BARKUS TERMS OF USE AND U.S. PRIVACY POLICY

Version: 2.0 | Last Updated and Effective: August 8, 2026

How this document works: Section A contains the Terms of Use and forms a contract when you accept the Terms or use the Services after acceptance. Section B is a privacy notice. Accepting the Terms or acknowledging this Privacy Policy is not consent to targeted advertising, a sale or sharing of personal information, processing of sensitive data, or any other activity for which applicable law requires a separate opt-in. Where consent is legally required, Barkus will request it separately and provide a way to withdraw it.

Privacy at a glance:

Barkus provides expiration-date, product, inventory, waste/revenue, supplier/order, workgroup, weekly task, report, announcement, and gamification tools.
Account and service data are stored on Barkus servers. Login state, settings, selected workgroup, and some locally scheduled reminders are also stored on your device.
Workgroup information is visible to authorized members. A masked name and aggregated contribution statistics may appear on team or global leaderboards, subject to the controls described below.
Google/Firebase, Apple, RevenueCat, and Google AdMob may process data to provide notifications, subscriptions, app-store services, advertising, and measurement.
You can delete your account in the app and can request access, correction, deletion, portability, or applicable advertising opt-outs by emailing t.gencosman@gmail.com.

A. TERMS OF USE

1. Parties, Services, and agreement

These Terms are between you, the individual or organization using Barkus ("User" or "you"), and Tolga Gencosman, the operator of the Barkus mobile application and related services ("Barkus," "we," "us," or "our"). Barkus is the name of the application and service, not a separate legal entity.

You enter into these Terms by affirmatively accepting them during registration or another presented acceptance flow. If you do not agree, do not create an account or use the Services. A privacy-policy acknowledgment does not itself authorize optional data uses that require separate consent.

2. Service description and current features

Barkus helps users record and monitor product expiration dates and receive reminders. Depending on your version, device, country, plan, and workgroup permissions, the Services may also include:

barcode and non-barcode product entry; short codes, quantity, notes, product photos, categories, stores, branches/locations, and personnel labels;
camera and on-device optical character recognition (OCR) for expiration dates;
stock tracking, beginning/end-of-day inventory counts, sales quantity, discrepancies, history, and reports;
waste records, including product, barcode, amount, unit, reason, date, waste value, notes, periodic revenue entries, and waste-to-revenue reports;
supplier contact information, supplier products/prices, purchase-order lists, status, quantities, units, and notes;
workgroups, member invitations, invitation-sender records, roles, and feature-level permissions;
weekly tasks, assignees, dates/times, priority, reminders, quiet hours, completion status, and completion notes;
achievements, goals, rescue actions, points, badges, team leaderboards, and a global leaderboard;
in-app announcements, subscription campaigns, and read status;
PDF/Excel and similar reports, CSV/file imports, downloads, printing, and user-initiated sharing;
local and push notifications, inactivity reminders, an ad-supported free tier, and premium subscriptions.

Operational disclaimer: Barkus is an assistive software tool. It is not a food- or product-safety inspection, official inventory or accounting system, financial or tax advice, employment-law scheduling system, medical device, healthcare service, or regulatory audit. You are responsible for physically checking products, verifying records and calculations, following safe storage and disposal practices, supervising personnel, and complying with laws applicable to your business and products.

3. Eligibility, accounts, and security

The Services are intended for adults. You must be at least 18 or the age of legal majority where you live, unless a parent or legal guardian lawfully manages and supervises your use.
You must provide accurate, current, and lawful account information and keep it updated.
You are responsible for your device, password, session, email account, and activity under your account. Notify us promptly if you suspect unauthorized access.
You may not sell, rent, transfer, or provide unauthorized access to your account.
If you use Barkus for an organization, you represent that you are authorized to accept these Terms for that organization.

