Mospital Logo
MOSPITAL Online Health
Account

Mospital Personal Data Protection (KVKK) Disclosure

Last Updated: February 20, 2026

The Personal Data Protection Law No. 6698 entered into force after being published in the Official Gazette dated 07.04.2016 and numbered 29677. The Law, prepared by considering international documents, comparative law practices, and the needs of our country, aims to ensure that personal data is processed according to contemporary standards and placed under protection. In this context, the purpose of the Law is to regulate the conditions for processing personal data, the protection of fundamental rights and freedoms of individuals during data processing, and the obligations, procedures, and principles that natural and legal persons processing personal data must comply with.

This Disclosure has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform data subjects about the processing of personal data within the scope of the platform operated by Mospital Inc. ("Mospital").

Mospital is a technology and digital platform provider. Medical diagnosis or treatment services are not provided through the platform.

1. Data Controller

In accordance with KVKK, your personal data is processed by:

Mospital Inc.

(Delaware, United States of America)

as the data controller.

Contact: hello@mospital.app

2. Personal Data Processed

2.1 User Personal Data

  • Identity information (name, surname, gender)
  • Contact information (email address)
  • Account information (passwords stored securely encrypted)
  • Payment and banking information (credit card, debit card, CVV)
  • Usage data (in-site movements, interactions)

2.2 Artificial Intelligence (AI) Interaction Data

  • Conversations with AI-powered features
  • This data is processed in anonymized or pseudonymized form
  • No identification is made
  • Not used for medical diagnosis or treatment purposes

2.3 Professional Personal Data

  • Profile photo
  • Promotional video
  • Branch / category information
  • About / biography content
  • Country of service
  • Languages spoken

This information may be publicly displayed on the platform with the professional’s consent.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

  • Creating and managing user and professional accounts
  • Improving provided services, developing new services, and providing related information
  • For existing and prospective customers with commercial electronic communication consent; promoting and marketing campaigns and services
  • Resolving customer issues and complaints
  • Providing and improving platform services
  • Facilitating interaction between users and professionals
  • Providing AI-powered informational services
  • Fulfilling legal and regulatory obligations
  • Ensuring information and transaction security and preventing malicious use
  • Making necessary arrangements to ensure that processed data is up to date and accurate, and carrying out activities related to all such processes

4. Legal Basis for Processing Personal Data

In accordance with Article 5 of KVKK, your personal data is processed based on:

  • Being directly related to the establishment or performance of a contract
  • Fulfillment of the data controller’s legal obligation
  • Establishment, exercise, or protection of a right
  • Legitimate interest of the data controller
  • Your explicit consent

as the legal bases for processing.

5. Transfer of Personal Data

Your personal data may be transferred to:

  • Cloud infrastructure service providers
  • Payment service providers (e.g., Stripe)
  • Information security and technical support providers
  • Authorized public institutions and organizations

Data may be transferred abroad with necessary technical and administrative measures in accordance with Article 9 of KVKK. Records and documents related to transactions carried out with our customers may need to be retained for a certain period under legal regulations. If you request deletion of your personal data, your request may be fulfilled at the end of the period specified by legal regulations; during this period, your personal data will not be processed except for obligations arising from legal regulations and will not be shared with third parties.

6. Data Retention Period

Your personal data is retained for the duration required by the processing purposes and the retention periods stipulated in relevant legislation.

7. Your Rights as a Data Subject

As personal data subjects, if you submit your requests regarding your rights to our Company through the methods set out below in this Disclosure, our Company will finalize the request free of charge within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged. In this scope, personal data subjects have the right to:

  • Learn whether personal data is processed
  • Request information if personal data has been processed
  • Learn the purpose of processing personal data and whether it is used in accordance with that purpose
  • Know the third parties to whom personal data is transferred domestically or abroad
  • Request correction of personal data if it is processed incompletely or inaccurately, and request notification of this correction to third parties to whom personal data has been transferred
  • Although processed in compliance with the Law and other relevant laws, request deletion or destruction of personal data if the reasons requiring processing no longer exist, and request notification of this process to third parties to whom personal data has been transferred
  • Object to the emergence of a result against the person through analysis of processed data exclusively via automated systems
  • Request compensation for damage in case personal data is processed unlawfully

Pursuant to Article 13/1 of the Law, you may submit your request regarding the exercise of your rights stated above to our Company in writing or by other methods determined by the Personal Data Protection Board. Since the Board has not determined any method at this stage, you must submit your application to our Company in writing in accordance with the Law.

You may submit your requests to hello@mospital.app.

8. Updates

This Disclosure may be updated due to changes in legislation or platform practices.