Privacy Policy

Last updated: July 27, 2026

Fason Takip ("App") is a B2B mobile application that digitizes model tracking between cutting and sewing businesses in the textile industry. This privacy policy explains how your personal data is collected, used, transferred, and protected.

1. Data Controller

Under the Turkish Personal Data Protection Law (KVKK, Law No. 6698), the data controller is:

• Name: Talat Özdemir
• Role: Developer and operator of the Fason Takip app (individual)
• Email: talat.developer00@gmail.com
• Phone: +90 552 984 76 76

The App is currently operated by an individual developer. If a legal entity is established or the operator changes, this section will be updated.

2. Data We Collect

• Account information: Email address, full name, company name, user type (cutting/sewing owner or member)
• Partner invites: When sending or receiving invites, the other party's email address and company name may be displayed
• Business data: Model names, model codes, color/size matrix tables, production statuses, partner relationships
• Images: Model photos and matrix scan photos
• Device information: Device token for push notifications
• Usage logs: Error logs and audit logs

3. How We Collect Data

Your personal data is collected through:

• Signing in to the App and entering profile information
• Account creation via invite or approval process
• Entering model, matrix, and production data or uploading photos
• Sending or accepting/rejecting partner invites
• Granting permission for push notifications

This is an invite-only B2B application. Account registration is handled by the service administrator (direct invitation or approval).

4. Legal Basis and Purposes

Your personal data is processed for the following purposes under KVKK Art. 5:

• Performance of a contract: Account creation, authentication, cutting–sewing model tracking and synchronization
• Legitimate interest: Business analytics and reporting, service security, error resolution, audit logs
• Informed use: AI matrix scanning (sending photos to Google Gemini) and push notifications — by using these features, you acknowledge that processing will occur as described

5. Third-Party Services

Supabase

Database, authentication, and file storage run on Supabase infrastructure. Your data is stored encrypted on Supabase servers in the Europe (eu-west) region.

Google Gemini (AI Matrix Scanning)

When you use matrix scanning, your photo is sent to the Google Gemini API to extract color/size table data. This only happens when you take or select a photo. Google may process data outside Turkey (including the US). SeeGoogle Privacy Policy.

Firebase Cloud Messaging

Push notifications are delivered via Google Firebase. Your notification token may be processed on Google servers.

6. International Data Transfers

Your data is primarily stored on Supabase infrastructure in Europe (eu-west). However, when Google Gemini and Firebase services are used, your data may be transferred outside Turkey. Such transfers are necessary to provide the relevant features when you use them. You are informed of international transfers through this policy.

7. Data Retention

Your data is retained while your account is active. After account deletion, personal data is deleted or anonymized. Records required by law may be retained.

8. Account Deletion

You can permanently delete your account from the Profile screen in the App. When an owner account is deleted, related business data enters tombstone (read-only) mode; your email and full name are removed. To preserve shared business history for partners, your company name may remain read-only (e.g. "Company Name (Deleted)"). Member accounts are fully deleted.

9. Your Rights Under KVKK

Under KVKK Art. 11, you have the right to:

• Learn whether your personal data is processed
• Request information if it has been processed
• Learn the purpose of processing and whether it is used accordingly
• Know third parties to whom data is transferred domestically or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction under KVKK Art. 7
• Request notification of correction/deletion to third parties
• Object to results against you arising solely from automated processing
• Request compensation for damages due to unlawful processing

To exercise these rights, contact talat.developer00@gmail.com. Requests are handled free of charge within 30 (thirty) days at the latest, depending on the nature of the request. Submitting from your registered email or with account-related information is sufficient.

If your request is rejected, inadequately answered, or not answered in time, you may file a complaint with the Turkish Personal Data Protection Authority:www.kvkk.gov.tr

10. Security

Data is protected in transit with TLS encryption. Database access is restricted by Row Level Security (RLS) policies. Each user can only access data within their business partnership scope.

11. Changes

This policy may be updated. Significant changes will be announced via in-app notification or email. The current version is always published on this page.

12. Contact

• Email: talat.developer00@gmail.com
• Phone: +90 552 984 76 76