4. Acceptable use

You may use Barkus only for lawful purposes and in accordance with these Terms. You may not:

upload personal information, employee/supplier data, trade secrets, images, or other content without authority and any required notice or consent;
use the Services unlawfully, deceptively, to harass or harm others, or to infringe privacy, publicity, intellectual-property, or other rights;
introduce malware or use scraping, bots, automated requests, or other activity that disrupts or circumvents security, access controls, quotas, or performance;
access another account or workgroup without authorization;
reverse engineer, copy, or circumvent the Services except to the limited extent applicable law expressly permits;
present Barkus records or reports as official audits, safety certifications, financial statements, employment records, or other regulated documents when they are not.

5. User content and business data

You or the relevant owner retain rights in content you enter. You grant Barkus a limited, non-exclusive, worldwide, royalty-free license to host, store, back up, synchronize, process, display to authorized users, generate reports from, secure, troubleshoot, and otherwise use the content only as reasonably necessary to operate and support the Services. This license ends when the content is deleted, subject to legal retention, backups, and workgroup-continuity exceptions.

If you enter information about employees, supplier contacts, or other individuals for your business, you or your organization may be the business/controller and Barkus may act as your service provider/processor for that content. You are responsible for giving required notices, establishing a lawful basis or consent where required, restricting access, honoring the individuals' rights, and avoiding unnecessary sensitive information.

6. Workgroups, tasks, and sharing

Workgroup administrators can invite members and assign view, edit, delete, and feature-level permissions. Administrators are responsible for keeping permissions appropriate and current.
Product, count, waste/revenue, task, report, invitation, and related activity in a workgroup may be visible to authorized members. Task creator, assignee, status, and completion notes may be shared within the applicable workflow.
If you leave a group or delete your account, products you created in another owner's workgroup may be reassigned to the group owner. Other group records may remain for continuity, accountability, and the rights of other members.
If you choose to share a report, order text, or file through WhatsApp, Telegram, email, printing, or your device's sharing menu, the selected provider and recipient process that content under their own terms. You are responsible for checking the content and recipient before sharing.

7. Gamification and leaderboards

Barkus may generate points, achievements, goals, and aggregated statistics from expiration-date entries, inventory-count activity, product rescue/waste outcomes, active days, and similar in-app actions. These features are motivational only. They are not wages, money, property, credits, employment evaluations, or promises of prizes.

Team leaderboards may show a masked username and statistics such as points, expiration-date contributions, rescued items, and active days to workgroup members. Global leaderboard participation may be technically enabled by default; when enabled, a masked username and aggregated monthly contribution statistics may be visible to other Barkus users. You can turn off global participation in the gamification/privacy settings. Turning it off does not necessarily remove team-level visibility or private summaries shown only to you.

Scoring rules, leagues, periods, goals, badges, and rankings may be changed, recalculated, reset, or corrected for errors or misuse. Barkus does not use gamification to make decisions that produce legal or similarly significant effects concerning credit, employment, housing, insurance, education, healthcare, or access to essential goods or services.

8. Camera, files, notifications, and device functions

Camera access is used for barcode and expiration-date scanning. In the current OCR flow, camera frames are analyzed on the device; the detected date is sent to Barkus only if you save it as product data. A product photo is uploaded only when you choose to add it.
Media/file permissions may be used for selecting photos, importing files, and downloading or sharing reports. Notification permission supports expiration-date, task, workgroup, subscription, and other alerts.
You may deny or revoke a permission through device settings, but the related feature may not function.
Barkus does not request precise GPS permission. A "store," "branch," or "location" in the app is a label entered by the User, not the device's precise geolocation.

