Privacy policy
Last updated: October 28, 2026
This text explains how the Angaria Mac app and the angaria.app site process your personal data. It is the information notice required under Law No. 6698 on the Protection of Personal Data, KVKK (Turkey's personal data protection law).
Data controller
The data controller is Vinena Yazılım ve Tasarım Ltd. Şti. You can reach us at hi@angaria.app.
Mac app
Angaria has no server of its own. The app stores client and service records, company details and settings only on your Mac; they are not sent to us. Your GIB password and license key are kept in the macOS Keychain. The app has no analytics, usage tracking or crash reporting.
The app connects only to these addresses on the internet:
- earsivportal.efatura.gov.trYour e-Arşiv invoices
- www.tcmb.gov.trExchange rates
- api.polar.shLicense check
- dl.angaria.appUpdates
- All other addressesBlocked
GIB e-Arşiv portal: the app connects with your own user code and password to issue, list and approve your invoices. The connection goes from your Mac directly to GIB, not through us.
TCMB: the app takes exchange rates from the Central Bank's public rates page. No personal data is sent in these requests.
Polar: when you activate and validate your license, your license key and your Mac's name are sent to Polar. Polar uses this information to check whether your license is valid and on how many devices it is used.
dl.angaria.app: the app checks for new versions and downloads updates. No personal data is sent in this request.
MCP: if you turn on MCP in Angaria, AI apps on this Mac (such as Claude and Cursor) can read your invoices and your client and service records through Angaria, prepare drafts and add records. If you also allow it, they can approve invoices with the SMS code you type to them, delete records and change company details. MCP and this permission are off by default. When on, connections come only from this Mac, with an access key Angaria generates, and no data comes to us. These apps send the tools' responses to their own AI providers; this transfer happens at your request and falls under that app's privacy terms. Angaria keeps, on this Mac, the tool, time, company, the input given to the tool and the result for the last 200 of these calls. The input may include details such as client name, VKN, address, amount and IBAN; SMS codes, passwords and access keys are hidden. This record does not leave this Mac.
Website
To count visits, angaria.app uses open source OpenPanel without cookies, running on our own server (analytics.vinena.studio). We record page views and clicks on the download and buy buttons. These records also include details such as browser type, device type, country, city and the page you came from. A small share of visits is recorded as a session replay: clicks, scrolls and the page content. Anything you type is masked. These recordings are kept for 30 days, only on our own server.
We do not use cookies for tracking. Your browser keeps only three things: the language you pick (a cookie), the theme (browser storage), and a first touch (browser storage): the site that sent you, the campaign tags in the link and the first page you saw. The first touch is kept for 30 days and is sent to Polar with a random id when you click buy. Data is sent through the site's own address. Your IP address and browser details are used to tell visitors apart and to find the country and city; OpenPanel hashes them with a key that changes every day. We do not use this information for any other purpose.
The site runs on Cloudflare. Cloudflare technically processes your IP address to deliver the page to you. We do not keep request logs.
Payment
Subscriptions and payments are handled by Polar (Polar Software Inc.). Polar is the merchant of record and the payment provider for the sale. During payment, Polar collects your name, email address, billing address and card details, and processes them under its own privacy policy. Your card details never reach us. When you click buy, the link to Polar also carries the source tags of your first touch and a random id for that click.
Polar shares your name, email address, subscription status and license key with us. We use them to manage your license and to give you support.
If you email us, we keep the conversation to solve your issue and to get back to you if needed.
Transfers abroad
Polar operates in the United States. Site analytics run on our own server in the European Union (Germany), and Cloudflare runs all over the world. Because we use these services, your personal data may be transferred abroad. We make these transfers in line with Article 9 of KVKK.
Retention period
We keep personal data only as long as the purpose of processing requires and for legal retention periods. When the period ends, we delete or anonymize it.
Your rights
Under Article 11 of KVKK, you have the right to learn whether your personal data is processed, to request information if it is, to ask for it to be corrected or deleted, and to object to processing. You can send your request to hi@angaria.app; we reply within 30 days at the latest.
Changes
When we update this text, we change the date above. If there is a significant change, we announce it on the site.