TürkçeHome

If a data breach happens

Last updated: 21 October 2026

In short

  • We stop it first, then find out what happened and whom it touches.
  • We tell the authorities within 72 hours of learning about it.
  • If it puts you at risk, we tell you directly and say what to do.
  • Think you've found a security problem? Write to privacy@kinf.app.
On this page
  1. 1.Noticing and recording
  2. 2.Stopping it
  3. 3.Understanding it
  4. 4.Telling the authorities within 72 hours
  5. 5.Telling you
  6. 6.Afterwards
  7. 7.Reporting a security problem

1.Noticing and recording

A breach can come to light from our own checks, a provider's notice, or someone writing to us. Every case is written into a breach register at once: what happened, when we learned of it, what we did. We keep that record even when no one has to be told.

2.Stopping it

First we close the hole: we rotate keys and passwords, sign out sessions, cut access, and keep evidence. If a provider is involved, we work with them.

3.Understanding it

We find out which data was involved, how many people, in which countries, and how likely it is to hurt them, for example through stolen passwords or exposed messages.

4.Telling the authorities within 72 hours

  • In Türkiye: the Personal Data Protection Board, on its breach notification form, within 72 hours.
  • In the EU: the data protection authority of each affected country, within 72 hours.
  • In the UK: the ICO, within 72 hours.
  • If we don't yet know everything, we report what we know in time and add the rest as we learn it.

5.Telling you

If the breach could harm you, we tell you as soon as we can, by e-mail: what happened, what data it was, what we are doing, and what you can do (for example change your password). If we can't reach everyone by e-mail, we put a notice on kinf.app.

Where other laws ask for more, such as US state breach laws, we follow them too.

6.Afterwards

We find the root cause, fix it, and change how we work so it doesn't happen again. Providers are bound by contract to tell us about their breaches without delay.

7.Reporting a security problem

Found a weakness in Kinf? Write to privacy@kinf.app with what you found and how to see it. Please don't access other people's data or harm the service while looking. We thank people who tell us.