9. Free tier, advertising, and premium subscriptions

The free tier may include advertising and limits on products, photos, workgroup members, reports, OCR, or other features.
Before purchase, the applicable store screen identifies the subscription period, price, currency, trial or introductory terms if any, renewal frequency, and premium features. Those transaction-specific disclosures are part of your purchase.
Google Play or Apple App Store processes payment information and charges. RevenueCat and Barkus verify entitlement. Barkus does not receive or store your full payment-card number or card security code.
Barkus may send RevenueCat your Barkus user ID, email, username, and selected subscription type. Store transaction IDs, product, environment, purchase/expiration dates, renewal status, and webhook event data may be retained by Barkus for entitlement and fraud prevention.
A subscription renews automatically unless you cancel before the renewal deadline shown by the store. The store charges the payment method associated with your store account.
You can cancel online through your Google Play or App Store subscription settings. Barkus will provide or link to those store-management paths in the app. Deleting the app or your Barkus account does not cancel a store subscription.
When federal or state law requires a renewal, trial-ending, annual, or price-change reminder, the responsible seller/store must provide it in the legally required form and timeframe.
Cancellation normally stops future renewals and access may continue through the paid term. Refund rights are governed by applicable law and the store's lawful policies.

The subscription flow is intended to provide clear material terms before billing, obtain express informed consent, and provide a simple online cancellation mechanism as required by applicable negative-option and automatic-renewal laws. A store rule does not waive non-waivable consumer rights.

10. Service and marketing communications

We may send operational messages about account security, expiration dates, tasks, workgroup invitations, subscriptions, and material service changes. Promotional email or push communications are sent subject to applicable consent and opt-out requirements. You may disable push notifications in the app or device settings and may opt out of promotional email through the method provided in the message or by contacting us. Transactional or security messages may continue where necessary.

11. Service changes, suspension, and termination

We may modify, limit, or discontinue features for security, legal compliance, product development, third-party changes, or technical/business reasons. We will provide notice and choices required by law for material adverse changes.

We may proportionately suspend or terminate access for a Terms violation, unlawful use, unauthorized access, security risk, payment issue, fraud, abuse, or harm to Barkus or others. Where required, we will provide reasons and an opportunity to challenge the decision.

12. Account deletion

You can delete your Barkus account in the app after password verification. Personal-workspace products and photos are deleted from active systems, while products added to another owner's workgroup may be reassigned to that owner. Related data may remain for subscriptions, legal compliance, security, disputes, backups, and workgroup continuity as described in the Privacy Policy. Account deletion does not cancel an Apple or Google subscription.

13. Intellectual property and infringement reports

Barkus software, interfaces, design, database structure, logos, brand elements, and documentation are owned by Barkus or its licensors. You receive a limited, revocable, non-exclusive, non-transferable license for lawful personal or internal business use. Open-source components remain subject to their licenses.

To report content that you believe infringes copyright or other rights, email t.gencosman@gmail.com with identification of the work, the material and its location, your contact details, a good-faith statement, and any other information required by applicable law. This contact statement does not represent that Barkus has completed a U.S. Copyright Office DMCA designated-agent registration.

14. Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE." BARKUS DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, COMPLETELY SECURE, OR COMPATIBLE WITH EVERY DEVICE.

Some jurisdictions do not allow certain warranty exclusions. In those jurisdictions, the exclusions apply only to the extent permitted by law, and non-waivable consumer warranties remain in effect.

15. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, BARKUS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, LOST PROFITS, LOST BUSINESS, REPUTATIONAL HARM, PRODUCT SPOILAGE, INVENTORY LOSS, OR MISSED/DELAYED NOTIFICATIONS ARISING FROM THE SERVICES.

These limitations do not exclude liability that cannot lawfully be limited, including liability for intentional misconduct, gross negligence where non-waivable, violation of privacy/data-security duties, or mandatory state consumer rights. Some states do not permit limitations of certain damages, so parts of this section may not apply to you.

16. Third-party services

Google Play, Apple App Store, Firebase Cloud Messaging, RevenueCat, Google AdMob, operating-system services, email, WhatsApp, Telegram, and user-selected file/printing/sharing applications operate under their own terms and privacy policies. Barkus is responsible for its own conduct and vendor management but does not control independent third-party services.

