Privacy policy
Last updated:
This notice explains how the Müşterim app (Android, Wear OS, iPhone, Apple Watch and widgets) and the musterim.sayfa.app website handle personal data. It is the English version of our information notice under Article 10 of Turkey’s Personal Data Protection Law No. 6698 (KVKK).
In short
- If you use the app without an account, none of your records reach us. Everything stays on your phone.
- If you sign in, a copy of your records is kept on our server for sync and backup.
- No ads, no ad tracking, no usage analytics, and we never sell your data.
- Business card photos and voice notes are processed on your phone and never sent to the server.
Data controller
The data controller is Müşterim (musterim.sayfa.app). For any question about this notice or your data: musterim@sayfa.app.
What we process
Without an account
Customers, addresses, contact persons, fairs, encounters, notes and follow-ups are stored only on your device. We cannot see or receive them.
When you sign in
- Account data: your e-mail address; if you sign in with Google or Apple, the user identifier and name they send us; the public key of your passkey. Your fingerprint or face data never leaves your phone; we only store the public key.
- Session data: a random identifier the app creates for your device, hashes of the session and refresh tokens, and when they were last used.
- Your content: customers (company name, legal name, tax office and number, sector, phone, e-mail, website, tags, notes), addresses and their locations, contact persons (name, title, department, phones, e-mails, notes), fairs and events, encounters and interest levels, activity records such as calls and visits, follow-ups and reminder times, and the transcribed text of voice notes.
- Technical records: the IP address and time of requests to our server, app version and error logs.
When you visit the website
musterim.sayfa.app sets no cookies and collects no visitor analytics. Cloudflare, which serves the site, processes your IP address and browser details to deliver the page and block attacks.
When you e-mail us
Your e-mail address, name and message, used only to reply.
What we do not collect
We do not track your location. Your address book is accessed only when you pick a contact or save one to it. Business card photos and audio recordings are not stored and not sent to the server.
Why, and on which legal basis
| Purpose | KVKK Art. 5(2) |
|---|---|
| Creating your account, verifying sign-in, syncing and backing up your records | (c) performance of a contract |
| Security, preventing abuse, finding errors | (f) legitimate interest |
| Lawful requests from public authorities | (ç) legal obligation |
| Answering support and deletion requests | (c) performance of a contract |
We do not use your data for marketing, profiling or advertising, and we do not sell it.
Records about other people
The customers and contact persons you add are other people’s data. When you save them for your own business, you are the data controller for those people; Müşterim only stores and syncs those records on your behalf. Informing the people whose cards you collect, and respecting their consent before you send them commercial messages, is your responsibility.
Where it is stored and who receives it
- Your device: the main copy of all your records.
- Our server: if you sign in, for sync and backup; in Hetzner Online GmbH’s data centre in Finland, inside the European Union.
- Cloudflare, Inc.: serving the website, protecting traffic to our server and forwarding e-mail.
- Google and Apple: only for sign-in if you choose them; and the text of an address when your phone’s operating system looks up its location.
Because our server and service providers are outside Turkey, this is a transfer abroad under KVKK Article 9, based on standard contracts with the providers. They process data only on our behalf and for the purposes in this notice.
How long we keep it
| Data | Retention |
|---|---|
| Records on your device | Until you delete them or uninstall the app |
| Account and synced records | While your account exists; deleted as soon as you delete the account |
| Copies in server backups | At most 30 days after the account is deleted |
| Technical records (IP, requests, errors) | At most 30 days |
| Support e-mails | At most 1 year after the request is closed |
The account deletion page explains how to delete your account.
Your rights
Under KVKK Article 11 you can ask us to:
- tell you whether we process your personal data and, if so, give you information about it,
- tell you the purpose of processing and whether the data is used accordingly,
- tell you the third parties in Turkey or abroad that receive it,
- correct it if it is incomplete or wrong,
- delete or destroy it under the conditions of KVKK Article 7,
- notify third parties that received the data of any correction or deletion,
- object to a result against you that comes solely from automated analysis,
- compensate damage you suffered from unlawful processing.
Send your request from your account’s e-mail address to musterim@sayfa.app. We answer free of charge within 30 days. If you are not satisfied with our answer, you can complain to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurulu). If you are in the European Economic Area, you also have the rights of the GDPR, including a complaint to your local supervisory authority.
Children
Müşterim is a business app and is not directed at people under 18.
Changes
When we change this notice we update the date on this page. We also announce important changes in the app.