Privacy Policy

1. Data Controller

This privacy policy concerns the personal and business data collected and processed with PratikKasa (the “Application”). The Application is software with which businesses of every sector and every size run their sales and business management processes, and it works primarily on the device, offline.

You can contact the data controller about any matter at [email protected].

2. Data Processed

The Application processes the following data necessary for the service to work (usage and diagnostic information processed to improve the Application is described in sections 3 and 4):

• Account and device information: Business Code, device identifier (a hardware-based unique identifier) and application version — for session verification and device management.
• Business data: products, prices, stock, sales and refund records, customers, store-credit/debt records, expenses and business settings — data entered by the business owner.
• User account information: staff name, username and the irreversible (hashed) form of the password/PIN — for in-app authorization.
• Diagnostic records: the Application may keep local logs on the device for troubleshooting; these are transmitted only when the user explicitly chooses to share them (for performance and error information sent automatically, see section 4).

3. Recording of App Usage

To improve the Application, from the moment you first open it until the end of the fifth day after your business account is opened, your navigation between screens in the Android and Windows application (which screen you open and how long you stay on it) is recorded. In the recording, the text you type and the text, numbers and images shown on the screen are hidden; where you tap or click is not recorded; PIN, password and lock screens are never recorded. Your name, email address or device identifier is not added to the recording; your IP address is not stored.

Recordings are stored for at most 30 days with our service provider PostHog Inc., hosted in the European Union (Frankfurt, Germany), and are reviewed only by the PratikKasa team to improve the product. This processing is based on our legitimate interest in improving our product (Law No. 6698, Art. 5(2)(f)). You can ask for the recording to be stopped for you and for the recordings to be deleted at [email protected].

In addition, the steps on the sign-up screens and the answer to the “Is Something Missing?” question asked when leaving sign-up are counted only as daily totals, without any person or device identifier (for example, “6 devices saw the email screen today”).

4. App Performance and Diagnostics

The Application's launch time, device model, operating system, country, network type and application errors are sent automatically so that the Application works properly (on phones through Expo's EAS Observe service). After you sign in to your business, the Application's usage durations and events about your business's progress (such as the first product or the first sale; without product names, amounts or customer information) are sent to the business server.

5. Purpose of Processing

• Verifying the user and connecting the device to the business,
• Providing sales, stock, customer, store-credit and reporting functions,
• Secure synchronization of data across multiple devices,
• Software updates and technical support,
• Improving the Application and monitoring that it works properly (sections 3 and 4).

6. Storage and Transfer of Data

The Application works offline-first: business data is stored locally on your device in the first place. Data is also stored on a secure server in a way that belongs solely to your business (tenant isolation) and is synchronized across your devices. If you chose to install on your own server, the data resides only on your server.

Each business's data is isolated from other businesses. The Application does not sell or rent your data to third parties for marketing purposes.

No payment is taken inside the Application; payment details are not collected or stored by the Application. If a fiscal cash register (ÖKC) or card device integration is used, the payment is carried out through that legally approved device/service.

7. Data Security

Sensitive information (device access keys and similar) is kept in the device's secure storage; passwords are stored irreversibly. All communication with the server takes place over an encrypted connection (HTTPS) and is protected by authorization bound to the device identity.

8. Your Rights under Turkish Data Protection Law (KVKK)

Under Law No. 6698 on the Protection of Personal Data (KVKK) you have the right to learn whether your personal data is processed, to request information if it has been, and to request its correction or deletion. Most of your business data is directly under your control and can be managed from within the application; you can delete all local data on your device with the “reset all local data” option.

You can send your requests to [email protected].

9. Cookies

This website (pratikkasa.com) uses limited cookies and analytics for essential functions and visit statistics: Google Analytics and Microsoft Clarity. Clarity records clicks and scrolling on the page to improve the site (session recordings and heatmaps). Text typed into form fields is not recorded. For visits from the European Economic Area, the United Kingdom and Switzerland, Clarity sets no cookies without consent. The PratikKasa desktop and mobile application does not use advertising or tracking cookies.

10. Changes

This policy may be updated from time to time. Updates are published on this page; for significant changes the date is updated.

11. Contact

For all privacy questions and requests: [email protected]