Gül Zaman — Privacy Policy
Effective date: September 18, 2026
Gül Zaman ("we", "us") is an internal management app for the staff of the Gül Zaman banquet hall, flower shop, café and atelier. It is not a public service: accounts are created only by the company's administrator for its employees, and there is no public sign-up. This policy explains what data the app handles and why.
Data we process
- Account data — your name, username, role and (optionally) work phone number, created by the administrator so you can sign in.
- Business records you view or enter — events and bookings, customer names and phone numbers, staff records, menus, services, stock, orders, payments and reports. This is the company's operational data; the app shows each employee only what their role allows.
- Photos — only images you choose to attach (for example a product, dish or inventory photo), taken with the camera or picked from your library.
- Device and notification data — the device name/model and a push-notification token, used to deliver work notifications to your device.
Device permissions
- Camera — scanning barcodes and QR codes, and taking photos of items when you choose to.
- Photo library — attaching a picture you select.
- Bluetooth — printing barcode labels on the warehouse label printer.
- Notifications — work alerts such as new requests or status changes.
Each permission is requested only when the related feature is used and can be turned off in iOS Settings.
How we use data
Data is used only to run the company's operations inside the app: showing records, recording actions, producing reports and sending work notifications. We do not sell data, do not use it for advertising, and do not track you across other apps or websites. The app contains no advertising or analytics SDKs.
Where data is stored and who receives it
All business data is stored on the company's own server. Push notifications are delivered through Google Firebase Cloud Messaging and Apple Push Notification service, which receive only the device token and the notification text. No other third parties receive the data.
Retention and deletion
Data is kept while it is needed for the company's business and accounting obligations. When an employee leaves, the administrator deactivates the account. Employees may ask the administrator to correct or delete their personal data, subject to legal record-keeping requirements.
Security
Access requires a personal login; each role sees only the sections it needs. Sign-in tokens are kept in the iOS Keychain.
Children
The app is intended for company employees only and is not directed to children.
Changes
We may update this policy; the effective date above shows the latest version.
Contact
Questions about this policy: emirdurdyev@gmail.com