Privacy Policy
What data Petanque AI collects, why we collect it, and who we share it with.
Last updated: 20 September 2026
Data controller
Petanque AI is the data controller under Turkey's Personal Data Protection Law (KVKK, no. 6698). This policy covers the Petanque Mobile app and the Petanque web panels.
What we collect
Identity and contact
- Your name
- Your phone number (verified for sign-in in the mobile app)
- Your e-mail address (for web panel users)
- Your position at the pharmacy
Business data
- Sales reports and report line items
- Orders, invoices and stock records
- Field visits and expense documents
Images
- Photos of receipts and sales reports
- Photos of visit expense documents
Technical data
- A device notification token, so we can send notifications
- Session records: IP address and browser/device information
What we do not collect
The app never asks for or collects your location. It does not access your contacts, your messages, or any other photo in your gallery; the camera and photo permissions exist only to upload the receipt and document images you choose.
Why we use it
- To create your account and verify your phone number
- To read sales line items from the receipt images you upload
- To run stock, order and reporting operations
- To send stock alerts and order notifications
- To invoice and ship orders
Service providers we share data with
We do not sell your data. We use the providers below to run the service; each processes only what its own job requires.
| Google (Gemini / Vertex AI) | Reading the receipt images you upload |
|---|---|
| Twilio | Sending SMS verification codes for sign-in |
| Expo | Delivering mobile notifications |
| Cloudflare R2 | Storing uploaded images and documents |
| Amazon SES / Resend | Sending e-mail |
| iyzico | Payment processing |
| Yurtiçi Kargo | Creating and tracking shipments |
| Neon | Database hosting |
| Hetzner | Server hosting |
Retention and deletion
We keep your personal data for as long as your account is open. When you delete your account, your name, e-mail address, phone number and profile photo are deleted. The pharmacy's sales reports, orders and stock records are the pharmacy's commercial records and are retained under statutory record-keeping obligations; after your account is deleted they are no longer associated with your name.
Your rights
Under article 11 of the KVKK you have the right to:
- Learn whether your personal data is being processed
- Request information about that processing
- Have incomplete or incorrect data corrected
- Request erasure or destruction
- Object to processing and seek compensation for damages