GREEN ZONE KİTABEVİ VE YAYINCILIK TİCARET LİMİTED ŞİRKETİ ("GreenZone", "we", "us") is the developer and publisher of the Dahabati mobile application (ذهباتي — the "App"). This Privacy Policy explains what personal data we collect when you use the App, why we collect it, how long we keep it, who we share it with, and the rights you have over it.
We act as the data controller for the processing described here. You can reach us at any time at info@greenzoneapps.com or at the postal address in Section 12 below.
1.Data we collect
1.1 Account data
You sign in to Dahabati with Google Sign-In or Sign in with Apple. From your chosen provider we receive your name, email address (or Apple's private relay address if you choose to hide it), and a unique user identifier. We never receive or store your password.
Alongside your account we store your chosen language and country, your subscription status, and usage counters (how many evaluations you have run today and this month) used to apply plan limits.
1.2 Evaluation data
When you evaluate a gold item, we store the details you enter and the results we compute: the item's weight, karat, the seller's asking price, your selected country and currency, and the computed outputs.
You may optionally attach a photo of the item, which is uploaded to our cloud storage so you can recognise the item later in your history.
Your photos are never analysed. Dahabati contains no artificial-intelligence or image-recognition system. Photos are not sent to any AI service, not processed to identify or appraise the item, and not used to train any model. They are stored so that you can see which item a past evaluation refers to — nothing else.
1.3 My Gold data
If you use the My Gold section to record pieces you own, we store the item details you enter and any photos or receipts you choose to attach. This is your personal record. It is visible only to you, it is never analysed, and — unlike evaluations — it is never automatically deleted (see Section 5).
1.4 Device and usage data
We use Google Firebase to understand how the App performs and how it is used: Firebase Analytics (screens viewed, feature-usage events, device model, OS version, app version, coarse region), Firebase Crashlytics (crash reports and diagnostic state), and Firebase Performance Monitoring (app start and network timing). We also use Firebase App Check, which verifies that requests come from a genuine installation of our App rather than an automated script.
1.5 Country and currency — no location tracking
The App does not use GPS, does not ask for location permission, and contains no location-tracking software of any kind. Your country is the one you select during onboarding (and can change at any time in settings); it determines which market prices and currency are shown to you.
1.6 Purchases
Subscriptions are processed by Apple (App Store) or Google (Google Play) together with our subscription-management provider, RevenueCat. We store your subscription status and references to your purchases. We never see or store your card or payment details — those remain with Apple or Google.
1.7 Notifications
If you allow notifications, your device is issued a push notification token, which we store so we can send you the alerts you have asked for (for example, gold-price movements). You can withdraw this permission at any time in your device settings, and the notifications stop.
2.Why we process your data (purposes & legal bases)
| Purpose | Data used | Legal basis (KVKK / GDPR) |
|---|---|---|
| Providing the service — accounts, evaluations, results, history, My Gold | Account data, evaluation data, My Gold data | Performance of a contract (KVKK art. 5/2-c; GDPR art. 6(1)(b)) |
| Managing subscriptions, applying plan limits, restoring purchases | Account data, purchase data, usage counters | Performance of a contract (KVKK art. 5/2-c; GDPR art. 6(1)(b)) |
| Keeping the App working, diagnosing crashes, preventing abuse | Device and usage data, App Check signals | Legitimate interests (KVKK art. 5/2-f; GDPR art. 6(1)(f)) |
| Improving the App and understanding which features are used | Analytics events | Legitimate interests (KVKK art. 5/2-f; GDPR art. 6(1)(f)) |
| Sending notifications you have opted into | Push token, notification preferences | Consent (KVKK art. 5/1; GDPR art. 6(1)(a)) — withdrawable at any time |
| Meeting legal, tax and accounting obligations | Purchase records | Legal obligation (KVKK art. 5/2-ç; GDPR art. 6(1)(c)) |
3.Third-party processors
We share personal data only with the service providers we need to run the App, and only for that purpose. They act on our instructions and may not use your data for their own ends.
| Provider | What it handles |
|---|---|
| Google (Firebase) | Authentication, database, file storage, server functions, analytics, crash reporting, performance monitoring, push delivery |
| RevenueCat | Subscription state and purchase validation |
| Apple / Google | Payment processing, billing, refunds, sign-in |
| MetalpriceAPI | Gold and exchange-rate market data. We send it no personal data — the App asks it for prices, never for anything about you. |
We do not sell, rent or trade personal data, and we do not share it with advertisers or data brokers.
