Farktör Lojistik Mobile App Privacy Policy
Last updated: 10 November 2026
This policy explains what personal data the Farktör Lojistik mobile app (Android and iOS, package com.farktor.lojistik) processes, why, who it is shared with, how long it is kept, and what your rights are. The Turkish version (https://www.farktor.com/lojistik-uygulamasi-gizlilik-politikasi) has the same content.
1. Who we are and who the app is for
- The app is developed by FARKTOR YAZILIM DANISMANLIK SANAYI VE TICARET LIMITED SIRKETI ("Farktör").
Address: Ulugazi Mah. 19 Mayıs Bulvarı Efe Apt. No:33 Kat:1/2, İlkadım / Samsun 55060, Türkiye.
E-mail: [email protected] - Farktör Lojistik is a work app for the staff of companies that use the Farktör e-commerce and warehouse software. It is not a consumer app.
- You cannot sign up in the app. Accounts are created and closed by your employer's administrator in the Farktör admin panel.
- The business data you handle in the app (orders, products, stock, customer records, etc.) belongs to your employer. For that data your employer is the data controller and Farktör processes it on the employer's behalf.
- For device, usage and error logs (sections 2.3 and 2.5 below) Farktör acts as controller, for the security and operation of the service; staff reports made from these logs are shared with your employer.
2. What data we process
2.1 Account and sign-in data
- Your mobile phone number (to sign in), your password (sent only to verify it; the app does not store it on the device) and the SMS verification code.
- Your name, e-mail, user ID, company and store, and permissions, as set by your company's administrator.
- If you turn on "Remember me", a session token and your name are kept on your device only for quick switching.
- Face ID / fingerprint sign-in is optional. If you turn it on, your phone performs the check and the app only receives the result. Your biometric data (face or fingerprint) stays on the device and is never sent to or stored by Farktör. The session token is kept in the phone’s secure storage (iOS Keychain / Android Keystore) and is deleted when you sign out or when the face/fingerprint set on the phone changes. You can turn it off at any time in My account.
2.2 Data you enter while working
- Actions and information you enter on screens such as orders, products, stock, counts, supply, shipping, invoices, customer/supplier records and support requests.
- Images and files you choose to upload (e.g. product, cover or payment receipt images).
- Messages you write to the ONE AI assistant (if your company has turned it on).
- This information is saved to your company's Farktör account and can be seen by your company's authorised users.
2.3 Device and usage logs
To keep warehouse work running smoothly, find errors and produce staff operation reports for your company, the app sends:
- A random device ID generated by the app on first launch (the advertising ID and IMEI are not used), device make and model, operating system and app version.
- Battery level and charging state, connection type (Wi‑Fi / mobile data), online and offline time.
- Session start and end, the app moving to the foreground and background, screens opened, barcode scan times.
2.4 Step count (fitness info, Android only)
- On Android devices, if you allow it, the step count from the phone's hardware step counter is recorded while the app is open.
- Purpose: measuring staff movement during picking and dispatch work in the warehouse, and your company's reports on picking staff.
- Only the number of steps is sent. No location, route, heart rate or other health data is collected.
- If you do not allow it, or turn it off later in the phone settings, every other feature of the app keeps working.
- The iOS app does not collect step count.
2.5 Error logs
- When the app hits an error: the error message (up to 300 characters), an error summary and debug logs.
2.6 Notifications
- To send work notifications: the notification token created by Google Firebase Cloud Messaging, the device name and the app version.
2.7 Data we do not process
- Location: The app does not read your location. On Android 11 and older, the system requires the location permission to search for Bluetooth printers; it is used only to list nearby Bluetooth devices. Location is not read or sent.
- Camera: The camera is opened only to scan barcodes. Images are processed on the device; no photo or video is saved or sent.
- Bluetooth: Used only to find, pair with and print to the belt printer; the device list is not sent.
- Contacts, SMS, call logs, microphone, health data other than step count, and the advertising ID are not processed.
- There are no ads in the app. Data is not used for advertising or tracking and is not sold.
