Sofram
Türkçe
Privacy Policy — Sofram Courier
Last updated: 2 October 2026
This policy explains what personal data the Sofram Courier app processes about couriers, for what purpose, who it is shared with, how long it is kept, and your rights. Data is processed under Turkish Personal Data Protection Law No. 6698 (KVKK).
Data controller
The data controller is Sofram. For any request or question about this policy, write to admin@sofram.ai.
What data do we collect?
- Full name, phone number, email address, date of birth
- National ID number
- IBAN and the tax details needed for payouts
- Driving licence, vehicle registration and other documents required by vehicle type
- Criminal record certificate — this is special-category personal data under KVKK Article 6; a privacy notice and explicit consent are shown before upload, and the version of the accepted notice is recorded
- Your location is processed while you use the app so we can show nearby jobs and verify the delivery location
- While your shift is open, your location is shared even when the app is in the background, so the customer can see you on the map during delivery
- Location collection stops when you go offline and when the delivery is completed
- The camera is used to scan the restaurant's handover code
- A selfie is taken when you accept a job, to confirm the account is yours. This selfie is not biometric data: no face template is extracted and no algorithmic matching is performed; an administrator compares it against your ID by eye
- Your photo library is accessed so you can upload required documents
- Device notification registrations, so we can send you notifications
- Face ID / biometric screen lock is used on your device, locally, to verify the account when you accept a new job; your biometric data is not sent to our servers
Why do we process this data?
- To receive and review your courier application
- To show you relevant offers and carry out deliveries
- To give the customer location and status information during delivery
- To pay your earnings and meet legal invoicing/record-keeping obligations
- For security, fraud prevention and dispute resolution
Who do we share it with?
- During a delivery, your location is shared with that order's customer so they can see you on the map
- With the suppliers that run our payment and notification services, only to the extent needed for that service
- With legally authorised public authorities, only where required by law
We do not sell your personal data to third parties for advertising.
How long do we keep it?
Under the Turkish Commercial Code and Tax Procedure Law, order, payment and invoice records are kept for 10 years. When you delete your account, these records are anonymised so they can no longer be linked to you: your identity is removed, the record stays. Other data is deleted when its processing purpose ends or when you request deletion.
Your rights and deleting your data
Under KVKK Article 11 you can access the data we hold about you and request its correction or deletion. You can start deletion from inside the app and download a copy of your data. For details: Account and data deletion.
If there is an open dispute, chargeback or unpaid payout, your deletion request is not rejected but put on hold until the blocker is lifted.
Changes
We may update this policy from time to time. For significant changes we update the date at the top of this page.