4.International transfers
Our providers operate globally, so your data may be processed outside Türkiye and outside the European Economic Area. Where that happens, transfers are covered by the safeguards those providers offer — including the European Commission's Standard Contractual Clauses — and by your explicit consent where KVKK requires it.
5.Retention — how long we keep things
Different data has deliberately different lifetimes:
| Data | Kept for |
|---|---|
| Evaluations and their photos | Automatically deleted after a retention window that depends on your plan — currently 14 days on the free plan and 90 days with Premium. The photo file is deleted first, then the record. The current window is always shown in the App. |
| My Gold items, photos and receipts | Never deleted automatically. They remain until you delete them or delete your account. This is your own record of what you own, so we do not expire it. |
| Account data | For as long as your account exists. |
| Purchase records | As long as tax and accounting law requires (in Türkiye, generally 10 years). |
| Analytics and crash data | According to Firebase's own retention settings, typically up to 14 months. |
When you delete your account, we delete your account record, your evaluations, your My Gold items, and every photo and receipt attached to them. Data we are legally required to retain (such as purchase records for tax purposes) is kept for the required period and nothing more.
6.Your rights
Under KVKK art. 11 and, where it applies to you, the GDPR, you have the right to:
- learn whether we process your personal data, and request a copy of it;
- have inaccurate data corrected;
- have your data deleted;
- object to processing based on our legitimate interests;
- request that your data be transferred to you or another controller in a portable format;
- withdraw consent (for example, for notifications) at any time; and
- lodge a complaint with a supervisory authority — in Türkiye, the Personal Data Protection Authority (KVKK Kurumu).
You can delete your account and all associated data from within the App, at any time, without contacting us. For anything else, write to info@greenzoneapps.com; we respond within 30 days.
7.Security
Data is encrypted in transit and at rest by our infrastructure providers. Access to your records is enforced at the database and storage layer: our security rules permit a signed-in user to read and write only their own data. Firebase App Check rejects requests that do not come from a genuine installation of the App.
Premium members can additionally enable protection for the My Gold section, which requires Face ID, Touch ID or your device passcode before that section can be opened, and re-locks after a period of inactivity.
No system is perfectly secure. If a breach ever affects your personal data, we will notify you and the competent authority as the law requires.
8.Children
Dahabati is not directed at children. You must be at least 18, or the age of majority where you live, to hold an account. We do not knowingly collect data from children; if we learn that we have, we delete it.
9.What we don't do
- No AI. The App contains no artificial-intelligence or image-recognition feature. Your photos are never analysed, appraised, or used to train any model.
- No sale or rental of personal data.
- No third-party advertising or ad-tracking SDKs.
- No GPS or location collection of any kind.
- No storage of card or payment credentials.
10.This website
This page is also served at greenzoneapps.com/privacy. The website is hosted on Firebase Hosting, which processes visitor IP addresses as part of serving pages and keeping security logs. The website sets no marketing cookies and runs no analytics or advertising trackers.
11.Changes to this policy
We may update this Privacy Policy as the App evolves. Material changes will be announced in the App or on this page, and the effective date above will be updated. Continued use of the App after a change means you accept the updated policy.
12.Contact
GREEN ZONE KİTABEVİ VE YAYINCILIK TİCARET LİMİTED ŞİRKETİ
Ataköy 7-8-9-10. Kısım Mah. Çobançeşme E-5 Yan Yol Cad.
Ataköy Towers A Blok No: 20/1 İç Kapı No: 109
Bakırköy / İstanbul, Türkiye
info@greenzoneapps.com