Privacy Policy
Damga

Last updated: 22.04.2026

This Privacy Policy explains how Aqrya (“Aqyra”, “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the Damga mobile application and related websites, services, and tools (collectively, the “Services”).

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Services.

1. Who we are

Aqrya is the primary party that determines the purposes and means of processing personal data relating to the Services. We also work with carefully selected third-party service providers who process data on our behalf (data processors), such as our external development partner and Google Firebase.

2. Scope of this policy

This Privacy Policy applies to:

• Coffee shops and other businesses that register to use Damga (“Shops”).
• End users who collect stamps, rewards, or similar loyalty benefits through Damga (“Users”).
• Visitors to our websites and any other online services we operate that link to this Privacy Policy.

It does not apply to any third-party websites, apps, or services, including external payment processors or app stores, even when accessed via our Services. Those services have their own privacy policies.

3. Information we collect

We may collect the following categories of information when you use the Services:

3.1 Information you provide to us

• Account and registration data (Shops): Business name, address, contact person, email address, phone number, login credentials, billing details, and any other details you provide when creating or managing a shop account.
• Account and profile data (Users): Name or nickname, email address or other contact details (if you choose to register), preferences, and any other information you submit via the app (e.g., feedback, support requests).
• Transaction and purchase
• Records of in-app purchases (e.g., one-time payments for stamp bundles or similar features) and related status, excluding full payment card numbers which are processed by the relevant app store.
• Content you submit: Support messages, feedback, survey responses, and any other communications you send to us

3.2 Information collected automatically

When you access or use the Services, certain information is automatically collected, including through Firebase and similar technologies:

• Device identifiers (e.g., device ID, advertising ID), operating system, app version, language, and settings.
• IP address, approximate location derived from IP (city/country level, where permitted by law).
• Usage data, such as which screens you view, buttons you tap, features you use, crash and performance data, timestamps, and referral information (e.g., how you arrived at the app).

This information helps us understand how the Services are used and improve their performance and reliability.

3.3 Information from third parties

We may receive limited information about you from:

• App stores (e.g., Apple App Store, Google Play): Confirmation that your payment was successful, app install/uninstall events, and basic transaction information. We do not receive full payment card details.
• External development and analytics partners: Aggregated or pseudonymised analytics data and technical logs they process on our behalf.

1. Firebase and analytics

We use Google Firebase (including Firebase Analytics and related services) to help us understand how the app is used, monitor performance, and improve stability.

Firebase may collect information such as device identifiers, IP address, app interactions, and diagnostic information. Google processes this information on our behalf and in accordance with its own privacy and security practices.

Where required by law, we will obtain your consent before enabling certain analytics features or using specific identifiers, and you can withdraw consent at any time via email.

5. Legal bases for processing (where applicable)

Where privacy or data protection laws (such as the GDPR) apply, we rely on one or more of the following legal bases:

• Contract: To provide the Services you request, including creating and managing shop accounts and enabling Users to collect and redeem stamps.
• Legitimate interests: To operate, secure, and improve our Services, prevent fraud, and understand usage, provided these interests are not overridden by your rights and interests.
• Consent: For certain analytics, marketing communications, or other processing where the law requires consent. You can withdraw your consent at any time.
• Legal obligation: To comply with applicable laws, regulations, and lawful requests from authorities.

1. How we use your information

We use the information we collect for purposes including:

• Providing and operating the Services, including registering shops and enabling Users to collect and redeem stamps or rewards.
• Facilitating and confirming one-time in-app purchases processed by app stores.
• Customizing and improving the app experience, including recommending relevant features to Shops and Users.
• Monitoring, analyzing, and improving performance, stability, and usability of the app (including via Firebase).
• Communicating with you about your account, updates, security alerts, and support messages.
• Detecting, preventing, and addressing fraud, abuse, security incidents, and other harmful activity.
• Complying with legal obligations and enforcing our Terms and Conditions.

We do not sell your personal data.

7. Payments and app stores

Payments for Users who collect stamps are handled by third-party app stores (such as Apple App Store or Google Play).

• We do not collect or store full payment card information.
• App stores may share limited transaction data with us (for example, that a payment was successful, the product purchased, and time of purchase).
• Your use of app store services is governed by the relevant app store’s terms and privacy policy, which we encourage you to review.

For Shops, if we collect separate billing information (e.g., bank account details, tax information) for business-to-business payments outside app stores, this will be processed only as necessary to manage those payments and comply with legal and accounting obligations.

8. How we share information

We may share information in the following circumstances:

• Service providers and processors: With third-party companies that provide services to us, such as app development, hosting, analytics (including Firebase), email delivery, and customer support. These parties may only process your data on our instructions and must protect it appropriately.
• Business partners (Shops): To the extent necessary to operate loyalty or stamp programs, we may share relevant information with participating Shops.
• Legal and compliance: Where required by law, regulation, legal process, or government request, or to protect the rights, property, or safety of Aqrya, our users, or others.
• Business transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business, information may be transferred as part of that transaction, subject to continued protection consistent with this Privacy Policy.

We do not share personal data with third parties for their own direct marketing.

9. International transfers

Your information may be processed and stored in countries other than the one in which you reside, including countries that may have different data protection laws.

10. Data retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

• For the duration of an active shop or user account and for a reasonable period thereafter.
• For as long as necessary to comply with legal, accounting, or reporting obligations.
• For as long as needed to resolve disputes and enforce our agreements.

When data is no longer required, we will delete or anonymize it in a secure manner, unless we are legally required to retain it for a longer period.

11. Data security

We take reasonable and appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

These measures may include encryption in transit, access controls, secure development practices, and regular monitoring of our systems and service providers. However, no system can be completely secure, and we cannot guarantee absolute security of your information.

12. Your rights and choices

Depending on your location and applicable law, you may have certain rights over your personal data, which may include:

• Accessing a copy of your personal data.
• Requesting correction of inaccurate or incomplete data.
• Requesting deletion of your data, in certain circumstances.
• Objecting to or restricting the processing of your data, in certain circumstances.
• Withdrawing consent, where processing is based on consent.
• Porting your data to another service provider, where technically feasible and required by law.

You can exercise these rights by contacting us using the details provided in the Contact Us section below. We may need to verify your identity before responding.

Analytics and tracking choices

• You can manage certain analytics and advertising settings via your device (for example, limiting ad tracking).
• Where we rely on consent for analytics, you can withdraw that consent using in-app settings (if available).

1. Third-party links and services

The Services may contain links to or integrations with third-party websites, apps, or services, including app stores and external payment providers.

We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal data to them.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

When we make material changes, we will take appropriate steps to inform you, such as updating the “Last updated” date at the top of this page, posting a notice in the app, or sending you a direct communication where required.

Your continued use of the Services after any changes means you accept the updated Privacy Policy.

15. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, you can contact us at:

M. Bugra Akin
Rudolfstrasse 1/12b
A-4040 Linz
m.bugra.akin@gmail.com
+436805549228

We will review and respond to your request within a reasonable time and in accordance with applicable laws.