17. Governing rules, disputes, and changes

These Terms are governed by the laws that lawfully apply to the transaction and the parties. Nothing in these Terms deprives a U.S. consumer of non-waivable federal or state consumer protections or access to a court or government agency with jurisdiction. These Terms do not impose mandatory arbitration or a class-action waiver.

We may update these Terms by posting a new version and date. We will provide legally required advance notice and seek renewed acceptance when a material change requires it. Continued use alone will not be treated as consent where affirmative consent is required by law.

B. U.S. PRIVACY POLICY

1. Scope and privacy roles

This Privacy Policy explains how Barkus collects, uses, discloses, retains, and protects personal information in the United States. "Personal information" or "personal data" means information linked or reasonably linkable to an identified or identifiable person, subject to exclusions under applicable law.

Barkus is the business/controller for account administration, service operation, security, subscriptions, notifications, advertising choices, and its own support and improvement purposes. For employee, supplier-contact, or other business records entered by an organizational customer, that customer may be the business/controller and Barkus may be its service provider/processor.

2. Business identity and contact

Business / Controller: Tolga Gencosman, operator of Barkus

Address: Bahcelievler Mah., Sehit Mustafa Tuncbilek Sk. No:4-1, Bahar Apt., Apt. 4, 35600 Karsiyaka/Izmir, Türkiye

Email: t.gencosman@gmail.com

3. Sources of personal information

Directly from you: registration, profile, products, photos, files, inventory, waste/revenue, supplier/order, task, feedback, support, and privacy requests.
Automatically from the app, device, and servers: local settings, session data, IP address, tokens, logs, notifications, feature activity, subscription checks, and advertising interactions.
From other users or organizations: workgroup invitations, roles, task assignments, group activity, and personnel/supplier-contact entries.
From providers: Apple, Google Play, RevenueCat, Firebase, AdMob, hosting, security, email, and other providers that return transaction, delivery, advertising, or technical information.

