Çentik Privacy Policy

1.Who is responsible

Çentik operates the platform and acts as the data controller for the data described here. For businesses, Çentik processes loyalty data on behalf of the café that owns the customer relationship.

Service

Çentik

Website

https://centik.app

Email

hello@centik.app

2.What data we process

Depending on how you use Çentik, we process:

• Account data: name, email address and the identifier returned by Google or Apple sign-in.
• Profile data: profile photo and language preference, if you provide them.
• Loyalty data: stamps earned, the café that gave them, reward progress and redemptions.
• Business data: café name, address, menu content, staff accounts and subscription status.
• Technical data: device type, browser, approximate location derived from IP, and log records.
• Communication data: support messages and email delivery status.

3.Why we process it

• To create and secure your account and to authenticate you.
• To operate the digital loyalty card, stamps and rewards.
• To publish café profiles and QR menus.
• To provide analytics to the café you visit, in aggregate form.
• To send transactional and, where you consent, marketing emails and notifications.
• To prevent fraud and abuse of the loyalty program.
• To comply with legal obligations.

4.Legal grounds

We rely on the performance of a contract for account and loyalty features, on our legitimate interest for security and service improvement, on your explicit consent for marketing messages and non-essential cookies, and on legal obligations for record-keeping.

5.Who we share it with

• The café whose loyalty program you take part in, limited to what it needs to recognise and reward you.
• Infrastructure, email, notification and analytics providers acting on our instructions.
• Public authorities, where disclosure is legally required.

We do not sell personal data and we do not share it for third-party advertising.

6.How long we keep it

Account and loyalty records are kept while your account is active and for the statutory periods that follow closure. Log records are kept for the period required by law. When a retention period ends, data is deleted or anonymised.

7.Your rights

• Learn whether your personal data is processed and request access to it.
• Request correction of inaccurate or incomplete data.
• Request deletion where the grounds for processing no longer apply.
• Object to processing based on legitimate interest.
• Withdraw consent for marketing at any time.
• Request a copy of your data in a portable format.

To exercise any of these rights, write to hello@centik.app. We respond within the periods required by applicable law.

8.Security

Data is transmitted over TLS, stored with access controls and row-level security, and staff access is limited to what each role requires. Sign-in is handled by Google and Apple, so Çentik never stores your password.

9.Children

Çentik is not directed at children under the age required for an account in your country. If we learn that such an account exists, we close it and delete the associated data.

10.Changes to this policy

We may update this policy as the service evolves. The effective date above always reflects the current version, and material changes are announced in the product.