Privacy Policy

Last updated: April 2026

This policy is prepared in accordance with the Personal Data Protection Law (KVKK) No. 6698.

1. Data Controller

Rewardty application is operated by Rewardty. Rewardty is responsible as the data controller for processing your personal data.

2. Data Collected

  • Phone number: For account creation and authentication

  • Name and surname: For profile creation (optional)

  • Push notification token: To send campaign and reward notifications

  • Transaction history: Stamp, point, and reward records

  • Device information: To improve application performance

3. Purpose of Data Use

  • Account creation and authentication

  • Provision of loyalty program services

  • Sending campaign, reward, and stamp notifications

  • Application performance improvement

  • Compliance with legal obligations

4. Data Sharing

  • Member businesses: Shared for stamp and reward transactions

  • Supabase (database): Data stored on Frankfurt, EU servers

  • Twilio (SMS): Phone number shared for OTP verification

  • Expo (push notification): Token shared for notification delivery

  • Legal requirement: When required by court order

5. Data Retention Period

Your data is retained as long as your account is active. Upon deletion request, data will be deleted within 30 days. Transaction history may be retained for 3 years.

6. Your Rights

  • Learn whether your data is being processed

  • Request information about processed data

  • Learn the purpose of data processing

  • Request correction of data

  • Request deletion of data

  • Object to automated processing

7. Account Deletion

  • You can delete your account from the Settings section in the app

  • Or send a request to sinancemvural@gmail.com

  • Deletion process is completed within 30 days

8. Cookies and Tracking

Our application does not use cookies. Only local storage is used for session management.

9. Security

Your data is protected with AES-256 encryption on Supabase infrastructure. All communication is encrypted with TLS 1.2+ protocol.

10. Children's Privacy

Our application is not intended for children under 13 years old.

11. Policy Changes

Important changes will be announced through in-app notification or email.

Sorularınız için: sinancemvural@gmail.com