Workmana Privacy Policy
Effective date: July 24, 2026 App: Workmana (com.workmana.workmana) Data controller: WORKMANA BILISIM HIZMETLERI SANAYI VE DIS TICARET ANONIM SIRKETI — Teknopark Istanbul 1/1A No:109 Pendik/Turkiye Contact: info@workmana.com — https://workmana.com
This privacy policy explains what personal data is processed when you use the Workmana mobile application ("App"), for which purposes it is used, and your rights under KVKK and GDPR. Workmana is an enterprise application that provides workforce and field-audit management between employers and employees; your account is created by your employer/organization.
1. Data We Collect
Account and identity information
- Name, surname, email address, user and organization IDs — required to identify your account and sign in.
- Turkish national ID number — transmitted for identity verification only if you choose to sign in with this method (email sign-in is also available).
- Password — transmitted only over encrypted connections during authentication; it is not stored in plain text on our servers.
Location information (optional)
- Approximate and precise location — if you grant location permission, it is used to sort your assigned branch/project list by nearest distance and geotag field-audit records. If you do not grant permission, the app continues to operate except for these features.
Content and files (optional)
- Photos, videos, files, and documents — content you choose to upload as attachments to audit questions and incident/emergency notifications.
- Audit responses and notes — work records you create in the app.
Automatically collected technical data
- Crash logs and diagnostic data — automatically collected to detect and fix application errors.
- In-app interaction and screen-view records — collected for error analysis and performance measurement (e.g., which screen opened slowly, navigation steps before an error).
- Device information — device brand, model, serial/identifier number, app version, and IP address; used for session security, device matching, and error analysis.
2. Processing Purposes and Legal Bases
| Purpose | Legal basis (KVKK Art. 5 / GDPR Art. 6) |
|---|---|
| Authentication, account and session management | Performance of a contract; service agreement between us and your employer |
| Shift, leave, overtime, and audit process execution | Performance of a contract; legitimate interest |
| Showing nearest branch/project | Explicit consent (location permission) |
| Storing audit attachments (photo, video, file) | Performance of a contract |
| Error, crash, and performance analysis | Legitimate interest (service quality and security) |
| Fulfillment of legal obligations | Compliance with legal obligations |
3. Data Sharing
Your personal data is not shared with third parties for advertising, marketing, or data trading. Data is transferred only to the following service providers, in line with our instructions and limited to processing purposes:
- Hosting / API servers — application data is stored in our own API infrastructure.
- Sentry (Functional Software, Inc.) — crash logs, diagnostic data, and in-app interaction records are processed for debugging in Sentry's European Union (Germany) data centers. Sentry acts as a data processor. Details: https://sentry.io/privacy/
In case of legal obligation (court order, request from authorized institutions), data may be shared with competent authorities.
4. Data Security
- All data transfers are encrypted with TLS/HTTPS.
- Session data is stored on-device in the operating system's secure storage area (Keychain/Keystore).
- Access is restricted through role-based authorization.
5. Retention Periods
Data is retained during the membership/employment relationship and for statutory limitation periods required by applicable law; at the end of this period, data is deleted, destroyed, or anonymized. Crash and diagnostic records are retained for a maximum of 90 days.
6. Your Rights
Under KVKK Art. 11 and GDPR, you have the rights to access, correct, and delete your data, object to processing, learn the third parties to whom data is transferred, and request compensation for damages.
There is no automatic data-deletion tool within the app; for deletion and other requests, you can apply via info@workmana.com from the email address registered to your account. Requests are answered within 30 days at the latest. Since your account is managed by your organization, some requests may be handled together with your employer.
7. Children's Privacy
Workmana is an enterprise application and is not intended for users under the age of 16.
8. Changes
When this policy is updated, it is published on this page and the effective date is updated. Material changes are also announced in-app.
