Skip to content
Besin App LogoBesin App
TR

PRIVACY POLICY

Privacy Policy

Last updated: October 18, 2026

Nomadsoft Limited (UK) | besin.app | iletisim@besin.app

1. Introduction

Nomadsoft Limited, the developer and publisher of Besin App (the “Company,” “we,” “us,” or “our”), respects your privacy. Nomadsoft Limited is incorporated in the United Kingdom and acts as the data controller under this Privacy Policy.

This Policy explains what information we collect, how we use it, and how we protect it when you use Besin App (the “App”) or besin.app. Nomadsoft Limited is subject to the UK GDPR. Because we also serve users in Türkiye, we take account of Türkiye's Personal Data Protection Law No. 6698 (KVKK). Sending a Turkish user's data to Nomadsoft Limited technically constitutes an international transfer from Türkiye to the UK.

2. Information We Collect

We may collect the following information when you use the App. We do not store passwords; authentication uses a one-time code sent by email.

  • Account information: your name and email address when you register.
  • Search and scan history: product searches and barcode scans performed in the App.
  • User-submitted content: product photos you voluntarily take or select for photo product search or a product suggestion. Photos may be analyzed through the Google Gemini API to identify the product and its packaging information. Product-suggestion images may also be stored, processed, and delivered through Cloudinary and Cloudflare and displayed with an approved product in the Besin application and on besin.app.
  • Camera access: used only for barcode scanning, photo product matching, and, when you choose, photographing a missing product. Barcode recognition happens on your device and does not send an image to our servers.
  • Photo-library access: used only to submit a product photo you select for product matching or a product suggestion. No camera or gallery image is sent without your explicit action. Do not include faces, identity documents, addresses, contact details, or other personal data unrelated to the product.
  • Product ratings and reviews: ratings you give, tags you pick, and reviews you write, plus reports about reviews. Written reviews are shown publicly with your initials (for example "F... T...") after a check; ratings and tags alone are shown without your name. Submitted ratings and reviews are also kept in usage logs to improve the service and prevent abuse, with links, email addresses, phone numbers, and social media handles masked.
  • Device and notification data: device make and model, operating-system version, device identifiers, IP address, and push tokens used for security, diagnostics, and notifications you permit.
  • Ad-measurement data (Meta): only if you separately opt in to ad measurement (off by default), the Meta (Facebook) app SDK sends app events (first open/install, app opens, and registration completion), device information (device model, operating-system version, language, and time zone), IP address, an anonymous app ID created by Meta, and, on Android, the advertising ID (Google Advertising ID) to Meta so we can measure how well our ads perform. Your name, email address, search history, and submitted photos are not shared with Meta. The iOS advertising identifier (IDFA) is not collected.

3. How We Use Information

  • Create and manage your account.
  • Provide personalized content.
  • Analyze product photos through the Google Gemini API to match a product and read information on its packaging.
  • Review product suggestions, add or update missing products, and display approved product images in the Besin application and on besin.app.
  • Show product ratings and reviews and check reviews against the content rules.
  • Detect and resolve technical problems and prevent unauthorized access.
  • Measure how many installs and registrations our ads on Meta bring.
  • Send push notifications where permitted.
  • Meet legal obligations and respond to valid authority requests.

4. Sharing Information

We never sell or rent personal data for marketing. We may share data with an official authority where required by law or in response to a valid, properly issued request, in accordance with applicable legislation. Limited data shared with Meta for ad measurement is described in Section 5. Your written product reviews may be shown publicly with your initials in the Besin application and on besin.app.

5. Third-Party Services and International Transfers

Supabase provides authentication, database storage, and infrastructure. The database servers are in Frankfurt, Germany; Supabase is a US-based company. This is a necessary infrastructure transfer for performance of the service and our legitimate interests. Its privacy policy is available at supabase.com/privacy.

Cloudinary stores product photos submitted by users on servers outside Türkiye, including in the United States. Its privacy policy is available at cloudinary.com/privacy.

Cloudflare may store, process, and deliver user-submitted and catalog product images through its global infrastructure. Its privacy policy is available at cloudflare.com/privacypolicy.

Google Gemini API analyzes images submitted for photo product search and product suggestions to identify the product and information on its packaging. For AI product summaries, only the product's catalog information is sent; your account details are not shared. Reviews you write are also sent to Google for an automated check against the content rules (politics, insults, personal data, etc.), without your account details. Google may process and review the content it receives under its own terms and privacy policy to provide, secure, and improve its services. Current terms are available at ai.google.dev/gemini-api/terms.

GitHub runs the automated review-check job on its infrastructure in the United States. The job processes the review texts to be checked and writes the result to our database; your account details are not sent to it.

Expo's notification service and Apple (APNs) and Google (FCM) notification infrastructure process your push token, if you allow notifications, to deliver notifications to your device. These services may use servers outside Türkiye, including in the United States.

