1. Data controller
Cebe Kalan ("the App" and cebekalan.com.tr) is operated by Yasin Halit Karayağız, Istanbul, Türkiye ("we"). We act as the data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK). Contact: yasin@karayagiz.com.
2. Data we process
- Account data: full name, email address, password (stored only as an irreversible hash), and optionally phone number and city.
- Work records you enter: shifts (platform, start and end time, number of deliveries, distance, earnings, tips, bonuses, notes), expenses (category, amount, date, notes) and your calculation settings (weekly goal, cost per km, tax rate, default platform, auto-count keywords).
- Subscription data: store (App Store or Google Play), product, transaction or purchase identifiers, status and expiry date. We never receive your card details.
- Technical data: platform (iOS/Android), device name, app version, session timestamps and IP address for security and abuse prevention.
- Support messages: name, email, topic, device and the message you send us.
- Google sign-in (optional): if you choose "Continue with Google", we receive your name, email address and Google account identifier from Google to create or link your account. We never receive your Google password.
- Usage analytics (Android): through Google Firebase Analytics, app events such as screen views, sign-in method, starting or finishing a shift (platform, number of deliveries, duration), adding an expense (category only) and viewing the subscription screen, together with device model, OS version, approximate country and an app instance identifier. Earnings amounts, notes and the contents of your records are not sent.
3. Purposes and legal grounds
We process this data to create and manage your account, provide the App's features (calculating net earnings, reports, syncing across devices), verify and manage subscriptions, understand and improve how the App is used, answer support requests, keep the service secure and meet legal obligations. Legal grounds: performance of a contract (KVKK Art. 5/2-c), compliance with legal obligations (Art. 5/2-ç) and our legitimate interests (Art. 5/2-f).
4. Where your data is stored
Data is sent between the App and cebekalan.com.tr over an encrypted (HTTPS) connection and stored in a MySQL database on the servers of our hosting provider. A copy is also kept on your phone so the App works offline. Usage analytics and Google sign-in data are processed by Google on servers that may be located outside Türkiye.
5. Device permissions
- Notification access (Android only, optional): if you enable automatic delivery counting, the App checks notifications from the courier apps you select for words such as "delivered" while a shift is active. This happens only on your phone. Notification contents are not stored and are never sent to our servers.
- Notifications: used only for reminders you choose.
6. Sharing
We do not sell, rent or share your personal data for marketing. Data is shared only with: Apple and Google to process and verify subscriptions; Google to provide Google sign-in and Firebase Analytics, which processes usage data on our behalf; our hosting provider, which stores data on our behalf; and competent authorities when required by law. Cebe Kalan is not affiliated with Getir, Trendyol Go, Yemeksepeti or any other platform and does not share your data with them.
7. Retention
- Account data and work records are kept while your account is active.
- When you delete your account, your account data, work records and settings are permanently deleted. Subscription records are kept only in a form no longer linked to you, for as long as required by tax and commercial law.
- Support messages are kept for up to 2 years. Security records (such as IP-based rate limits) are kept briefly.
8. Deleting your account
You can delete your account at any time in the App under Settings → Delete Account, or on the web at https://www.cebekalan.com.tr/hesap-sil.php. Deleting your account does not cancel an App Store or Google Play subscription; cancel it in your store account.
9. Your rights under KVKK
Under Article 11 of KVKK you may learn whether your data is processed, request information, learn the purpose, know to whom it is transferred, request correction or deletion, object to results of automated analysis and claim compensation. Send requests to yasin@karayagiz.com; we reply within 30 days.
10. Security
We use HTTPS, password hashing, random access tokens stored only as hashes, and access restrictions on our servers. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.
11. Age
The App is intended for users aged 18 and over.
12. Changes
We may update this policy. The date above shows the latest version; material changes are announced in the App.