Privacy Policy and KVKK Information Notice
Effective date: 9 November 2026
This is an English translation; in case of conflict the Turkish version prevails.
1. Data controller
Sarper Baykara, who develops and publishes the Sofrafy app, is the data controller within the meaning of the Turkish Personal Data Protection Law No. 6698 (Kişisel Verilerin Korunması Kanunu, “KVKK”). Address: Koşuyolu, Katip Salih Sk. No:6, 34718 Kadıköy/İstanbul, Türkiye · Contact: [email protected]
2. Data that stays on your phone
The following is kept only on your device, in the app's own storage, and (except for household sharing) is not sent to our server:
- Kitchen items: name, category, location (fridge, freezer, pantry), quantity, purchase and opening date, use-by or best-before date, barcode
- Weekly plan and shopping list
- Household profile: the “Family with kids” option, the youngest child's age group (e.g. “1–3 years”), allergies. This information is used on your phone to filter recipes; it is not part of household sharing and is never sent to our server.
- App settings (reminder time). Reminders are local notifications created on your phone.
This data is included in your phone's own backup (iPhone backup, Android backup) if you have turned backups on. The household sharing key is not included in backups (on iPhone it is a Keychain item tied to this device only; on Android it is kept in a folder that is not backed up). When you delete the app, the data on your phone is deleted.
3. Data sent to our server
Our server runs in Türkiye, on a computer owned by the developer. The image model that recognises photos also runs on the same computer (a model shared with the developer's NutriTR app); your photo is not sent to any external artificial intelligence company.
| When | What is sent | Retention |
|---|---|---|
| Scanning a barcode | Barcode number | Not stored (only in the request logs described below). |
| Adding from a photo (Family Plus) | The photo you select or take (reduced in size in the app) | The photo is not stored; it is processed in memory only to recognise the items. The list of items found is returned to you and is not kept on the server. The number of photos processed and how long processing took are kept as aggregate counters; neither the photo nor your IP address is included in these counters. |
| Household sharing (if you turn it on) | Kitchen item, plan and shopping list records (the fields in section 2, excluding the household profile and allergies); an irreversible digest (hash) of the random member key assigned to each device; the time your membership was created and the time of your last connection; the invite code | For as long as the household exists. A record you delete is deleted from the household (only an identifier without content remains). When you leave the household, your membership is deleted; when the last member leaves, all of the household's data is deleted. A membership with no device connecting for 12 months, and a household left with no members, are deleted automatically. An invite code is valid for 48 hours. Household data is backed up every night to a disk at the server's location; backups are deleted after 30 days, so deleted data is also removed from backups within 30 days at the latest. |
| Family Plus subscription | On iPhone, the transaction information signed by Apple (product, expiry date, transaction ID); on Android, the Google Play purchase information (package name, product, purchase token) | Used to verify the subscription; the document itself is not stored. Because the subscription covers the household, only the household's Plus expiry date is kept in the household record. Payment is collected by Apple or Google; we do not see your card details. |
| Every request | Request time, requested address (including the barcode number), result code | Request logs are deleted after 30 days. Your IP address is not written to the logs; it is kept only in memory, for at most 1 hour, for the request limit that prevents abuse. |
The data sent does not include your name, e-mail address or phone number, and there is no account through which we could link it to you.
4. Household sharing
Household sharing is optional. When you create a household or join one with an invite code, your kitchen items, plan and list are synced with all devices in the household; every member of the household can see and change these records. Share the invite code only with people you trust. When you join a household, the items on your phone are merged with the household's. You can stop sharing at any time with Settings → Household sharing → Leave household; the records on your phone remain.
5. Camera and photos
Barcodes and the expiry date on a package are read on your phone (on-device recognition with Apple Vision on iPhone and Google ML Kit on Android); only the barcode number is sent to the server. A photo is sent only when you use “Add from photo”, and only the photo you select.
