Version 2026.09.20 · Document date: September 20, 2026
This policy explains how personal data is processed in SmartShopper and its related services. You can submit privacy and data rights requests using the contact details above.
SmartShopper does not access your device address book or collect your contact list. The app does not request precise device location permission; country and postal code provided by you are regional settings. An IP address and provider data may permit an approximate region to be inferred.
Data is obtained from information you provide directly, content you select, sign-in/purchase providers, and the app's technical operation. Core services rely on performance of a contract; security, diagnostics, and service improvement rely on legitimate interests; required records rely on legal obligations; and optional processing that requires permission relies on consent. Other requirements under applicable law remain applicable.
When you choose receipt scanning and approve the upload, your receipt photo is sent through the SmartShopper server to an AI service on Microsoft Azure for reading. Personal information visible in the photo may be included in this transfer. Country, language, and currency information may also be used to help interpret the result. Do not submit images containing unnecessary personal or sensitive information.
This processing is separate from backing up the photo to a cloud archive. An AI scan you initiate requires photo transfer even if you have not enabled cloud backup. You can stop new uploads by not initiating scans. Saved receipt details are associated with your account for archiving and analytics. Separately storing document photos in the cloud requires an eligible subscription and separate backup consent.
Sharing is limited to data required by the feature and service you select. International transfers may occur depending on where providers are located or process data. The transfer basis and safeguards required by applicable law are applied; you may request details through our contact address.
You can manage camera/photo access, notifications, and any tracking permissions in your device settings. You can change advertising privacy preferences through the permission options provided by the app. You can withdraw cloud backup consent in the app; withdrawal does not retroactively invalidate earlier processing. An optional feature may not work without the corresponding permission. Accepting the terms of use does not replace these permissions.
Account and shopping records are retained for as long as necessary to provide the relevant service. You can initiate deletion through Profile → Delete my account; the web account deletion page is also available. Account access is closed, and associated personal data enters the deletion or anonymization process. Records needed for legal obligations, security, fraud prevention, or resolution of a specific dispute may be retained only to the extent and for the period necessary.
When cloud backup consent is withdrawn, new backups stop and existing cloud documents are queued for deletion. When a subscription ends, cloud documents are retained for 90 days and then deleted. Original files on your device are managed separately on your device.
Support requests are retained for no more than 180 days. Technical records are retained for the time necessary for troubleshooting and security investigations. Transaction and consent records are limited to the needs of the relevant service, legal retention requirements, or evidentiary purposes. Personal data is deleted or anonymized when the need for retention ends.
You may request deletion of some or, where applicable, all data held on the server without closing your SmartShopper account. Email info@cattech.com.tr from the address registered to your account with the subject “SmartShopper Data Deletion Request” and identify the data or record categories you want deleted. Do not include your password, payment card details, or document images in the email.
We may request information necessary to verify account ownership before fulfilling the request. Deleting data required for the account or a feature to operate may make the account or that feature unavailable; we will explain the result in that case. Records that must be retained by law may be kept only to the necessary extent and for the necessary period. You can delete data held only on your device through the app or device settings.
Under applicable GDPR and KVKK provisions, you may exercise rights to information and access, rectification, erasure, restriction of processing, objection, data portability, and withdrawal of consent. Send requests to our contact address. Your right to lodge a complaint with the competent data protection authority remains unaffected.
Technical and organizational measures, such as access controls and encrypted communication, are used to protect data. No system can provide absolute security. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
SmartShopper is intended for users aged 13 and over. Where required by the law of your country, you need permission from a parent or legal guardian to use the app or purchase a paid subscription. Where personal data processing relies on consent and you are below the age at which you can give valid consent independently in your country, consent must be given or authorized by a parent or legal guardian. Accepting this policy does not replace any required parental consent.
This policy may be updated to reflect changes to the service or applicable law. You can check the current version in the app and on our website. Changes that materially affect processing purposes, sharing, or your rights will be communicated appropriately. Where new processing requires consent, it will be requested separately before processing begins; continued use alone does not constitute consent.