Last updated: October 15, 2026
1. Who Does This Policy Apply To?
Vibseen is a trusted health information platform that connects you exclusively with videos created by verified healthcare professionals. Vibseen does not provide medical diagnosis, treatment, or telehealth services; it is designed to help you access reliable health information before consulting your doctor.
This Privacy Policy applies to everyone who accesses or uses the Vibseen mobile app (available on iOS and Android), the vibseen.com website, and related services. Because we support two distinct types of users, we have outlined the specific categories of data we collect for each group below:
Users: Anyone seeking reliable health and medical information.
Healthcare Professionals: Verified physicians and healthcare providers who publish authoritative medical content following credential validation.
Data controller: Vibseen Medikal Teknoloji Ticaret A.Ş. (“Vibseen,” “we,” or “us”), Hamidiye Mah. Anadolu Cad. No:40/1 Kağıthane, Istanbul, Turkey. Email: hello@vibseen.com.
Your personal data is processed in full compliance with the Personal Data Protection Law No. 6698 (KVKK). If you are located in the European Union, your rights under the General Data Protection Regulation (GDPR) are strictly reserved and detailed in Section 9.
You can access our Information Notice pursuant to the Personal Data Protection Law (KVKK) here: https://vibseen.com/aydinlatma-metni
2. Information We Collect
We only collect the data necessary to provide our services. The table below outlines what information we gather and under which circumstances.
Data set
What It Covers
Sample Collection Guide
From
Account Information
First name, last name, email address, mobile phone number, password (hashed only), profile picture (optional)
You can enter this information during registration.
Patients and healthcare professionals
Physician Verification Details
Medical degree, board certification, affiliated institution, medical specialty
Entered and uploaded by healthcare professionals.
For healthcare professionals only
Videos and Educational Resources
Uploaded videos, titles, and descriptions
Uploaded by a healthcare professional.
Healthcare professionals
Messages
Data regarding the contacts you message within the app is collected. Your communications are end-to-end encrypted, ensuring that your message content remains completely private and cannot be viewed.
This information is automatically gathered by the system during the messaging phase.
Patients and healthcare professionals
Search and Usage Data
Your search queries, viewed videos, watch history, likes, and the professionals you follow
Automatically generated while using the application
Patients and healthcare professionals
Device and notification data
Device model, operating system version, application version, language and time zone, IP address, and push notification token
Automatically collected from your device; notification tokens are generated only if you enable notifications.
Patients and healthcare professionals
Payment Information
Package purchased, amount, date, and billing details (name, address, and tax ID, if applicable)
You enter your details at checkout. Your card information is never stored or processed on Vibseen systems; it is securely handled directly by our certified payment provider.
Subscribed users
Support tickets
Your emails, support requests, and our correspondence with you
When you contact us
Patients and healthcare professionals
Data We Do Not Collect: We do not access or collect your contacts, photo library, or data from other applications. Additionally, your credit card numbers and payment details are never transmitted to or stored on our servers.
About your search queries: What you search for on Vibseen can provide insights into your health. For this reason, we store your search queries separately from your account under a pseudonym and fully anonymize them after 90 days. For more details, please see Section 4.
3. Purposes and Legal Grounds for Processing Your Personal Data
Under data protection regulations (KVKK), every data processing activity requires a valid legal basis. Below, you will find details on the types of data we process, our purposes for processing, and the corresponding legal grounds.
Our Purpose
Data Used
Legal Basis (Articles 5 and 6 of the Law on the Protection of Personal Data - KVKK)
Creating your account, verifying your identity, and securing your sign-in
Account details, SMS verification code, device data
Establishment and performance of the contract
Verifying the identity and professional credentials of healthcare providers
Physician Verification Details
Performance of a contract; legitimate interests of Vibseen (ensuring that only verified healthcare professionals can publish content is essential to the integrity of our platform)
Finding and displaying videos relevant to your search
Search queries and browsing history
Your explicit consent (as this may constitute health data; see Section 4)
Publishing videos, generating subtitles and summaries, and curating playlists
Videos and Educational Resources
Performance of a contract
To enable secure messaging between users and healthcare professionals, protect your privacy, and improve our services
Messaging metadata: members you have messaged
Performance of a contract
Sending you notifications (new videos, messages, and account alerts)
Notification token, email address
Performance of a contract; your explicit consent for marketing communications
Selling and Invoicing Premium Packages
Payment Information
Contract fulfillment, along with legal compliance under tax and commercial regulations
Ensuring platform security and preventing misuse and fraud
IP address, device data, access logs
Legitimate interest and legal obligation
Improving our services and resolving technical issues
Anonymized usage data and error logs
Legitimate interest (no personal data is shared with analytics tools; see Section 10)
Responding to your support requests
Support records and account information
Performance of a contract
Responding to legal requests and protecting our rights
Related Records
Legal obligation; legitimate interest
Advertising Prohibition for Healthcare Professionals: Healthcare professionals are strictly prohibited from advertising on Vibseen. All content shared by verified practitioners is strictly for educational and informational purposes, published in full compliance with relevant medical regulations.
