Karekod İstanbul1. Who we are
Operator: Ahmet Kök. Karekod İstanbul is an independent iPhone app that stores QR codes on the device. Contact: me@ahmetkok.dev.
2. What the product does
The app is free. There is no account. It keeps QR codes on the device, redraws them, and can add a pass to Apple Wallet. Tips are optional.
3. Information we collect and do not collect
The app does not send photos, QR contents, location, contacts, or analytics to the developer. There are no accounts, passwords, or profiles.
Data that stays on the device: QR strings, a used flag, and related dates, in codes.json inside App Group group.com.ahmetkok.karekod.
The photo picker only reads a code from the chosen image. The image is not uploaded to the developer and is not kept as a gallery copy.
If you leave an optional tip, Apple processes the purchase. RevenueCat verifies the tip receipt for app functionality (purchase history). That is not analytics collected by the developer.
If you email support, we use your message and address to reply.
This website does not add cookies or analytics. Hosting (Vercel) may keep short-lived access logs (IP, browser, date) for security and operations.
4. How information is used
On-device codes exist only to run the app, the widget, and Wallet. Support email is used to answer you. We do not use data to train AI models.
5. Cookies
karekod.ahmetkok.dev does not set first-party cookies, does not use advertising cookies, and does not do cross-site tracking. Language lives in the path (/tr, /en).
6. Third parties
Vercel: site hosting. Privacy: https://vercel.com/legal/privacy-policy
Apple: App Store distribution and in-app purchase. Privacy: https://www.apple.com/legal/privacy/
RevenueCat: verifying optional tip receipts. Privacy: https://www.revenuecat.com/privacy
We do not sell personal information.
7. Retention
QR records stay on the device until you delete them or remove the app. The developer has no copy, so remote deletion is not available.
Support emails are kept for a reasonable time after the reply, then deleted.
Vercel access logs follow the provider default (typically on the order of tens of days).
8. Your rights
Under KVKK, GDPR, and similar laws you may have rights to access, correct, delete, restrict, object, and complain. For QR data on the device, you are in control (delete in the app or remove the app).
Because the developer does not keep a photo or QR archive, those items cannot be deleted from a server. Tip receipts live with Apple and RevenueCat. Exercise rights at me@ahmetkok.dev (aim: reply within 30 days).
We do not sell or share personal information for cross-context advertising.
9. International transfers
The site is hosted on Vercel. Traffic may transit the EU, the US, or other regions as part of ordinary internet routing. App QR payloads are not sent off the device.
10. Children
The service is not directed at children under 13. We do not knowingly collect children’s data. If you believe that happened, email me@ahmetkok.dev.
11. Security
The site uses HTTPS. The app has no accounts, so there are no passwords to leak. QR codes live in on-device storage. No system is perfectly secure.
12. Changes
Material changes are posted on this page with a new date. Please review the policy from time to time.
13. Contact
Ahmet Kök, me@ahmetkok.dev. Target response time: 30 days.
14. Regional notes
Legal bases, a local representative, and standard contractual clauses for Türkiye (KVKK) and Europe (GDPR) need lawyer review. For California (CCPA/CPRA): we do not sell personal information. These clauses await legal review.