Privacy Policy

Effective Date: March 1, 2026

Last Updated: March 1, 2026

At BiMakas, we value the protection of our users' personal data. This policy explains what data we collect, how we use it, who we share it with, and your rights.

1. Data Controller

The party responsible for processing personal data within this app is:

• Trade Name/Operator: BiMakas
• Authorized Person: Muhammet Sinan Baysan
• Contact: info@bimakas.com
• Web: https://bimakas.com/

2. Categories of Data Collected

2.1 Account and Identity Information

• First name, last name
• Email address
• Phone number
• Date/year of birth, gender (based on user preferences)

2.2 Profile and Service Information

• User avatar/profile image
• Barber profile data (business name, description, services)
• Barber documents (tax certificate, criminal record, vocational certificate, and other documents uploaded by the user)
• Gallery images

2.3 Location Data

• Current or last known location to show nearby barbers
• City/district resolution data

2.4 Appointment and Transaction Data

• Appointment date/time, selected services, status history
• Review/rating content and score

2.5 Payment Data

• Payment method choice
• Payment status and transaction references
• Card data is not stored directly by BiMakas; it is processed by authorized payment institutions.

2.6 Technical and Usage Data

• Device type, operating system, app version
• Error logs and performance metrics
• Push notification token

3. Purposes of Processing Personal Data

Collected data is processed for the following purposes:

• Completing membership and identity verification
• Managing appointment and payment flows
• Matching customers and barbers
• Managing support requests
• Preventing fraud and abuse
• App security, maintenance, and improvement
• Fulfilling legal obligations

4. Legal Bases for Processing

Personal data is processed based on the following legal grounds:

• Establishment or performance of a contract
• Explicit consent (where required, e.g., tracking permission)
• Fulfillment of legal obligations
• Legitimate interests (security, improvement of operational processes)

5. Sharing Data with Third Parties

Your data may be shared in a limited manner, to the extent necessary for service delivery:

• Firebase/Google Cloud (authentication, database, storage, notification infrastructure)
• Payment institutions (e.g., Iyzipay)
• Technical service providers (hosting, monitoring, error analytics)
• Authorized public institutions (where legally required)

Data is not sold or rented.

6. Cross-Border Data Transfer

Depending on the infrastructure services used, data may be processed on servers located abroad. In such cases, administrative and technical safeguards compliant with applicable law are implemented.

7. Data Retention Periods

Data is retained for as long as required by processing purposes and legal retention obligations. At the end of the retention period, data is deleted, destroyed, or anonymized.

8. Security Measures

For data security:

• Authorization and access control
• Encryption in communication (TLS/SSL)
• Logging and monitoring
• Up-to-date security patches and operational controls

9. Children's Privacy

The app does not intentionally collect data from children in violation of applicable laws. If accidentally collected data is detected, it is deleted.

10. User Rights

Under applicable law, you have the following rights:

• Learn whether your data is processed
• Request information about processed data
• Request correction and deletion
• Object to processing
• Claim compensation in case of damage (within legal scope)

You may submit your requests to info@bimakas.com.

11. Tracking Permission (ATT - iOS)

iOS devices request app tracking permission via the system permission screen. You can change your permission choice at any time from device settings.

12. Policy Updates

This policy may be updated from time to time. The current text is published through in-app and/or web channels.