Data Protection Notice

1. Data Controller

For any data protection question or request, write to support@blisswell.app.

2. Categories of Personal Data

3. Purposes of Processing

• Creating and managing your account and authenticating you
• Concluding and performing the subscription agreement and providing the service
• Processing payments and issuing invoices
• User support and handling requests, withdrawals and complaints
• Ensuring the security of the service and preventing misuse
• Improving the service and resolving technical issues
• Meeting legal obligations under tax, commercial and consumer legislation

We do not use your data for third-party advertising, and we do not sell your data.

4. Lawful Bases

Under the GDPR and the UK GDPR we rely on the following lawful bases:

• Contract (Art. 6(1)(b)): creating your account, taking your subscription and providing the service you asked for
• Legal obligation (Art. 6(1)(c)): invoicing, accounting and tax records, and consumer law obligations
• Legitimate interests (Art. 6(1)(f)): keeping the service secure, preventing misuse and improving reliability
• Consent (Art. 6(1)(a), and Art. 9(2)(a) for sensitive data): notifications, marketing messages and any content you choose to enter about your relationship or emotional life. You may withdraw consent at any time, without affecting processing already carried out.

Where Turkish law applies, the corresponding grounds are KVKK art. 5/2-c (performance of a contract), art. 5/2-ç (legal obligation), art. 5/2-f (legitimate interest) and art. 5/1 (explicit consent).

5. How Data Is Collected

Personal data is collected electronically, by automated and partly automated means, through the website, the mobile apps, email correspondence and the payment infrastructure.

6. Who We Share Data With

We share data only with service providers that operate the service on our behalf, under contractual confidentiality and data protection obligations, and only to the extent necessary:

• Payment institutions and banks (to take and refund payments)
• Cloud infrastructure and database providers (to host the service)
• Subscription management providers (to verify entitlements)
• App stores (App Store, Google Play — for subscriptions bought through them)
• Accounting and audit service providers (for legal obligations)
• Competent public authorities (where required by law)

7. International Transfers

Our service providers may process data in countries outside your own, including outside the EEA and the UK. Where that happens, we rely on appropriate safeguards — such as the European Commission’s standard contractual clauses, the UK international data transfer addendum, or an adequacy decision covering the destination country.

Where Turkish law applies, transfers abroad are made under KVKK article 9 with the necessary safeguards in place. You can ask us for details of the safeguards used by writing to support@blisswell.app.

8. Retention Periods

• Account and subscription data: while the account is active and for no more than 30 days after deletion
• Invoicing and accounting records: 10 years, as required by law
• Transaction security records: no more than 2 years

When the period expires, data is deleted, destroyed or anonymised.

9. Security

We use industry-standard measures, including encryption in transit and access controls, to protect your data. No method of transmission or storage is completely secure, but we work continuously to safeguard your information.

10. Your Rights

Under the GDPR and the UK GDPR you have the right to:

• Access your personal data and receive a copy of it
• Rectification of data that is inaccurate or incomplete
• Erasure of your data (the "right to be forgotten")
• Restriction of processing in certain cases
• Data portability — to receive your data in a structured, commonly used, machine-readable format and have it sent to another controller
• Object to processing based on our legitimate interests, and to object at any time to direct marketing
• Withdraw consent at any time, where processing is based on consent
• Not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects

Where Turkish law applies, KVKK article 11 gives you equivalent rights, including the right to learn whether your data is processed, to know the third parties it has been transferred to in Türkiye or abroad, to request correction, erasure or destruction and to have that notified to those third parties, and to claim compensation for damage caused by unlawful processing.

You may also delete your account directly in the app. See the account deletion pages: Couples Wellness · Sexual Wellness · Calm Anxiety.

11. How to Apply, and How to Complain

Send requests concerning your rights to support@blisswell.app or in writing to the postal address above. We answer within one month; if a request is complex we may extend that period and will tell you why. Requests are free of charge unless they are manifestly unfounded or excessive.

If you are not satisfied with our answer, you have the right to lodge a complaint with a supervisory authority — in the EU, the data protection authority of the country where you live, work or where the issue arose; in the UK, the Information Commissioner’s Office (ICO); in Türkiye, the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

12. Children

Blisswell is intended for adults and is not directed to anyone under 18. We do not knowingly collect data from children. If you believe a minor has provided us data, contact us and we will delete it.

13. Changes to This Notice

We may update this notice from time to time. Material changes are reflected by updating the "Last updated" date above and, where appropriate, by notice in the app or by email.