This English version is provided for convenience. In case of any discrepancy, the Turkish version prevails.
Last updated: 24 October 2026
At DMmenu, we care deeply about our users' privacy. This Privacy Policy explains how your personal data is processed when you use our website and services.
1. Information We Collect and How We Use It
We may collect the following types of information while providing our services:
1.1. Personal Information
When you use our services, we may collect the following personal information:
- Name, surname, email address and phone number (for account creation and support requests)
- Payment information (for purchases; payment details are processed by secure third-party payment providers)
- IP address and device information (for security and analytics)
1.2. Information Collected Automatically
When you visit our website, we automatically collect certain data through cookies and similar technologies:
- Device type, browser information and operating system
- The pages you visit and your browsing behaviour
- Your IP address and approximate location
This data is used to improve our website, optimise the user experience and ensure security.
2. Sharing and Protecting Information
At DMmenu, the security of user information comes first, and we do not share it with third parties without permission. However, data may be shared in the following cases:
- Legal obligations: Information may need to be provided to the competent authorities as required by law.
- Service providers: Information may be shared, to the extent necessary, with trusted third parties that provide payment processing, analytics and customer support.
- Business changes: If DMmenu is sold, merged or transferred, user information may be transferred to the new business.
Data security: Your personal data is protected with SSL certificates, encryption techniques and firewalls.
3. Cookies and Tracking Technologies
DMmenu uses cookies to improve the user experience. About cookies:
- Strictly necessary cookies: required for the website to work.
- Analytics cookies: used to analyse visitor behaviour and improve our services.
- Targeting and advertising cookies: used to show personalised content and advertisements.
If you want to disable cookies, you can manage them from your browser settings. See our Cookie Policy for details.
4. Your Rights
Under the Turkish Personal Data Protection Law No. 6698 (KVKK), our users have the following rights:
- Right to information: You can learn which of your personal data is processed.
- Rectification and update: You can correct incomplete or inaccurate information.
- Erasure (right to be forgotten): You can request the deletion of your personal data.
- Objection: You can object to the processing of your personal data for a specific purpose.
To exercise any of these rights, contact us at destek@dmmenu.com.tr.
5. Third-Party Links
DMmenu may contain links to third-party websites. Please note that we are not responsible for the privacy practices of those websites.
6. Updates to This Privacy Policy
DMmenu reserves the right to update this privacy policy. Updates will be announced directly on our website.
7. Mobile App (DM Menü)
This section covers the DM Menü mobile app (Android and iOS) used by business owners. The app works with your dmmenu.com.tr account and sends data only to our own server (dmmenu.com.tr) over an encrypted connection (HTTPS).
7.1. Data processed in the app
- Account information: Your name, email address and password. These are used for sign-in, sign-up and the Profile screen. Your password is not stored on the device. Only a session key is kept, in the device's secure storage.
- Session and device information: Each sign-in is recorded with the device's operating system name and version information (e.g. "android BE4B.251210.005"). You can see and revoke these sessions in the web panel under Account Settings › API Access.
- Notification identifier: For order and waiter-call notifications, Google Firebase Cloud Messaging (FCM) creates a notification identifier. It is stored on our server together with the app version and app language.
- Images uploaded from the app: Product photos, business logo, cover image and your profile photo.
- Images are downscaled on the device before upload.
- Product, logo and cover images are visible on your business's public menu.
- Sign in with Google or Apple: If you choose this method, we receive your name, email address and your account identifier at that provider.
- Apple may let you share an Apple relay address instead of your email.
- We never see your Google or Apple password.
- Business and menu information: The business details, menu, prices and table records you enter in the app. These are the same as in the web panel.
- Customer details in orders: The app only shows you the order details your customers enter on the web menu (such as name, phone and address). The app does not collect this information.
7.2. Camera and photo library
- The app does not request camera permission.
- Taking a photo opens the device's camera app, and choosing from the library opens the system picker.
- The camera and library are accessed only when you choose to add or change a photo, and only for the photo you select.
7.3. Purposes
- To create your account, let you sign in and keep your session secure
- To let you manage your menu, business details and orders from the app
- To deliver new orders and waiter calls as notifications
- To show the images you upload on your menu and profile
The app contains no advertising, advertising ID, analytics or crash-reporting tools. Your data is not sold and is not used for advertising.
7.4. Retention
- Account information, business and menu data, uploaded images and registered devices are kept while your account is open.
- Signing out of the app deletes that device's session and notification registration.
- Turning off notifications in Settings deletes that device's notification registration.
- Changing your password signs out the app on your other devices.
- When you delete your account, this data is permanently deleted. Payment records kept for legal reasons, and how long they are kept, are explained on the Account deletion page.
7.5. Third-party services
- Google Firebase Cloud Messaging (Google LLC): used to deliver notifications to your device. The notification identifier and notification content pass through Google's infrastructure.
- Sign in with Google (Google LLC) and Sign in with Apple (Apple Inc.): used only if you choose these sign-in methods.
These services are subject to their own privacy policies.
7.6. Account deletion
You can delete your account in the app under Settings › Delete my account, or in the web panel under Account Settings › Delete my account. Deleted and retained data, and the deletion steps: https://dmmenu.com.tr/hesap-silme?lang=en
For your rights under the Turkish Personal Data Protection Law (KVKK), use the contact address in section 4.
