Privacy Policy — TMS Mobile App

Last updated: 31 August 2026 · Version: 1.0

This Privacy Policy explains how TEKNOLİKYA ("TMS", "we") processes personal data when you use the TMS mobile application (the "App"). The App is a business (B2B) product for travel agencies and tourism businesses; user accounts are created under the business (agency) you work for.

1. Data controller and our two roles

For your account data (name, e-mail, phone, user activity, device and security records), the data controller is TEKNOLİKYA, Kesikkapı Mah. 514 Sk. No:12 D.1, Fethiye/Muğla, Türkiye, e-mail: admin@tms.tours.

For your agency's business data (personal data about the agency's own customers, reservations and sales entered into the system), the data controller is the agency you work for; TMS processes this data on the agency's behalf as a data processor under Turkish Law No. 6698 (KVKK). Requests regarding such data should be directed to the relevant agency first; we provide the necessary technical support.

2. Data we process

• Account and identity data: name, e-mail, phone, role, associated agency.
• Usage and transaction records: actions performed in the App (sign-in, creating/updating records), error and performance logs.
• Device data: device model, OS version, app version, language, push notification token.
• Security records: IP address, session and access logs.
• Permission-based data (only when you choose to use the related feature):
  • Camera / Photos: to upload documents, receipts and tour/service images; only the images you select are processed.
  • Location: processed only while you use location-based operational features; no location data is collected otherwise.
  • Push notifications: to send reservation, sales and operations alerts; you can turn them off in your device settings at any time.

None of these permissions is required for the App's core functions; declining a permission only disables the related feature.

3. Purposes and legal bases

We process your data to provide the service and manage your account (performance of a contract), to keep the service secure, fix errors and prevent abuse (legitimate interest), to respond to support requests, and to comply with legal obligations. We do not use your data for advertising, do not sell it, and do not share it for third-party marketing.

4. Sharing

Data may be shared, to the extent necessary to provide the service, with sub-processors such as hosting providers, push notification infrastructure (Google Firebase Cloud Messaging, Apple Push Notification service) and e-mail/SMS providers, and with competent authorities where required by law. Where a service involves an international transfer, the mechanisms under KVKK art. 9 (including standard contractual clauses) are applied.

5. Retention and deletion

Account data is kept while your account is active. When your account is deleted, personal data is erased or anonymised within [30] days; backup copies expire automatically within [35] days at the latest. Records we must keep by law (e.g. financial records, access logs) are retained only for their statutory periods with restricted access. Details: Account Deletion page.

6. Your rights

You may exercise your rights (access, rectification, erasure, objection and others under KVKK art. 11) by contacting admin@tms.tours. Requests are answered within the statutory period (at most 30 days). If you are a customer of one of our agencies (e.g. a tour participant), please contact that agency directly.

7. Security

Data is encrypted in transit (TLS); access is role-based, logged and tenant-isolated. The App does not use cookies; a separate Cookie Policy applies to our website.

8. Changes and contact

Material changes will be announced in the App; the current version is always published on this page. Questions: admin@tms.tours · Support: tms.tours/legal/support