Last updated: August 21, 2026
Privacy Policy
Scope
This policy covers the website operated by DIÇA Kahve and the DIÇA mobile application published on iOS and Android. Our aim is simple: we collect the minimum data needed to run the loyalty programme, and we use it only for that purpose.
Data we collect
- Account: first name, last name, e-mail address, and your password (passwords are stored as irreversible hashes).
- Stamp card: stamp-earning dates, card fill status, and your reward codes.
- Device: if you allow notifications, your device’s push-notification token and operating system type.
- Feedback: the messages and ratings you send through the application.
We do not collect location data, we do not use advertising identifiers, and we do not sell your data to anyone.
How we use the data
Your account data is used so you can log in and so your stamp card remains linked to you; stamp activity is used to calculate your reward entitlement. Feedback is read only to respond to you and to improve the service.
Push notifications
Campaign and event announcements are sent only if you grant permission. To deliver notifications, your device token is transmitted to the Expo Push Service; this service uses the token solely to deliver the notification. You may withdraw this permission at any time from the app’s settings or your device’s notification settings; once withdrawn, the token is deleted from our systems.
Account deletion
You can delete your account at any time from within the application via Profile → Delete My Account. Upon deletion, your account information, stamp history, and notification tokens are permanently deleted or anonymised within 30 days. If you cannot access the application, simply write to merhaba@dicakahve.com.
Cookies and third parties
Our website does not use analytics or advertising cookies. The map in the Contact section is provided by OpenStreetMap; when you view the map, your IP address is transmitted to OpenStreetMap’s servers. Your data is stored on our hosting provider’s servers located in Turkey.
Security
Data is encrypted with TLS during transmission. Access to our servers is restricted on a need-to-know basis and access logs are kept. If we become aware of a data breach, we will notify you and the Personal Data Protection Authority within the period required by law.
Changes and contact
We will announce any significant changes to this policy through an in-app notification. For questions: merhaba@dicakahve.com or 0535 014 10 02. Detailed information about the processing of personal data is available in the KVKK Disclosure Notice.





