Pre-registration Privacy Notice

Data controller

İsmail Uygun (developer of Humion). Contact: iletisim@humion.app.

Data we process

• Your email address, plus a comparison key derived from it to prevent duplicate registrations.
• Your preferred language and platform (iOS, Android or both).
• The country and age range you choose on the form (for example 25-34).
• Consent record: the version of the consent text, when you consented and when you confirmed your email.
• Invite details: your personal invite code, the link to the registration that invited you and your number of confirmed invites.
• Your founder number.
• Campaign tags in your sign-up link, if any (utm_source, utm_medium, utm_campaign).
• A keyed, one-way hash of your IP address. The IP address itself is never stored; the hash is deleted within 2 days.
• A strictly necessary session cookie, containing only an access key, set when you open your founder page.
• Anonymous visit statistics (Vercel Web Analytics), such as visits per page and per country. This measurement uses no cookies and does not identify you.
• Approximate country: the country code our hosting provider derives from your IP address is sent to your browser only, where it lets Hüma’s shadow fall on your country on the home page map and pre-selects the country field of the sign-up form. We do not store this guess; your registration only records the country shown on the form, which you can change.

Purposes

• Emailing you about the Humion launch and your founder reward.
• Verifying that the email address belongs to you (double opt-in).
• Adding founder and invite credits to the account created with the same email at launch.
• Running the invite programme and preventing fake or automated sign-ups.
• Planning the launch: seeing, in aggregate, which countries and age groups founders come from, to decide which regions, stores and languages come first.
• Keeping the service secure and limiting abuse.

Legal bases

Launch emails, the founder reward and the invite programme rely on your consent (GDPR Art. 6(1)(a); KVKK Art. 5/1). Limited processing for security and abuse prevention, and looking at country and age range only in aggregate to plan the launch, rely on our legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5/2-f).

You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before it.

Recipients and transfers

We never sell your data or share it for advertising. To run this service we work only with these processors: Supabase (database hosting), Vercel (web hosting and anonymous statistics) and Resend (email delivery).

These providers may operate servers outside Türkiye and outside your country (in the European Union and/or the United States). Transfers take place under the providers’ data processing agreements based on standard contractual clauses.

Retention

• Unconfirmed registrations are deleted automatically within 30 days.
• Confirmed registrations are kept until you delete them, and at most 12 months after Humion launches. Once your founder reward is added to your account, the pre-registration data is no longer needed.
• If Humion does not launch for any reason, pre-registration data is deleted.

Your rights

Under GDPR Arts. 15 to 22 and KVKK Art. 11 you may access your data, ask for it to be corrected or erased, object to processing, receive it in a portable format and withdraw consent.

You can delete your registration instantly from the link in any email we send. For other requests write to iletisim@humion.app; we reply within 30 days. You also have the right to complain to your local data protection authority or to Türkiye’s Personal Data Protection Authority.

Age

Pre-registration is for people aged 16 or older, which is why the age ranges on the form start at 16.

Changes

If we update this notice we change the date at the top of this page, and we email registered addresses about significant changes.