Privacy Policy
This policy explains how the Pucca GSM mobile app (“the App”) processes personal data. The Turkish version is the governing text.
1. Who we are
PUCCAGSM TELEFON AKSESUARLARI TİC. LTD. ŞTİ. (“Pucca GSM”) is the data controller.
Barış Mah. Sakarya Cad. Migros AVM No:1 İç Kapı No:1 Beylikdüzü/İstanbul, Türkiye
[email protected] · +90 212 853 19 97 · puccagsm.com
2. Who the App is for
The App is a work tool for staff of Pucca GSM stores. Accounts are created by a company administrator; there is no in-app sign-up. The App is not directed at children.
3. Data we process and why
| Data | Purpose |
|---|---|
| Account details — first and last name, username, a one-way hash of the password, assigned store; phone number and job title if entered by the administrator | Creating the account, signing in, authorisation |
| Attendance records — check-in and check-out time and store, recorded when the user scans the store's QR code | Documenting working hours for timekeeping and payroll |
| Stock lookup history — the barcode or search text looked up, the time and the method (camera or manual entry) | Monitoring stock accuracy and identifying missing products |
| Announcement read status — which announcement was opened and when | Confirming announcements reached staff |
| Device and session data — push notification token (only if notifications are allowed), app version, device model, last-seen time, IP address | Delivering notifications, security, troubleshooting |
4. Data we do not collect
- Location: the App never accesses or tracks location. Attendance is recorded only by scanning the QR code at the store.
- Camera images: the camera is used only to read barcodes and QR codes while the scanner screen is open. Frames are processed on the device; no photo or video is stored or sent to our servers.
- Contacts, photos, microphone, health data: not accessed.
- Advertising and tracking: the App contains no ads, no third-party analytics SDKs and no cross-app or cross-site tracking. We do not sell personal data.
5. Sharing
Data is stored on a server operated by Pucca GSM and is visible only to authorised administrators. It is shared only with:
- Apple (Apple Push Notification service) — the device's push token and notification text, if the user has allowed notifications;
- our hosting provider, acting as a processor on our instructions;
- public authorities where required by law.
6. Retention and deletion
- Account details: kept while the account is active. When the account is deleted, identifying details are erased or anonymised.
- Stock lookup history and activity logs: kept for up to 2 years and then deleted automatically. Lookup history is deleted immediately when the account is deleted.
- Attendance records: retained for the period required by Turkish labour and social security law.
- Push token: deleted on sign-out, when notifications are turned off, or when the account is deleted.
Users can delete their account in the App at any time: Profile → Delete My Account. See Account Deletion.
7. Security
All communication between the App and the server uses HTTPS/TLS. Passwords are stored only as one-way hashes; the session token is kept in the iOS Keychain. Administrative actions are logged.
8. Your rights and choices
Under Turkish Law No. 6698 (KVKK) you may request access to, correction of, or deletion of your personal data, and object to processing. Contact [email protected]; we respond within 30 days.
Notifications are optional and can be turned off in the App (Profile → Notifications) or in iOS Settings. If camera access is declined, barcodes can be typed in manually.
9. Changes
We will publish any update on this page; for material changes the App asks users to acknowledge the new notice.