Privacy Policy

Çaycım Net — Privacy Policy Last updated: 8 August 2026 App: Çaycım Net Erma Bilişim Website: https://www.ermabilisim.com Contact: info@ermabilisim.com This Policy explains how Erma Bilişim processes personal data when you use the Çaycım Net mobile app and related services. By using the app, you acknowledge that you have read this Policy. 1. What the service is Çaycım Net helps hospitality businesses manage menus, orders, token/balance accounting, staff and customers; and lets customers connect to a business and place orders. 2. Data we collect Depending on your role, we may process: Account and identity - Name - Email - Phone number - Sign-in method (e.g. Apple, Google, or email/password) - Role (customer, business owner, staff) Business and usage - Business name, join code, menu/products/options/prices/stock - Orders, status, timestamps, notes - Token/balance/debt/payment records within the business - Subscription status (for business owners) - In-app preferences (e.g. notifications) Device and technical - Device/app info (OS, app version) - Push notification token - Security/session and limited diagnostic logs - Camera (QR scan) and photo library (product images) when you grant permission Payments - Business subscriptions are billed through Apple App Store / Google Play. We do not receive your full card details. Subscription status may be processed to enable or restrict access. Third-party sign-in or payment screens are also governed by those providers’ policies. 3. How we use data - Account creation, authentication and access control - Connecting users to businesses and managing approvals - Orders, menus, tokens and notifications - Subscription gating for owners - Security, abuse prevention, support and legal compliance - Operating and improving the service 4. Legal bases Where applicable (including Turkish KVKK / similar laws): - Contract performance - Legitimate interests (security, service integrity, debt/collection records) - Consent (e.g. optional permissions/notifications) - Legal obligations 5. Sharing We share data only as needed with: - Cloud hosting / database providers - Authentication providers (e.g. Apple, Google) - Push notification services - App store billing / subscription infrastructure - Authorities when legally required If you are a customer of a business, that business can see profile/order/balance data needed to serve you. We do not sell your personal data for advertising. 6. International transfers Infrastructure may be hosted outside your country. Reasonable safeguards are applied. 7. Retention We keep data while your account is active and as needed for legal/legitimate purposes. Rules that apply after deletion are described in “Account deletion” below. 8. Account deletion You can delete your account yourself in the app. How to delete 1. Sign in to the app. 2. Go to Settings → Account settings (or the equivalent account screen). 3. Choose “Delete account” / “Delete my account” and confirm. You may also email info@ermabilisim.com to request deletion. We will process the request once we can verify your identity. What happens after deletion - Your login account and personal app access are deleted or made inaccessible. - Remaining positive tokens are not refunded. - If a customer has an outstanding token debt, a limited record (e.g. name, phone, debt amount/related summary) may be retained for the business’s collection purposes. If you return with the same email or sign-in method, the debt may be re-linked. - Staff deletion removes your link to the business. - Owner deletion closes the business under platform rules and clears open processes. You must also cancel any business subscription in the App Store / Google Play; cancelling a store subscription is not the same as deleting your account. - Legal, dispute and security records may be retained as required. After deletion is complete you cannot sign in with that account (except for limited debt records as above). 9. Your rights Subject to law, you may request access, correction, deletion, restriction or objection. Contact: info@ermabilisim.com 10. Security We use reasonable measures (access controls, HTTPS, role-based permissions). No method is 100% secure. 11. Children The service is not directed to children under 13. We do not knowingly collect their data. 12. Device permissions - Camera: connect to a business via QR - Photos / gallery: product images - Notifications: order and business alerts You can revoke permissions in device settings; some features may stop working. 13. Changes We may update this Policy. The latest version will be posted on our site/app. We may provide reasonable notice for material changes. 14. Contact Erma Bilişim — Çaycım Net Email: info@ermabilisim.com Web: https://www.ermabilisim.com