4. Categories collected, purposes, and retention criteria

Category and examples	Primary purposes	Retention criteria
Identifiers and account data: username, email, user ID, IP address, password/authentication data, tokens, membership date/status, profile, last activity	Create and authenticate the account; operate, secure, support, and delete it; communicate with you	Account life plus the limited period needed for deletion, security, legal claims, and backup expiration
Technical and network activity: FCM token, language, app/OS/device information, session and security logs, notification delivery/error and read data, feature activity	API/session security, notifications, localization, diagnostics, fraud/abuse prevention, and service reliability	As reasonably necessary for active service, troubleshooting, security, and legal requirements; then deleted or deidentified
Product and expiration data: barcode, short code, product name/quantity, expiration and warning dates, notes, photo/thumbnail, category, store, branch, personnel label, creator and date	Product management, search/filtering, reminders, workgroup use, and reports	Until the record/account is deleted; workgroup content may remain with the group owner; backups expire in the ordinary cycle
Inventory data: product code/name, first/final count, sales count, discrepancy, status, notes, dates, and actor	Daily counts, inventory history, discrepancy calculations, and reports	Until deleted by the authorized user or the associated account/workgroup ends, subject to legal and backup needs
Waste, revenue, and business records: date/period, product/barcode, amount/unit, reason and value of waste, revenue value, ratio, store/branch/personnel selection, notes, user/group	Waste and revenue tracking, filters, summaries, and reports	Until deleted or the relevant account/workgroup ends; longer only for a customer's lawful recordkeeping or legal needs
Supplier and order data: company/contact name, phone, email, address, supplier products, barcode, price, list name, quantity, unit, note, and status	Supplier directory, product/price and order management, report and text sharing	Until deleted or the relevant account/workgroup ends, subject to the organizational customer's retention instructions
Workgroup data: group name, owner, inviter/invitee, membership status, role, special permissions, dates, and group activity	Invitations, acceptance/rejection feedback, authorization, shared workflows, continuity, and security	While the group/account and operational need exist; selected group records remain for continuity or legal claims
Weekly task data: creator/assignee, group, title, description, date/time, priority, reminders, status, completion note/time, read/delivery/error record, quiet hours, and language	Create, assign, remind, complete, summarize, and report workgroup tasks	For the task/workgroup lifecycle and any limited audit or dispute period; soft-deleted records are later purged or deidentified
Gamification data and inferences: action/outcome, points, amount, active days, rescue and contribution counts, masked display name, workgroup, ranking, and participation preference	Goals, achievements, personal summaries, team/global rankings, integrity, and anti-abuse	For the account, ranking period, correction/anti-abuse need, and then deletion or aggregation/deidentification
Announcements, support, and communications: announcement/read time, suggestion, complaint, support text, email, date, and related IP	Unread counts, service/campaign announcements, customer support, complaints, and records of requests	Until the communication is resolved and for the reasonable legal/operational record period
Commercial and subscription data: premium/trial status, Barkus/RevenueCat IDs, email, username, plan attribute, store, product/transaction IDs, environment, purchase/expiration, auto-renew, status, renewal count, and webhook payload	Purchase verification, entitlement, restoration, renewal/cancellation synchronization, refunds, fraud and duplicate-event prevention	For the subscription and applicable accounting, fraud, refund, dispute, and legal limitation periods; account links may be removed on deletion
Advertising and approximate location data: advertising ID, IP, device/app signals, coarse region, consent signal, ad impressions/clicks, diagnostics, and related inferences accessible to the ad SDK	Contextual or personalized ad delivery, frequency, measurement, attribution, fraud prevention, and free-tier support	Under the ad provider's disclosed retention and Barkus's configuration/contract; Barkus retains only what is reasonably necessary for measurement, disputes, and fraud
On-device data: login/token, user ID/name/email, language/theme, selected group, filters/display settings, notification choices, warning defaults, tutorial state, and counters	Remember session and preferences, authorize requests, and schedule local reminders	Until app data is cleared, logout/account deletion removes the relevant value, or the setting is replaced

We do not intentionally request government identifiers, precise geolocation, biometric or genetic data, racial or ethnic origin, religious beliefs, sexual orientation, citizenship/immigration status, health information, or other legally sensitive information. Account login credentials are treated as sensitive personal information where state law classifies them that way and are used only to provide and secure the account. Do not place sensitive information in photos, notes, tasks, supplier/personnel fields, or free-text areas.

Barkus is not a HIPAA-covered healthcare service or business associate and is not designed to store protected health information. Do not use Barkus as a medical record or to transmit regulated health information.

5. How we use personal information

We use the categories above to:

create, authenticate, administer, secure, and delete accounts;
provide product/SKT, inventory, waste/revenue, supplier/order, workgroup, task, announcement, report, notification, gamification, and subscription features;
process on-device scans and store photos or files you choose to upload;
generate reports, calculations, personal summaries, and leaderboards;
deliver service messages and legally permitted marketing;
provide contextual advertising and, where allowed after required choice, personalized advertising and measurement;
support users, resolve complaints, debug errors, improve accessibility and reliability, and develop features compatible with users' expectations;
detect fraud, abuse, unauthorized access, and security incidents; enforce the Terms; and protect rights and safety;
comply with law, legal process, recordkeeping duties, and disputes.

We will not use personal information for a materially different, unrelated purpose without providing the notice and choice required by applicable law.

