Privacy Policy

Data controller: Gny Group — Antalya, Türkiye · Contact: help@gnyco.com

This Privacy Policy has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK), and where applicable the EU General Data Protection Regulation (GDPR), as well as the Google Play and Microsoft Store user data policies. It covers:

• Fabrico Service — Android and Windows app (package: com.gnygroup.fabricoservice)
• Fabrico Restoran / Fabrico Resto — Android and Windows app (package: com.gnygroup.fabricorestoran)
• www.gnyco.com and its subdomains (api, auth, panel, license, admin), the customer portal and the hardware store

Our apps contain no advertising networks and no third-party tracking or analytics SDKs. We do not sell your personal data and do not use it for advertising or profiling.

1. Categories of Personal Data Processed

• Identity and contact: name, email address, phone number.
• Business details: company name, company code, business/branch address and tax details when an invoice is requested.
• Account security: irreversible password hash, session and device identifier, sign-in attempts, IP address.
• Device and technical data: platform (Android/Windows), app version, language and theme preference, error/diagnostic logs.
• Location data: approximate and precise location — see section 3.
• Camera and images: camera frames processed while scanning barcodes/QR codes and photos you attach to records.
• Subscription and purchases: plan/license history and store purchase verification data (Google Play purchase token, Microsoft Store order id). We never receive or store your card details.
• Business content: customers, jobs, appointments, orders, checks, menus, inventory, quotes, staff and finance records you create.
• Support communications: requests, complaints and correspondence you send us.

2. Purposes and Legal Bases

• Account creation, authentication and session management — performance of a contract.
• License/subscription verification, enforcement of plan limits and purchase validation — performance of a contract.
• Providing app functionality (job/order tracking, inventory, maps, live location, notifications) — performance of a contract; for location and camera, your explicit consent.
• Security, abuse and fraud prevention — legitimate interest and legal obligation.
• Support and troubleshooting — legitimate interest.
• Accounting, tax and other statutory retention duties — legal obligation.

3. Location Data

Fabrico Service and Fabrico Restoran may access the device's approximate location (ACCESS_COARSE_LOCATION) and precise location (ACCESS_FINE_LOCATION) for the business features listed below. Location is accessed only when the relevant feature is used and always subject to the operating system permission prompt. If you decline location permission, all other app features remain fully usable.

a) Foreground (while using the app) location

• Capturing the current coordinates and resolving them into a street address when you tap "Get location" while creating a job, service record, appointment, order, customer or branch address;
• Converting an address you type into map coordinates (geocoding) and opening the location in a maps app;
• Showing distance and route information to a delivery or service point.

b) Location sharing via a foreground service (FOREGROUND_SERVICE_LOCATION)

When you start live tracking for a job or delivery, an Android foreground service keeps the location up to date while the screen is off. A persistent notification is shown throughout, and sharing can be stopped with a single tap.

c) Background location (ACCESS_BACKGROUND_LOCATION) — optional

Background location is used only when you enable the Premium+ feature "automatically share location during working hours", and is subject to the additional permission requested separately by Android. Its purpose is to let a business owner see the current location of field or courier staff. You can turn it off at any time from app settings or via the stop action in the notification; doing so also invalidates the sharing record on the server. This feature is not available in the Windows version.

d) Who can see your location

• Only authorised users belonging to your own business account (company code) can see the location.
• If you choose to share a tracking link created for a job or delivery, your customer can view only the current location of that job while the link is valid.
• Location data is never used for advertising, sold, or transferred to third parties for marketing.

e) How long location is kept

• Business live location: only a single current record is stored on the server and it expires after 3 minutes; stopping sharing deactivates it.
• Job/delivery live tracking: a tracking link is valid for at most 8 hours; when tracking ends or expires, the location record is deleted.
• No location history or movement trail is kept. Only the last known coordinate is stored.
• Address/coordinate information you deliberately save into a record (job, customer, order) is kept as part of that record until you delete it.

4. Camera, Photos and Notifications

• Camera: used only while you scan a barcode/QR code or attach a photo, for the duration of that action. Barcode scanning happens on the device and camera frames are not uploaded. Photos you attach are stored as part of the related record.
• Notifications: used for order, job, reminder and subscription messages; the permission may be declined.
• Alarm/wake permissions: used solely so scheduled reminders fire at the correct time.

5. Where Data Is Stored and Transfers

A significant part of app data is stored locally on your device. Data is sent to our servers only for account/license verification, the online features you choose to use, and Premium+ cloud synchronisation. All communication is encrypted with HTTPS/TLS.

Limited processing by service providers:

• Google Play Billing / Google Play Developer API — purchase and subscription verification.
• Microsoft Store — purchase verification for the Windows version.
• Google Maps / Geocoding — converting addresses to coordinates and map display.
• Sign in with Google — only if you choose this method, for authentication (email and name).
• Our hosting and email infrastructure provider — data storage and transactional email delivery.

These parties process data only for the stated purposes. As some of these services operate servers abroad, a limited international transfer may occur within the meaning of Article 9 of the KVKK.

6. Retention Periods

• Account and business details: while the account is active; deleted or anonymised within 30 days of a closure request.
• Security logs (IP, sign-in attempts): up to 12 months.
• Subscription and invoice records: for the statutory retention period (generally 10 years).
• Live location records: the short periods stated in section 3.

7. Data Security

We apply TLS encryption in transit, irreversible password hashing, token-based session management, role and company-scoped access separation, sign-in attempt throttling, and administrative and technical safeguards against unauthorised access.

8. Children's Privacy

Our apps are intended for businesses and are not directed to children under 13. We do not knowingly collect children's data and will delete it if we become aware of it.

9. Your Rights

You have the right to learn whether your personal data is processed, request information and the purpose of processing, request rectification, erasure or destruction, learn the third parties to whom data is transferred, object to adverse outcomes of automated analysis, and claim compensation for damages. You may also request a copy of your data (portability) and withdraw your consent at any time.

Send requests to help@gnyco.com; they are answered within 30 days at the latest.

10. Account and Data Deletion

You may request deletion of your account and data at www.gnyco.com/hesap-silme or via help@gnyco.com. Data stored locally is removed from the device when you uninstall the app.

11. Cookies

For cookies used on our websites, see the Cookie Policy. No advertising or tracking cookies are used in the mobile apps.

12. Changes to This Policy

This policy may be updated. The current text is published on this page and takes effect together with the "Last Updated" date shown above. Significant changes are also announced inside the app.

Contact: Gny Group · Antalya, Türkiye · help@gnyco.com · info@gnygroup.com