6. Purposes of processing and legal grounds
- Finding items by barcode, recognising items from a photo, household sharing and verifying the subscription: provision of the service, KVKK Art. 5(2)(c) (establishment or performance of a contract)
- Security of the service, prevention of abuse and debugging (request logs, request limits): KVKK Art. 5(2)(f) (legitimate interest)
- Showing ads in the free version: for non-personalised ads, KVKK Art. 5(2)(f) (legitimate interest: funding the free version); for ads personalised to your interests, your explicit consent (Google's consent form in every country, and on iPhone also Apple's tracking permission). You can withdraw your consent at any time (section 7).
- Information that may qualify as health data, such as allergies, stays only on your phone; we do not process it, do not keep it on our server and do not use it for advertising.
7. Ads
When you use the app without Family Plus, a banner ad is shown at the bottom of the What to cook? screen, and occasionally a full-screen ad when you return from a recipe. The ads are provided by Google's AdMob service (Google Ireland Limited; outside the EU, Google LLC, USA). To show ads, Google's advertising software processes the following from your phone: the advertising identifier (on iPhone only if you allow tracking; on Android, the Google advertising ID), your IP address and the approximate location based on it, device model, operating system and language, the app's name and version, and ad impressions and taps on ads.
Your kitchen items, recipes, plan, list, household profile, allergies, photos and household sharing data are not added to ad requests; Google does not receive them from Sofrafy. Ads are limited to content suitable for a general audience.
- Consent form (in every country, on iPhone and Android): Google's consent form opens before any ad is shown. If you choose "Do not consent", ads are still shown but are not personalised. You can change your choice or withdraw your consent at any time in Settings → Family Plus → Ad privacy options.
- iPhone: if you have given consent, you are then also asked for Apple's tracking permission; if you do not allow it, ads are not personalised. You can change your choice in iPhone Settings → Privacy & Security → Tracking.
- Android: you can also delete or reset your advertising ID under Settings → Google → Ads (or Privacy → Ads); if you delete it, ads are not personalised.
- Why this ad? You can see on what basis an ad is shown to you and how to change this via the icon in the corner of the ad (AdChoices).
The consent and permission questions are not asked when you first open the app, but the first time you open the What to cook? screen, where ads first appear; until then the advertising software does not run at all. With Family Plus the advertising software is never started.
Google processes this data under its own responsibility and according to its own policies: Google Privacy Policy, How Google uses information from sites or apps that use its services. This transfer counts as a transfer abroad within the scope of KVKK Art. 9.
8. Transfers and service providers
We do not sell your data. The data Google processes for advertising is described in section 7. Access to our server is provided through Cloudflare, Inc. (USA), which securely relays internet traffic; in doing so, Cloudflare processes data such as your IP address and the content of requests solely for the purpose of transmission. For this reason, your data may be deemed to be transferred abroad within the scope of KVKK Art. 9.
On Android, purchase information is sent to Google LLC (USA, Google Play Developer API) to verify the Family Plus subscription. The app is distributed through Apple (App Store, TestFlight) and Google (Google Play); these companies' own privacy policies apply.
Product information found by barcode comes from a copy, kept on our server, prepared from the Open Food Facts open database; none of your data is sent to Open Food Facts.
9. Your rights (KVKK Art. 11)
You have the right to learn whether your personal data is processed, to request information, to request its correction or deletion, to know the parties to whom it has been transferred, to object, and to claim compensation for damages. You can send your requests to [email protected]; we will respond within 30 days at the latest. Since there is no account, the fastest way to delete your household sharing data is Leave household; for the data on your phone, deleting the app is enough.
10. Children
Sofrafy is designed for adults, especially parents, and does not knowingly collect data from children. The age group entered with the “Family with kids” option does not identify a child; it only adjusts recipe suggestions (e.g. not suggesting honey for children under 1) and stays on the phone; it is not used for advertising. Parents can write to [email protected] with their requests.
11. Food safety notice
Expiry estimates and recipes are for general information only; details are in the Terms of Use.
12. Changes
When we update this notice, we change the effective date and announce significant changes in the app.