6. Disclosures and recipients

We may disclose information to:

Authorized workgroup members and administrators for shared products, inventory, waste/revenue, tasks, reports, invitations, permissions, and continuity;
Other Barkus users for a global leaderboard displaying masked names and aggregated contribution statistics when participation is enabled;
Hosting, database, backup, network, security, support, email, and technical providers that operate the Services under appropriate restrictions;
Google/Firebase for push tokens, language, message delivery/content and technical data, and Google AdMob for advertising and measurement data;
Apple, Google Play, and RevenueCat for purchases, subscriber matching, entitlement, restoration, and webhook verification;
WhatsApp, Telegram, email, printing, file-sharing applications, and recipients you select when you initiate a share;
Professional advisors, courts, regulators, law enforcement, and public authorities when reasonably necessary and legally permitted or required;
Potential transaction parties in a financing, merger, reorganization, or sale, subject to confidentiality, due diligence limits, and legally required notice/choice.

7. Advertising, sale, sharing, and targeted advertising

We do not exchange personal information for money. The free tier uses Google AdMob. AdMob's receipt of advertising identifiers, IP address, device/app activity, coarse location, or inferences for cross-context behavioral or targeted advertising may be considered a "sale," "sharing," or "targeted advertising" under California and other state privacy laws, even when no money changes hands.

During the preceding 12 months, when ads were served to free-tier users, Barkus disclosed or permitted Google AdMob to collect identifiers, internet/electronic-network activity, coarse geolocation, and related advertising inferences for cross-context behavioral advertising or ad measurement. We do not knowingly sell or share personal information of anyone under 16, and we do not sell or share account credentials, user-uploaded product photos, supplier/personnel content, waste/revenue records, or task notes for targeted advertising.

Do Not Sell or Share My Personal Information / Opt Out of Targeted Advertising

Where applicable law grants the right, you may opt out without creating an account or providing unnecessary information:

Do Not Sell or Share My Personal Information Opt Out of Targeted Advertising

You can also reset or restrict your mobile advertising ID and ad personalization in Android or iOS settings. Barkus will process legally recognized universal opt-out preference signals, including Global Privacy Control where the signal applies to the interaction and applicable law requires recognition. An opt-out applies prospectively and does not prevent contextual ads, security processing, or disclosures to processors that are not a sale/share under applicable law.

8. State privacy rights

Depending on your residence, Barkus's legal status and processing thresholds, and applicable exemptions, U.S. state law may give you the right to:

confirm whether we process your personal data and access categories or specific pieces;
correct inaccuracies;
delete data, subject to legal exceptions;
receive a portable copy of data you provided or otherwise covered by law;
opt out of sale, sharing, targeted advertising, or profiling in furtherance of decisions producing legal or similarly significant effects;
limit certain uses/disclosures of sensitive personal information or withdraw consent to sensitive-data processing;
obtain information about categories of recipients and, where required, a list of specific third parties to which we disclosed your personal data;
use an authorized agent and not be discriminated or retaliated against for exercising a right;
appeal a denial where your state provides an appeal right.

How to submit a request

Email t.gencosman@gmail.com from the email associated with your account and state the right you want to exercise and your state of residence. Use the buttons in Section 7 for sale/share or targeted-advertising opt-outs. For an appeal, use the subject line Privacy Request Appeal and explain why you believe the decision was incorrect.

We verify access, correction, deletion, and portability requests at a level appropriate to the data and risk. We do not require identity verification for an opt-out unless needed to associate the request with the correct account/device. An authorized agent may be required to provide signed permission or other legally permitted proof, and we may ask you to confirm the authorization.

We respond within the time required by applicable law—commonly 45 days for verified requests, subject to a permitted extension. Applicable California sale/share opt-outs are implemented as soon as feasibly possible and no later than the legally prescribed period. If we deny a request, we will give the reason and appeal or complaint instructions required by your state.

9. California notice at collection and annual disclosure

This section applies to California residents to the extent Barkus is a "business" covered by the California Consumer Privacy Act, as amended (CCPA). It also provides transparency voluntarily where the statutory coverage thresholds are not met.

