthday, and where Apple or Google offer it, an age range only. Under 18: no account; we keep only a one-way code (hash) of the sign-in account and the date the person turns 18.
  • Crash reports. Not switched on yet. When they are, Firebase Crashlytics (Google) acts as our processor, with crash and stack data only, kept up to 90 days.
  • Automated decisions. Many reports from distinct verified people can limit an account until a person reviews it. Nobody is suspended or banned by an automatic step, and you can ask for human review and appeal (Terms Section 11).
  • Transfers. Data is processed in the United States and other countries where Cloudflare, Apple and Google operate, and our team may access it from Turkey. We rely on the UK-US data bridge (UK Extension to the EU-US Data Privacy Framework) where the provider is certified, and otherwise on the UK International Data Transfer Addendum to the Standard Contractual Clauses.
  • Retention. As in Privacy Policy Section 10 (for example Takes deleted when opened or missed; safety copy up to 24 hours; selfie deleted right after the decision; IP logs up to 90 days).
  • Your rights and complaints. Access, rectification, erasure, restriction, portability, objection, and not being subject to solely automated decisions. We answer rights requests within one month (extendable by up to two more months for complex requests; we tell you why within the first month). You can complain to us about how we use your data, through the in-app form, taketurn.co/support or support@taketurn.co: we acknowledge your complaint within 30 days and answer without undue delay. You can also complain to the Information Commissioner's Office (ico.org.uk).

2. Online Safety Act 2023

TakeTurn is a user-to-user service. It has no public feed: Takes go only to the sender's accepted friends and open once. People can find each other by username, but only friends can send each other Takes.

Duty How we meet it
Illegal content risk assessment and safety duties We complete and keep a written illegal content risk assessment within the period the Act sets for new services, and review it before any significant change. Measures: blurred until reply, friends only, in-app Report and block, human review of reports (no automatic scanning of Takes), human review of waiting-list applications and verification selfies, and reports of child sexual abuse to the authorities as the law requires
Reporting and complaints In-app and at taketurn.co/support (no account needed); the result is sent with an Appeal button
Terms of service describe how people are protected Terms, Community Guidelines, Safety Center
Children's access assessment and children's safety duties TakeTurn is only for people 18 or older. We complete the children's access assessment the Act requires, and, if it finds that children can access TakeTurn, the children's risk assessment and the safety duties that follow
Intimate image abuse and cyberflashing Removal within 48 hours of a valid request; the sensitive-content blur is on by default

Change history

  1. November 2, 2026

    The controller is now RETROBOND TEKNOLOJİ BİLİŞİM LİMİTED ŞİRKETİ, a company established in Turkey (with its address); TakeTurn is run from Turkey. There is no longer a planned handover to a future company.

  2. October 31, 2026

    The UK notice now lists its details in full instead of pointing to the EU notice, says that crash reporting is not switched on yet, explains how to complain to us first (we acknowledge within 30 days), and describes the Online Safety Act measures more precisely.

  3. October 30, 2026

    Updated our contact details: people and authorities in the UK contact us directly at support@taketurn.co or by post. Your right to complain to the ICO is unchanged.

  4. October 18, 2026

    First version. United Kingdom: UK GDPR information notice and Online Safety Act summary.

Questions about this document?

Write to support@taketurn.co or use the support form. We read everything.