Using Mastook requires a free account, so your tracking list and plan are saved and waiting for you on any new phone. This page explains the data processed for your account and while you use the app, and your rights under the Turkish Data Protection Law (KVKK).
What we process
- Account details: Your e-mail address, your name, an optional profile photo and an irreversible hash of your password (we never store the password itself).
- Sign in with Apple or Google: If you use them, the user ID and e-mail address the provider gives us, plus your profile photo with Google. With Apple you can choose to hide your e-mail.
- About you: The gender and age range asked in the "Tell us about you" step after sign-up (optional; you can skip this step). Used only to tailor the Popular section to you and never shared; you can choose "Prefer not to say" and change them any time in your profile.
- Device and session: The app creates a random device ID on each phone, used to send alerts to the right phone and to recognise your session. The session key is kept in your phone's secure storage (Keychain).
- Push token: If you allow notifications, the token created by Apple or Google is stored so we can send them.
- Products you track: The product links you add, the colours and sizes you choose, check frequency and notification preferences.
- Stock checks from your phone: While the app is open, the stock of the products you track is also requested directly from the store over your phone's connection, and the result (only the product's stock information) is sent to our server. This speeds up checks and contains no personal data. It doesn't happen while the app is closed.
- Notification history: The stock, "coming soon" and price alerts sent to you.
- Purchases and subscription status: When you buy Premium or Premium+, we receive the purchase transaction ID, the product, renewal and expiry dates and the subscription status from Apple or Google. Your card and payment details stay with Apple or Google and never reach us.
- Quick Buy and store sign-ins: For Quick Buy you sign in to your store account in the app's built-in browser, on the store's own page. Your password, card and address go to the store and never reach Mastook. The store's session cookies stay on your phone. Your phone only remembers which stores you signed in to and when; our server only keeps which products you turned Quick Buy on for and when (to order the alerts).
- Technical logs: Server logs (IP address, request time) kept briefly for security.
Why we process it
- To check the sizes you track at the stores and notify you when something changes,
- To apply check frequency and product limits according to your plan,
- To keep the service secure, find bugs and prevent abuse,
- To build the Popular section in the app and on the website. Only aggregated, anonymous statistics are shown there (for example "12 people tracking"). Which device tracks what is never shown.
Legal basis
Your data is processed under KVKK Art. 5/2 on the grounds of establishing and performing the service contract (c), complying with our legal obligations (ç), and our legitimate interest provided it does not harm your fundamental rights and freedoms (f). You can withdraw notification permission at any time in the app.
Who we share it with
- Sign-in providers: Sign in with Apple and Sign in with Google (only if you choose one of them).
- E-mail service: The e-mail provider we use to send password reset codes (only your e-mail address and the code).
- Notification services: Apple Push Notification Service, Firebase Cloud Messaging and Expo's push infrastructure (notification content and token).
- Hosting provider: The infrastructure provider our servers run on.
- Payments: Subscriptions are handled by the Apple App Store and Google Play, under their own privacy policies.
- Authorities: Only when required by law.
Some of these providers are located abroad, so data may be transferred abroad in line with KVKK Art. 9. We never sell your data or use it for advertising.
How long we keep it
Your account, tracking list and notification history are kept for as long as your account exists. In the app, Settings → Account settings → Delete account deletes your account: it is closed straight away, your sessions end and no alerts are sent; your account and all your records are erased for good after 14 days. Signing in and restoring the account during those 14 days cancels the deletion. If you can't use the app, ask for deletion by writing to help@mastook.com; see Delete Your Account for details. Purchase and billing records are kept by Apple and Google under their own obligations. Anonymous statistics cannot be linked to a person and may be kept indefinitely.
Your rights (KVKK Art. 11)
You have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing, to know who it is transferred to, to ask for incomplete or incorrect data to be corrected, deleted or destroyed, to object, and to claim compensation if you suffer damage.
Users in the European Union (GDPR)
If you are in the European Economic Area, under the General Data Protection Regulation (GDPR) you also have the right to access your data, to have it corrected or erased, to restrict processing, to object, to receive your data in a portable format, and to withdraw consent at any time where processing is based on consent. Your data is processed on the basis of performing our contract with you (Art. 6(1)(b)), legal obligations (Art. 6(1)(c)), legitimate interests (Art. 6(1)(f)) and, for notifications, your consent (Art. 6(1)(a)). You can also lodge a complaint with the data protection authority in your country.
Making a request
Send requests to contact@mastook.com. Including your account's e-mail address helps us find your records. Requests are answered free of charge within 30 days at the latest.
Turkish Data Protection Law (KVKK)
This policy also serves as the information notice required under KVKK. Data controller: Mastook (Ali Sözer) · Zafer Mah. 547.1. Sk. No:224, Salihli/Manisa, Türkiye · Tax office/no: Salihli Adil Oral / 7810676080
Contact: contact@mastook.com · Support: help@mastook.com
Children
Mastook is not directed at children under 13 and does not knowingly collect data from them.
Changes
We may update this policy. Important changes are announced in the app; the current version is always on this page.