CCPA category collected in the preceding 12 months	Examples	Disclosed for a business purpose	Sold/shared for cross-context advertising
Identifiers	Name/username, email, account and device/advertising IDs, IP address, tokens	Hosting/security, Firebase, Apple/Google, RevenueCat, workgroups as applicable	Advertising ID/IP may be shared with AdMob; other account identifiers are not intentionally shared for advertising
California customer-record information	Name, email, supplier-contact address/phone entered by a customer	Infrastructure, support, workgroups, user-selected recipients	No, except an identifier if independently collected by the ad SDK
Commercial information	Subscription product, store, transaction and entitlement status; user-entered product/order records	Apple/Google, RevenueCat, infrastructure, workgroups	Not intentionally
Internet or electronic-network activity	App interactions, session/security logs, notification and ad interactions	Infrastructure/security, Firebase, AdMob	Ad interactions and app/device signals may be shared with AdMob
Geolocation	Coarse location inferred from IP or device/ad signals; no requested precise GPS	Infrastructure/security and AdMob	Coarse location may be shared with AdMob
Professional or employment-related information	Personnel labels, workgroup role, assigned/completed tasks entered by business users	Authorized workgroup members and infrastructure processors	No
Sensory or visual information	Product photos voluntarily uploaded by a user; transient camera frames processed on the device	Infrastructure processors and authorized workgroup members for uploaded product photos	No
Inferences	Gamification points/rank; advertising interests or measurement inferences created by an ad provider	Workgroup/global leaderboard users as described; AdMob	Advertising inferences may be shared with AdMob
Sensitive personal information	Account login credentials; sensitive data is not otherwise intentionally requested	Security/infrastructure providers only as necessary for account service	No

Purposes and retention criteria are stated in Sections 4 and 5; sources are stated in Section 3; recipient categories are stated in Section 6. We do not use or disclose sensitive personal information beyond purposes permitted without a CCPA right-to-limit notice, such as providing and securing the requested service. If that practice changes, we will provide the required notice and "Limit the Use of My Sensitive Personal Information" mechanism before the new use.

Barkus does not currently offer a CCPA financial-incentive or price/service-difference program in exchange for personal information. Gamification points and badges have no monetary value and are not consideration for selling or sharing data.

10. Automated processing and profiling

Barkus automatically calculates inventory differences, waste/revenue ratios, reminders, subscription entitlement, gamification points, goals, and ranks. These processes support features requested by users and do not make decisions with legal or similarly significant effects about credit, employment, housing, education, insurance, healthcare, or essential services.

To the extent a future use of automated decisionmaking technology triggers a notice, access, or opt-out right under California or another state law, Barkus will complete required risk assessments, provide a pre-use notice, and offer the legally required access or opt-out before that use begins.

11. Camera, local storage, and permissions

Barcode and expiration-date camera frames are processed on the device in the current scanning flow. Raw frames are not uploaded to Barkus. A detected barcode/date becomes server-side product data only when you save it. Product photos are uploaded when you choose to add them.

Local app storage remembers login/token, account identifiers, language/theme, selected group, filters, display and notification preferences, warning defaults, tutorials, and counters. Device permissions can be changed in operating-system settings. Clearing app data may remove local settings but does not by itself delete server data or cancel a subscription.

12. Notifications and communications choices

Firebase Cloud Messaging may process a push token, language, message content/metadata, and delivery status. Weekly-task settings may include assignment, reminder, completion, delay, daily-summary, and quiet-hour choices. Some expiration-date and inactivity reminders are scheduled locally on the device.

You may disable general push/local notifications in Barkus or device settings and may change weekly-task preferences in the feature. Disabling notifications may prevent important reminders. Marketing messages will include or honor the opt-out method required by applicable law.

13. Retention, deletion, and deidentification

We retain each category only as reasonably necessary for the purpose stated in Section 4, the account/content lifecycle, workgroup continuity, subscription and transaction integrity, security, legal obligations, and claims. We review operational need and delete, aggregate, or deidentify information when the purpose ends.

