Mühür — Privacy Policy

Effective date: August 18, 2026

This Privacy Policy explains, under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), what personal data is collected when you use the Mühür mobile app ("Mühür", the "App"), how it is processed, and what your rights are.

1. Data Controller

Kirpictures Studio is the data controller under KVKK for the Mühür app. Contact: barisaydinak@gmail.com

2. Data Collected

CategoryScope
Account data The email address and full name received when you sign in with Google.
Content data Invoice/receipt photos and PDF files you add to your vault; the store name, item, date, amount, and warranty period extracted from these documents using AI.
Technical data App crash logs, usage/analytics data, and your device's push-notification record/token used to send you notifications.
Location data (optional) When you tap "Sort by my location" in the authorized service directory, your device's approximate location (not precise location). This is only requested if you tap that button; location is never collected anywhere else or in the background. It is used for a single query to find the nearest authorized service providers and is not stored on your device or on our servers. If you don't grant permission, sorting still works using the center of the province/district you selected as a reference.

3. Purposes of Processing

The petition draft feature does not use your identity data: your full name, national ID number, address, and phone number are not sent to our servers or to the AI provider. These fields are left as placeholders in the draft text and are filled in only on your own device.

4. Third-Party Data Processors

Your data is shared only with the following service providers, solely to carry out Mühür's functions and under contractual obligation. These providers do not use your data for their own purposes — they process it only on Mühür's behalf:

ProviderRole
Google FirebaseHosting, authentication, analytics, crash reporting.
Anthropic (Claude API)AI parsing of invoice/receipt documents; generating a petition draft when you request it (your product record and fault description are processed; your identity data is not sent).
MailgunReceiving invoices forwarded to your personal email address.
Google Maps Platform (Places API)Finding the authorized service providers nearest/most relevant to you in the service directory, using the brand and province/district (or your approximate location if you opt in).

5. Where Your Data Is Stored

Your data is stored on servers hosted in Google Cloud's European Union region (europe-west1).

6. AI Training

Your documents are processed only to create your own record; they are never used to train any AI model.

7. Retention Period

Your data is kept for as long as your account is active. When you delete your account, your data is deleted as well.

8. Your Rights (KVKK Article 11)

Under Article 11 of KVKK, you have the following rights:

You can reach us at barisaydinak@gmail.com to exercise these rights. You can also delete your account and all of your data directly from within the app.

9. Security

Your data is encrypted in transit. Your vault can only be accessed with your own account.

10. Contact

For questions about this policy: barisaydinak@gmail.com

Türkçe Özet

Mühür şunları toplar: (1) Google ile giriş yaptığınızda hesap verisi (e-posta, ad); (2) eklediğiniz içerik — fatura/fiş fotoğrafları ve PDF'ler, bunlardan çıkarılan mağaza, ürün, tarih, tutar ve garanti süresi bilgisi; (3) teknik veri — çökme ve analitik kayıtları ile garanti bitmeden önce hatırlatma göndermek için kullanılan cihaz bildirim (push) token'ı; (4) yalnızca yetkili servis rehberinde "Konumuma göre sırala" düğmesine bastığınızda alınan yaklaşık konum — başka hiçbir yerde/arka planda istenmez, kaydedilmez, yakındaki servisleri sıralamak için tek bir sorguda kullanılıp atılır.

Veriler, Mühür adına ve kendi amaçları için DEĞİL sözleşme kapsamında hizmet sağlayıcılar tarafından işlenir: Google Firebase (barındırma, kimlik doğrulama, analitik, çökme raporlama), Anthropic Claude API (belge ayrıştırma), Mailgun (e-postayla yönlendirilen faturaların alınması) ve Google Maps Platform / Places API (marka ve il/ilçeye veya izin verirseniz yaklaşık konumunuza göre yetkili servis bulma). Veriler AB'de (europe-west1) saklanır ve hiçbir yapay zeka modelinin eğitiminde kullanılmaz. Hesabınız aktif olduğu sürece saklanır, hesabınızı sildiğinizde silinir. Erişim, düzeltme veya silme talebinizi barisaydinak@gmail.com adresine yazarak veya uygulama içinden hesabınızı silerek her zaman iletebilirsiniz.