Privacy Policy

Version: 2026-10 · Last updated: 5 October 2026

This policy explains how your personal data is processed when you use Kuponex, in line with the Turkish Personal Data Protection Law No. 6698 ("KVKK").

1. Data controller

Ayendar Tekstil Yazılım Teknolojileri Sanayi ve Ticaret Anonim Şirketi ("Ayendar"), Maslak Mah. AOS 55. Sk. 42 Maslak B Blok No: 4 İç Kapı No: 542, Sarıyer/İstanbul, Türkiye (Maslak Tax Office, tax no. 1191287049). Contact: h7seyinkoc@gmail.com

Stores on Kuponex are also data controllers for transactions in their own store (receipt approval, campaigns, coupons, messages).

2. Data we process

• Store application (optional): the store name, city, address, contact name, phone and note you enter in the "Add my store to Kuponex" form — to call you and add your store
• Identity: full name, username
• Contact: optional mobile phone (used only to send you a new PIN if you forget it) and optional e-mail address; mobile phone for store (seller) accounts
• Transactions: number, date, time and amount of receipts you submit and the store's approval/rejection and note; point movements; coupons you earn and use (including the checkout where used); stores you joined
• Messages: messages you send with "Contact the store" and "Contact us"; messages stores send you and whether you read them
• Image: optional profile photo
• Legal: the date and version of the terms and this policy you accepted
• Security: sign-in records, your 6-digit PIN (stored encrypted; nobody, including Ayendar, can see it), PIN reset requests
• Notifications: your phone's notification token (a random, app-specific ID used to deliver notifications to your phone) and notification language; your campaign-notification consent and its consent/withdrawal dates
• Device security: the model of phones used to sign in to your account (e.g. "iPhone 13"), first and last sign-in time and an irreversible hash of a random installation ID created on the phone — to alert you when your account is signed in on a new phone and to allow store/admin panels only on registered phones
• On your device only: language preference and the last store you opened

We do not collect contacts or advertising identifiers. We do not collect your location: if you tap "Near me", your location is used only on your phone to sort the nearest stores; it is never sent to our servers or stored. The app contains no ads, ad tracking or third-party analytics.

3. Permissions

• Camera: only when you choose to take a profile photo (stores also use it to scan coupon QR codes).
• Location (optional): only when you tap "Near me" on the Stores screen, to sort the nearest stores; it never leaves your phone.
• Photos: only the photo you pick from your gallery for your profile.

• Notifications: for receipt approvals/rejections, coupons about to expire and messages from stores. Campaign and announcement notifications are off by default; they are sent only if you consent at sign-up or in My Profile, where you can turn them off at any time. You can turn off all notifications in your phone's settings. After you sign out, no notifications are sent to that phone.

If you refuse a permission, the rest of the app keeps working.

4. Purposes

Creating and managing your account; sending a new PIN by SMS to the phone saved in your account when you forget it (without a saved phone the account cannot be recovered); receipt approval by the store, points equal to your spending and campaign coupons; verifying and redeeming coupons at checkout; in-app messages from the store (as phone notifications only with your commercial-message consent); answering messages you send to the store or to Ayendar; letting each store see its own revenue and campaign statistics (aggregated, per store); account security and fraud prevention (e.g. fake receipts; frequently rejected receipts are reported to the store and Ayendar and the account may be blocked); legal obligations.

Browsing stores and campaigns without an account collects no personal data.

5. Legal basis

Performance of a contract, legitimate interest of the controller and compliance with legal obligations (KVKK art. 5). For campaign and announcement notifications (commercial electronic messages) we also ask for your separate, optional consent under Turkish Law No. 6563; you can withdraw it at any time in My Profile.

6. Who receives your data

• Stores you join: your receipts, points, coupons and messages in that store together with your name, username, e-mail and profile photo. A store cannot see your records in another store.
• Ayendar: may access your records to operate the platform and provide support, including messages you send to a store.
• Infrastructure provider: data is stored on cloud infrastructure provided by Supabase Inc. on servers outside Türkiye; this transfer is made in line with KVKK art. 9 (standard contract and appropriate safeguards).
• Notification service: notifications are delivered via Google LLC's Firebase Cloud Messaging (and Apple on iPhone); only the notification token and the notification's title and text are sent to this service.
• E-mail provider: your "Forgot PIN" request (username, name, saved phone) is notified to Ayendar by e-mail, sent through Resend Inc. (USA). Ayendar sends your new PIN by SMS to your saved phone.
• Authorities with legal power (on request).

We do not sell your data or share it with third parties for advertising or marketing.

7. Security

Data is sent over encrypted connections (HTTPS). Each store can access only its own records; this is enforced at database level. Your PIN is stored with one-way encryption.

8. Retention

Kept while your account is open. When you delete your account, your personal data is deleted together with your receipts, points, coupons, messages and profile photo, except records we are legally required to keep, and only for that period.

9. Deleting your account

My Profile > Delete account, at any time. If you cannot access the app, e-mail h7seyinkoc@gmail.com with your username and name to request deletion.

10. Your rights (KVKK art. 11)

You may ask whether your data is processed, request information, learn the purpose and recipients, request correction or deletion, object, and claim compensation. Contact: h7seyinkoc@gmail.com. We reply within 30 days.

11. Children

Kuponex is not intended for children under 13 and does not knowingly collect their data.

12. Changes

We may update this policy and will notify you in the app about significant changes.