Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is Emir Beytekin, Reyhan Mah., Cumhuriyet Cad., Osmangazi / Bursa, Türkiye. Contact: emir@beytekin.net. See also the legal notice.
2. Data we process
- Account: name, email address, optional phone number. Your password is stored only as an irreversible hash (bcrypt).
- Loyalty cards: how many stamps and rewards you have at which business, and when each transaction happened. Businesses only see a shortened (masked) customer name.
- Location: for “Nearby”, your device location is sent to the server only during the search and is not stored. Without permission, all businesses are listed.
- Business accounts: a business’s name, address, location, phone number, images and campaign details are shown publicly in the app.
- Subscription payments: payments are handled by the App Store (Apple) or Google Play (Google). We never see card or account details; we only store the subscription ID, product and expiry date reported by the store.
- Technical data: IP-based request counters are kept briefly to prevent abuse.
- Cookies in the business portal: a session cookie for sign-in and a cookie for your language choice. Both are strictly necessary; we do not use tracking or advertising cookies.
3. Purposes and legal bases
- Providing the app, the business portal and loyalty cards: performance of a contract, Art. 6(1)(b) GDPR.
- Security and prevention of abuse and fraud: legitimate interests, Art. 6(1)(f) GDPR.
- Statutory retention obligations: Art. 6(1)(c) GDPR.
We do not use your data for advertising and do not sell it to third parties.
4. Recipients
Data is stored on servers of our hosting provider, which processes it on our behalf (Art. 28 GDPR). For subscriptions, Apple and Google process data under their own privacy policies. Maps and address search in the business portal are provided by OpenStreetMap services; your IP address is transmitted to their servers.
5. Retention and deletion
We keep personal data only as long as needed for the purposes above. You can delete your account at any time in the app under Profile → Delete account; your personal data is then deleted and the transaction log is kept in anonymised form.
6. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). Please send requests to: emir@beytekin.net.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).