4. Special Notice Regarding Your Health Information
Vibseen does not ask for your medical records, lab results, or diagnostic details. However, the topics you search for—such as "migraine treatments" or "fever in children"—can provide clues about your health status. Under personal data protection laws (KVKK), this type of information is considered "sensitive personal data" and cannot be processed without your explicit consent. That is why we take the following measures:
Explicit Consent: Before using the search feature for the first time, you will be asked to provide explicit consent for processing your search queries to deliver tailored video recommendations. If you choose not to consent, you can still explore the platform by browsing through categories.
Pseudonymization: Your search queries are stored separately from your account details. Your account is represented by a pseudonym; query logs can only be linked to your identity using a securely separated key.
Limited Data Retention: Raw search queries are anonymized after 90 days, ensuring that no search data can be traced back to you after this period.
No Plaintext Logging: Your search queries, email address, and phone number are never recorded in system logs as plaintext, nor are they shared with third-party analytics or error-tracking tools.
You may withdraw your consent at any time through the app settings or by contacting us via email. Withdrawing your consent will not affect the lawfulness of any processing carried out prior to that date.
Identification and professional credentials for healthcare providers are maintained in an isolated, encrypted, and secure storage environment. Access is strictly limited to authorized verification personnel, with every instance of access fully logged. Following successful verification, these records are retained for the duration specified in Section 7 and subsequently purged.
5. Who We Share Your Data With
We do not sell your data. We only share it on a limited basis with trusted service providers necessary to deliver our services.
Information Shared with Other Users: To support the platform's mission, healthcare professionals' names, professional titles, specialties, affiliated institutions, and uploaded videos are publicly accessible. General user account details remain private and are not visible to other members. When you message a professional or comment on a video, only your name and your message will be displayed.
Legal Obligations: We may disclose personal data only to the extent required to comply with court orders, prosecutor requests, or lawful demands from authorized public authorities under applicable legislation.
Business transfers: In the event of a merger, acquisition, or sale of assets involving Vibseen, your information may be transferred to the acquiring entity in accordance with this policy. We will notify you in advance should such a transfer occur.
6. Cross-Border Data Transfers
Our servers are hosted in Germany (Hetzner), and video content is stored via Cloudflare infrastructure. Consequently, your data is transferred abroad in accordance with Article 9 of the KVKK (Personal Data Protection Law).
Germany and the European Union operate under the GDPR, which maintains stricter data protection standards than Turkey; your personal data remains fully protected there in accordance with the security measures detailed in this policy.
Because push notifications are delivered through Apple and Google services, your notification token and message content are transferred to the United States. Disabling notifications will stop this data transfer.
7. How Long We Retain Your Data
We retain your data only for as long as necessary to fulfill its intended purpose and to comply with our legal retention obligations.
Data
Storage Duration
At the end of the duration
Account Details
Retained for the duration of your active account, and for 30 days following account deletion
Removed
Raw search queries
90 Days
Anonymized
Watch history, likes, and saved items
As long as your account is active, you can delete it yourself at any time.
Removed
Messages
While your account remains active; once deleted by both parties
Removed
Videos and Educational Resources
Until deleted by the professional or until the account is closed
Deleted and permanently removed from backups within 30 days.
Physician verification documents (medical diploma, government-issued ID)
[12 months] following verification; the verification status (verified / rejected) is maintained for the lifetime of the account
Document images are permanently deleted
Notification token
Until you turn off notifications or uninstall the app
Removed
Billing and Payment Records
10 years (in accordance with the Tax Procedure Law and the Turkish Commercial Code)
Removed
Access and security logs
1 year (pursuant to Law No. 5651 and security requirements)
Removed
Support Messages
2 years after the request is closed
Removed
Upon deleting your account, your personal data will be permanently erased or anonymized within 30 days. Only records required by law (such as billing and payment transactions) are retained for the legally mandated period, with strictly restricted access. Any remaining backup copies are routinely cleared and completely purged within a maximum of 30 days.