Meta Platforms provides the app SDK we use to measure the performance of our ads. The SDK runs only if you turn on the optional ad-measurement consent, which is separate from the agreements and off by default, and sends app events (first open/install, app opens, and registration completion), device information (device model, operating-system version, language, and time zone), IP address, an anonymous app ID created by Meta, and, on Android, the advertising ID (Google Advertising ID) to Meta, which processes it on servers outside Türkiye, including in the United States, and may use it under its own policies for ad measurement and ad improvement. Your name, email address, search history, and submitted photos are not shared with Meta. The iOS advertising identifier (IDFA) is not collected. Its privacy policy is available at facebook.com/privacy/policy.

All App data for users in Türkiye is transferred to Nomadsoft Limited in the United Kingdom in its capacity as data controller. Product photos may be transferred through Google, Cloudinary, and Cloudflare services only on the basis of explicit consent under KVKK Article 9. Do not use a photo feature if you do not consent to that transfer. Ad-measurement data is transferred to Meta only on the basis of explicit consent under KVKK Article 9, given separately from the agreements through an optional switch that is off by default. You may withdraw consent at any time under Ad measurement in the Profile screen of the App or by emailing iletisim@besin.app, and on Android you can reset or delete your advertising ID in device settings.

6. Retention and Security

  • Account data (email and name) is retained while your account is active and permanently deleted within 30 days after a deletion request.
  • Search history is deleted within 30 days after an account-deletion request.
  • Device and IP information is deleted within 30 days after account deletion once processed for security.
  • Security and abuse-prevention records (IP address, user ID, usage counters) are kept to limit the rate of product-data reads and to detect abuse such as bulk data scraping. These records are kept only for the short period needed for that purpose and are then deleted automatically. Deleting your account does not change when these records are deleted.
  • Product photos submitted to improve the database may remain as anonymous product data without being linked to your account. Ask iletisim@besin.app to remove a photo from the database as well.
  • Images submitted for photo product search are not retained permanently by Besin after matching. Retention of content sent to Google is governed by Google's own policies.
  • Product ratings and reviews are kept until you delete them. After account deletion, your ratings are deleted, review texts are removed from usage logs, and your written reviews and tags remain anonymously without a link to your account. Ask iletisim@besin.app to remove them.
  • Retention of ad-measurement data sent to Meta is governed by Meta's own policies.
  • Data required for legal obligations is retained for the periods prescribed by law.
  • Security measures include SSL/TLS transmission, encrypted database storage through Supabase, and regular security updates.

7. Legal Bases for Processing

  • Performance of a contract: account creation, authentication, delivery of App services, and receiving and showing the product ratings and reviews you submit.
  • Legitimate interests: error detection, security, product-quality improvements, and checking reviews against the content rules before they are published, provided your fundamental rights are not harmed.
  • Explicit consent: AI analysis of product photos through the Google Gemini API, international transfer through Google, Cloudinary, and Cloudflare services, consent-based marketing notifications, and, only if you opt in separately, transfer of app events and device information to Meta for ad measurement.
  • Legal obligation: properly issued requests from competent authorities.

8. Your Rights

Under applicable law, including KVKK where relevant, you may exercise the following rights by emailing iletisim@besin.app. We will respond within 30 days.

  • Learn whether your personal data is processed and request information about that processing.
  • Learn the purpose of processing and whether the data is used consistently with that purpose.
  • Learn which third parties receive your data in Türkiye or abroad.
  • Request correction of incomplete or inaccurate data.
  • Request deletion or destruction where the legal conditions are met, and notification of those actions to recipients.
  • Object to an adverse outcome produced solely through automated analysis.
  • Seek compensation for loss caused by unlawful processing.
  • Complain to Türkiye's Personal Data Protection Board at kvkk.gov.tr if your request is rejected, answered inadequately, or not answered on time.

9. Account Deletion

You may delete your account at any time from Profile in the App or request deletion at iletisim@besin.app.

  • Your personal information, including name, email, and search history, is permanently removed.
  • Product photos may remain as anonymous product data; contact us if you also want those photos removed.
  • Your ratings are deleted. Your written reviews and tags remain anonymously without a link to your account; delete them on the product page in the App before deleting your account, or ask us to remove them.
  • Account deletion cannot be undone.

10. Children's Privacy

The App is intended for a general audience and is open to users of all ages, but children under 13 require explicit permission from a parent or guardian. If we learn that a child under 13 provided personal information without consent, we will delete it promptly. Parents or guardians may contact iletisim@besin.app.

11. General Information

Product scores and ingredient information are for general information only and do not constitute medical, dietary, or nutrition advice. See the Terms of Use for details.

12. Changes to This Policy

We may update this Privacy Policy. Material changes will be announced by in-app notification or email. The current version is always available at besin.app.

13. Contact

The data controller is Nomadsoft Limited, incorporated in the United Kingdom. Besin App and besin.app are operated by the Company. Contact: iletisim@besin.app. Corporate website: nomadsoft.com.tr.

← Back to Home