Account deletion removes personal-workspace content from active systems, subject to workgroup transfer, subscriptions, legal/security records, and backup expiration.
Report copies downloaded to your device or shared with another service are not deleted when you delete the Barkus account.
Subscription/webhook records may remain with the direct account link removed when necessary for accounting, fraud prevention, refunds, or disputes.
Deleted information may remain inaccessible in backups until overwritten or securely removed in the ordinary backup cycle; a restoration process should reapply deletion records.
Deidentified data may be retained longer. Barkus will maintain deidentified data without attempting to reidentify it except where permitted to test whether deidentification is effective.

14. Security and incident notice

We use safeguards designed to be reasonable for the nature and risk of the information, including authentication and authorization checks, access restrictions, server/network protection, backups, logging, vendor management, and incident response. No system can be guaranteed completely secure. You should use a strong, unique password, protect your email/store account and device, and install security updates.

If a security incident affects personal information, we will investigate, mitigate, document, and notify affected individuals, regulators, consumer-reporting agencies, or others in the form and timeframe required by applicable federal and state breach-notification laws.

15. Children's and teens' privacy

Barkus is not directed to children under 13 and does not knowingly collect personal information from a child under 13. If we obtain actual knowledge that a child under 13 provided personal information without verifiable parental consent, we will disable the account and delete the information as required by the Children's Online Privacy Protection Act (COPPA), unless retention is legally required.

We do not knowingly sell or share personal information of users under 16. If Barkus ever intentionally offers a child-directed experience, it will provide a separate child/parent notice, data-minimization and retention practices, verifiable parental consent, parental access/deletion controls, and separate consent for third-party advertising disclosures as required by COPPA.

A parent or guardian who believes a child submitted information should contact us with enough detail to locate the account. We may verify the requester's identity and relationship to the child.

16. International processing

Barkus is operated from Türkiye and uses providers that may process information in the United States and other countries. Privacy and government-access laws may differ from those where you live. We use contractual, organizational, and technical measures appropriate to the provider and data and comply with transfer restrictions that apply to the originating jurisdiction.

17. Third-party services and links

Apple, Google Play, Firebase, RevenueCat, Google AdMob, WhatsApp, Telegram, email, and sharing/printing applications may independently collect and process information under their own notices. Review their privacy settings and policies. Barkus remains responsible for selecting and managing processors as required by law, but it does not control an independent provider's separate services.

18. Do Not Track, universal opt-out signals, and device controls

Traditional browser "Do Not Track" signals do not consistently apply to mobile apps and Barkus does not respond to them as a separate standard. Where legally required, we recognize qualifying universal opt-out mechanisms such as Global Privacy Control for the interaction in which the signal is received. Mobile advertising choices may also be communicated through operating-system privacy settings, advertising-ID controls, and legally required consent platforms.

19. California "Shine the Light"

Barkus does not disclose personal information to third parties for those third parties' own direct-marketing purposes as contemplated by California Civil Code section 1798.83. California residents may contact us for information about this practice.

20. Changes to this Privacy Policy

We will post a new version and date when this Policy changes. Before a materially different use or disclosure begins, we will provide the notice, consent, opt-out, or other choice required by applicable law. An updated privacy notice does not by itself create consent.

21. Contact and complaints

For privacy rights, appeals, advertising choices, account deletion, subscriptions, security reports, or questions:

Business / Controller: Tolga Gencosman — Barkus

Address: Bahcelievler Mah., Sehit Mustafa Tuncbilek Sk. No:4-1, Bahar Apt., Apt. 4, 35600 Karsiyaka/Izmir, Türkiye

Email: t.gencosman@gmail.com

If we cannot resolve your privacy complaint, you may contact the attorney general or privacy regulator in your state, the Federal Trade Commission, or another authority with jurisdiction. We will provide state-specific appeal or regulator information when applicable to a denied request.