Privacy
Clad Vault Privacy Policy
In vigore dal 1° agosto 2026
1. Purpose
LARİNSOFT BİLİŞİM TEKNOLOJİ A.Ş. (“Larinsoft”) attaches importance to protecting the confidentiality and security of personal data and other information shared with it.
This Privacy Policy explains the fundamental principles we adopt regarding information security and privacy when the Clad Vault mobile application and the Clad Vault services at www.cladvault.com and app.cladvault.com are used, and when communication with Larinsoft takes place through these channels.
This Privacy Policy does not replace the information provided under the Personal Data Protection Law No. 6698 (the “Law”). For detailed information regarding the purposes and legal grounds on which your personal data are processed, please review the Clad Vault Information Notice.
2. Our Principles Regarding Privacy and Personal Data Protection
When processing personal data, Larinsoft adopts the following principles:
- acting in accordance with the law and the principles of good faith,
- keeping personal data accurate and, where necessary, up to date,
- processing personal data for specific, explicit and legitimate purposes,
- ensuring that processing is relevant, limited and proportionate to the purposes for which the data are processed,
- retaining personal data only for the period necessary,
- protecting personal data against unauthorized access.
3. Information Obtained through Clad Vault
If you use Clad Vault or contact Larinsoft, information you provide, such as the following, may be processed:
- name and surname,
- e-mail address,
- telephone number,
- authentication information (e-mail/password or Google/Apple account identifiers),
- check-in interval and last check-in time,
- KVKK and privacy policy consent records,
- trusted contact e-mail address and invitation and consent records,
- subject of communication,
- content of messages and requests.
Your vault contents and vault metadata are processed in end-to-end encrypted form. Clad Vault uses a zero-knowledge architecture; Larinsoft does not have access to your secrets in plaintext.
During the technical operation and security of Clad Vault, server, access and security logs limited to the IP address may also be processed.
Larinsoft follows the principle of not collecting personal data through Clad Vault unless such data are necessary for the service or communication concerned.
4. Use of Cookies and Similar Technologies
Clad Vault does not use cookies or similar tracking technologies for advertising, marketing or tracking user behavior.
Technical data may be processed for session, authentication and security purposes (for example, session information within Firebase Authentication).
If Larinsoft begins using cookies or similar tracking technologies in the Clad Vault infrastructure in the future, the necessary legal and technical assessments will be carried out, users will be appropriately informed before such use begins, and user preferences will be obtained where required.
5. Use of Information
Information provided to Larinsoft may be used for the purposes of:
- creating and managing your Clad Vault account,
- providing the encrypted vault service,
- verifying your identity,
- conducting check-in and emergency trusted-contact processes,
- responding to questions and requests from users,
- providing requested information about Clad Vault products and services,
- managing communications with Larinsoft,
- ensuring the security of the application, website and information systems,
- preventing unauthorized access and misuse,
- fulfilling obligations arising from applicable legislation, and
- protecting Larinsoft’s legal rights.
Contacting Larinsoft through Clad Vault or info@larinsoft.com does not mean that you have consented to receiving commercial electronic communications for advertising or marketing purposes.
6. Data Minimization
Larinsoft follows the principle of processing only the personal data necessary to achieve the specified purposes.
When contacting Larinsoft through Clad Vault or by e-mail, you are advised not to send personal data that are not necessary for evaluating your request, including:
- identity documents,
- financial information,
- health information,
- criminal record information,
- biometric information, or
- other special categories of personal data.
7. Information Security
Larinsoft implements appropriate technical and administrative measures to prevent personal data and information entrusted to it from:
- being accessed by unauthorized persons,
- being used unlawfully,
- being altered,
- being disclosed,
- being lost or damaged.
Within this scope, depending on the nature of the risks and systems, the following measures are implemented:
- end-to-end encryption and a zero-knowledge architecture,
- access and authorization controls,
- strong authentication methods,
- secure data communications,
- logging and monitoring mechanisms,
- system and software updates,
- backups,
- protection against malware and unauthorized access,
- limiting access privileges according to duties and needs, and
- organizational measures aimed at information security awareness.
Information security measures are reviewed in light of technological developments and emerging risks.
8. Third-Party Service Providers
Larinsoft may use server, hosting, e-mail, authentication, information technology, maintenance and information security service providers for the operation of Clad Vault and corporate communication infrastructure.
Where it is necessary to transfer personal data to such service providers, the transfer is carried out:
- only with the data necessary for the performance of the service,
- limited to the specified purposes, and
- in accordance with the applicable personal data protection legislation.
9. Transfer of Data Abroad
Where third-party technology or communication services used by Larinsoft require personal data to be transferred abroad, such transfer is carried out taking into account the conditions for international data transfers set out in Article 9 of the Law and the relevant secondary legislation.
10. Retention and Deletion of Data
Personal data are retained for the period necessary for the purpose for which they were obtained or for the periods prescribed by applicable legislation.
Where the reason requiring processing ceases to exist and there is no other legal obligation requiring retention of the data, personal data are deleted, destroyed or anonymized in accordance with applicable legislation.
11. Third-Party Websites
The Clad Vault application, www.cladvault.com or app.cladvault.com may contain links to websites or services belonging to third parties.
The data processing and privacy practices of third-party websites accessed through these links are not under Larinsoft’s control.
Users are advised to separately review the privacy and personal data protection notices of the relevant third-party website.
12. Rights Regarding Personal Data
Persons whose personal data are processed may exercise the rights set out in Article 11 of the Law.
Detailed information regarding the exercise of these rights and Larinsoft’s personal data processing activities is available in the Clad Vault Information Notice.
13. Updates to the Policy
Larinsoft may update this Privacy Policy in line with changes in applicable legislation, technological infrastructure, Clad Vault features or data processing processes.
The current Policy is published on the www.cladvault.com website and is also made available in the Clad Vault application.
14. Contact
For questions regarding privacy and the protection of personal data, you may contact us at:
LARİNSOFT BİLİŞİM TEKNOLOJİ A.Ş.
Üniversiteler Mah. 1596 Cad. No: 95A İç Kapı No: 42 Çankaya / Ankara