Home › Standards › KVKK (mobile)

Regulation

KVKK and mobile apps

What does KVKK expect from a mobile app?

KVKK (Law No. 6698) is Turkey's personal data protection law. It sets duties close to the GDPR: handle personal data lawfully, collect only what is needed, and apply appropriate technical and organisational measures to keep it safe.

For a mobile app, the technical measures are the same ones that matter under GDPR: protect personal data on the device and in transit, and control what third-party SDKs collect.

How Mobexa helps

Mobexa surfaces the exposures behind a data-protection problem, such as personal data stored in clear, cleartext traffic and SDKs that quietly collect data, and maps each finding to the duty behind it. The evidence supports a KVKK review and lines up with GDPR for teams that answer to both.

Common questions

Is KVKK the same as GDPR?
They are close but separate. KVKK is Turkey's own data-protection law and sets similar duties to the GDPR, including a requirement for appropriate technical measures. Many teams address both together.

Mobexa maps every finding on your Android and iOS builds to KVKK (mobile) and the other standards an auditor recognises.

Start Free Trial