Privacy Policy

Last updated: October 10, 2026

VakitNakit is an app for tradespeople and small businesses who work in the field to keep track of customers, jobs and payments. This policy explains which personal data is processed when you use the app and this website, where it is stored, and your rights over it.

1. Data controller and contact

For your account and usage data, the data controller is the party that develops and operates VakitNakit (“we”). For any question or request about this policy: katresoft@gmail.com

For data about your customers that you enter in the app, you are the data controller; we are a data processor that stores this data only on your behalf and on your instructions (see section 3).

2. Data we process

Your account details

Your email address and sign-in method (email, Sign in with Google or Sign in with Apple). If you sign in with Google or Apple, the name and email that provider passes to us. We never see or store your password in plain text. You can also use the app without signing in; in that case no name or email is collected and your records are kept in an unnamed account tied to your device. If you sign in with Google, your Google profile photo is shown on your profile card in the app.

Your business profile

Your name or business name, phone number, trade, province and address, the currency you choose and, if you add it to show your customers, your bank account (IBAN) details.

Records you enter

• Customers: name, phone, address and address note, province and, if you save it, map location.
• Jobs: job type, description and notes, price, deposit and payment status, payment due date, appointment, warranty and maintenance details.
• Photos and videos: the media you add to a job.
• Team: the accounts and roles of workers you invite to your team and the jobs you assign to them.

Subscription details

Which plan you are on and whether your subscription is active. Your card and payment details are processed by the App Store or Google Play; they are not shared with us.

Device and technical data

• Your device's notification token and platform (iOS/Android), so that we can send notifications.
• Your in-app preferences (language, reminder settings, home screen layout).
• A log of sent notifications so the same reminder is not sent twice (deleted after 90 days).
• If you join the referral programme, your referral code and who referred you.
• So that you don't have to enter an invite or referral code by hand, the app checks the text on your clipboard when it opens and, on Android, the install source information passed on by Google Play. Only short text that could be such a code is sent to the server for verification; nothing else on your clipboard is stored or sent.

Your location

If you grant location permission, your device's location is used only at that moment: to save a customer's location from where you are standing, to list customers near you and to calculate distances in your daily route. No location history is kept; what is saved is the customer's location, not yours.

This website

The site uses no cookies and does not track visitors. The appearance you choose (light/dark) is stored only in your browser. To protect customer pages from abuse, the IP address opening those pages is kept in a short-lived request counter.

3. Data about your customers

We store the customer details you enter only on your behalf; we do not use them for our own purposes, sell them or share them with anyone other than the infrastructure providers listed below. Informing your customers and, where required, obtaining their consent is your responsibility.

The link you create to share a job record contains an unguessable address and is not listed in search engines. Still, anyone who has the link can see that customer's job details (photos, price breakdown, warranty); share it only with the customer concerned.

If you use a team, your workers only see the jobs assigned to them and the customers of those jobs.

4. Device permissions

• Camera: to take job photos and videos.
• Photo library: to add existing photos to a job and to save photos to your gallery.
• Contacts: to add a customer from your contacts and to write a saved customer to your contacts. Your address book is not uploaded to our servers; only the person you pick is saved as a customer.
• Microphone and speech recognition: to dictate notes and job descriptions. We do not store audio; speech is turned into text by your phone's own speech recognition service (Apple or Google), which may process the audio on its servers.
• Location: for the purposes described under “Your location” above, only while the app is open.
• Notifications: for appointment, payment, maintenance and warranty reminders. Service announcements, such as maintenance or a new version, may also arrive as notifications.

You can refuse any permission or turn it off later; only the related feature stops working.

5. Why we process data and on what legal basis

• Providing the service (storing your records, syncing across your devices, sending reminders, recognising your subscription): entering into and performing our contract with you.
• Security and preventing abuse (rate limiting, blocking unauthorised access): our legitimate interest.
• Features that depend on device permissions (camera, contacts, microphone, location, notifications): your consent, which you can withdraw at any time by turning the permission off.
• Legal obligations: lawful requests from competent authorities.

Your data is not used for advertising, profiling or automated decision-making. To monitor the service we keep only aggregate counts that identify no one (for example, how many accounts or records).

6. Services we use and sharing

We share your data only with the following providers needed to run the service, and only as far as necessary:

• Supabase (database, file storage, authentication): your account, records, photos and videos.
• Google and Apple: authentication if you choose to sign in with your account; map display through Google Maps on Android and Apple Maps on iPhone; your phone's speech recognition service.
• Firebase Cloud Messaging (Google): delivering notifications to your device.
• RevenueCat: verifying subscription status. Your payment details are not sent here either; only the purchase record and your account identifier are processed.
• Our route calculation server: the coordinates of the stops are sent to calculate road distances in your daily route; they are not stored.
• Referral programme infrastructure: tracking referral codes and the subscription days earned through referrals.
• Vercel: hosting this website and the customer pages.

The app includes error reporting (Sentry) and usage statistics (PostHog) components, but they are currently switched off; this policy will be updated before they are turned on. Your data is not shared with anyone else unless the law requires it.

7. International transfers

The providers above run their servers outside Türkiye. Using the app requires your data to be transferred abroad in order to provide the service.

8. Retention

• Your records are kept for as long as your account is open. An account used without signing in is deleted together with its records if the app is not opened for 30 days (7 days if no records were entered).
• Customers and jobs you delete stay in the trash for 30 days and are then deleted permanently; you can also delete them permanently from the trash right away.
• The log of sent notifications is deleted after 90 days.
• When you delete your account, the account, all your customer and job records, photos and videos are deleted immediately. Purchase records kept by the store (Apple/Google) are outside this.

9. Security

All communication between the app and the servers is encrypted (HTTPS). In the database, every record is protected by rules that allow access only to the account that owns it and to authorised workers in that account's team. No system is entirely risk-free; in the event of a breach we will inform you and the relevant authority within the legal time limits.

10. Your rights

Under Article 11 of the Turkish Personal Data Protection Law No. 6698 and, where it applies in your country, the EU General Data Protection Regulation (GDPR), you have the right to:

• Learn whether your data is processed and request a copy of it.
• Have incomplete or inaccurate data corrected.
• Have your data deleted or destroyed.
• Object to processing and withdraw the consent you have given.
• Learn who your data has been transferred to.

You can send your requests to katresoft@gmail.com; we reply within 30 days at the latest. If you are not satisfied with our reply, you can lodge a complaint with the Turkish Personal Data Protection Board or the data protection authority of your country.

11. Deleting your account and data

In the app, follow Profile → Account → Delete Account to permanently delete your account and all your records. This happens immediately and cannot be undone.

• Deleting the account does not cancel your subscription; cancel it first in the App Store or Google Play.
• If you have a team, all of the business's records are deleted and your workers lose access.

If you cannot access the app, you can send your deletion request to katresoft@gmail.com.

12. Children's privacy

VakitNakit is intended for professional use and does not knowingly collect data from anyone under the age of 13.

13. Changes

When we update this policy, the date above changes. The policy is updated before any new type of data or provider is added.