8. How We Protect Your Data
Vibseen builds its infrastructure in compliance with ISO/IEC 27001 information security standards. Key security measures we implement include:
Encryption: All data transmission is encrypted using TLS. Databases and backups are also encrypted at rest. Playlist passwords are saved using irreversible hashing algorithms (Argon2/bcrypt).
Time-limited access links: Videos are not delivered via public URLs; instead, they are served through time-expiring signed links, preventing unauthorized access if a link is intercepted.
Isolated infrastructure: Search engine and AI servers are fully closed to the public internet, accessible only by the application server over a private network.
Access control: A maximum of two authorized individuals can access production environments using personal cryptographic keys. Physician verification documents can only be accessed by certified verification personnel, and every access request is audited and logged.
Payment security: Payment card data never touches Vibseen servers; all transactions are processed securely on the hosted page of a PCI DSS-certified payment provider.
Data masking: Search queries, email addresses, phone numbers, and authentication tokens are strictly excluded from system logs.
Independent security audits: Third-party penetration tests are performed prior to launch and annually thereafter by an independent cybersecurity firm.
Incident response: In the event of a data breach, the Personal Data Protection Authority is formally notified within 72 hours in compliance with KVKK, and all affected users are alerted without undue delay.
No system is completely secure. To help protect your account, we encourage you to use a strong, unique password, never share your login credentials, and contact us immediately if you detect any suspicious activity.
9. Your Rights
Under Article 11 of the Personal Data Protection Law (KVKK), you are entitled to the following rights:
Find out whether your personal data is being processed,
Request information if your personal data has been processed,
Learn the purpose of processing your data and whether it is used in accordance with that purpose,
Know the third parties to whom your personal data is transferred, whether domestically or internationally,
Request correction if your personal data has been processed incompletely or inaccurately,
Request the deletion or destruction of your personal data under the terms stipulated in Article 7 of the Personal Data Protection Law (KVKK),
Request notification of correction, deletion, or destruction processes to third parties to whom your data has been transferred,
Object to any outcome detrimental to you resulting exclusively from analysis by automated systems,
Seek compensation for damages incurred due to unlawful processing of your personal data.
If you are located in the European Union, under the GDPR, you also have the right to data portability (receiving your data in a structured, commonly used format) and the right to object to processing. Our EU representative is Vibseen UG (haftungsbeschränkt), Erlangen, Germany.
How to exercise your rights: You may submit your requests via email to hello@vibseen.com or in writing to Hamidiye Mah. Anadolu Cad. No:40/1 Kağıthane, Istanbul. To verify your identity, we may ask you to contact us from the email address registered to your account or request supplementary information. We will process your request free of charge within 30 days at the latest. If your request is denied or you do not receive a response, you have the right to lodge a complaint with the Personal Data Protection Board.
Deleting your account: You can delete your account at any time within the app by navigating to Settings > Account > Delete Account, or by contacting us at [hello@vibseen.com]. Once your account is deleted, your data will be erased in accordance with the timelines outlined in Section 7. When healthcare professionals delete their accounts, any videos they have uploaded will also be removed from the platform.
Exporting your data: You can contact us to receive your account details, activity history, and messages in a machine-readable format (JSON).
10. Cookies and Analytics
Our mobile application does not use cookies. On our website, we only use essential cookies to keep you signed in, along with analytics cookies—with your consent—to gather anonymous usage statistics. We collect technical data, such as pages visited and crash reports, to improve performance. We never share your search queries, name, email address, or phone number with analytics or error-tracking tools. We do not use advertising or tracking cookies.
11. Children's Privacy
Vibseen is not intended for individuals under the age of 18, and we do not knowingly collect personal information from minors. If we discover that a child has created an account, we will promptly delete the account and any associated data. If you believe your child has registered an account with us, please contact us immediately.
12. Changes to This Policy
We may update this policy as our services or applicable legal requirements evolve. For significant changes, we will notify you at least 15 days in advance via in-app notifications or email. The most current version will always be available on this page, indicated by the “Last Updated” date.
13. Contact Us
For any privacy-related inquiries, requests, or complaints:
Vibseen Medikal Teknoloji Ticaret A.Ş. Hamidiye Mah. Anadolu Cad. No:40/1 Kağıthane Istanbul, Turkey Email: hello@vibseen.com Web: https://vibseen.com
Personal Data Protection Disclosure (KVKK): https://vibseen.com/aydinlatma-metni
Terms of Use: https://vibseen.com/kullanim-kosullari