3. Why we process it (purpose and legal basis)
| Purpose | Data | Legal basis (Turkish KVKK art. 5; GDPR art. 6 where applicable) |
|---|---|---|
| Signing you in, verifying your account and permissions | 2.1 | Performance of a contract; legitimate interest |
| Running your company's warehouse, order and store work | 2.2 | Performance of a contract; the company's legitimate interest |
| Monitoring how the app works, finding errors, keeping it secure | 2.3, 2.5 | Legitimate interest; information security obligations |
| Staff operation reports for your company (movement, steps, scan times) | 2.3, 2.4 | The company's legitimate interest; for step count, your permission on the device |
| Sending you work notifications | 2.6 | Performance of a contract; you allow notifications on the device |
4. Who we share it with
- Your employer: business data, and the staff and usage reports your company's authorised users can see.
- Service providers (processors):
- Server hosting: Hetzner Online GmbH, Germany.
- Image and file storage: Amazon Web Services (Amazon S3).
- Notifications: Google Firebase Cloud Messaging (Google).
- Barcode recognition: Google ML Kit. Runs on the device; no image is sent.
- SMS verification codes: Telsam (Türkiye).
- ONE AI assistant: OpenAI (only if you use the assistant; your message is sent to produce an answer).
- Translation: Google Cloud Translation (only if you use the translate button in the app).
- Competent public authorities, where required by law.
- Data is not sold and is not shared with advertising networks.
5. International transfers
Our servers are in Germany. Some of our service providers (Google, Amazon Web Services, OpenAI) may process data on servers in the European Union and the United States. These transfers are made in line with article 9 of Turkish Law No. 6698 on the Protection of Personal Data and related legislation, under standard contracts with the providers and with the necessary security measures.
6. How long we keep it
- Account data: until your company closes your account; after that, only for legally required retention periods.
- Business data: for the term of your company's Farktör contract and as your company instructs.
- Usage, device, step and error logs (2.3, 2.4, 2.5): 30 days. Older records are deleted automatically every day. The device's daily summary counters (e.g. today's step count) reset every day.
- Session records (sign-in and sign-out times): 12 months.
- Notification token: deleted when you sign out or when the token becomes invalid.
- Data stored on your device ("Remember me"): deleted when you sign out or uninstall the app.
7. Security
- All connections are encrypted with HTTPS.
- The session token is stored on the device in an area only the app can access.
- Access to data is limited to the permissions your company sets in the panel.
8. Your rights
Under article 11 of the Turkish KVKK (and the GDPR where it applies) you have the right to know whether your data is processed, to request information, to learn the purpose, to know who it is transferred to, to request correction, deletion or destruction, to object, and to claim compensation for damages.
- For your business data and account, first contact your employer; your company's administrator closes your account.
- To contact Farktör directly: [email protected]. Requests are answered within 30 days at the latest.
- Step count permission: on Android you can turn it off at any time in Settings → Apps → Farktör Lojistik → Permissions → Physical activity.
Deleting your account and data
Accounts are not created in the app, so they are not closed in the app either. To request deletion:
- Ask your company's administrator, who closes your account in the Farktör panel, or
- Send an e-mail to [email protected] with the subject "Account deletion request", giving the phone number you use in the app and the name of your company.
Once your request is verified with your company, it is completed within 30 days at the latest and you are informed by e-mail. Usage, device and error logs linked to your account are deleted; your company's business records (e.g. orders you processed) belong to the company and are kept as the company instructs and as the law requires.
9. Children
The app is only for company employees and is not directed at anyone under 18.
10. Changes
We may update this policy. The current text is always published at this address; we announce important changes through your company or in the app.
11. Contact
FARKTOR YAZILIM DANISMANLIK SANAYI VE TICARET LIMITED SIRKETI
Ulugazi Mah. 19 Mayıs Bulvarı Efe Apt. No:33 Kat:1/2, İlkadım / Samsun 55060, Türkiye
E-mail: [email protected]