Fişio
Fişio is an AI-powered smart receipt and invoice digitization mobile application for expense, VAT, and accounting reporting. Your personal and financial data is protected under strict KVKK and GDPR compliance standards.
Device Permissions & Hardware Access
Fişio requests explicit permissions from your operating system (iOS / Android) solely to perform core functionality:
Used solely for capturing photos of physical receipts and invoices directly within the app for OCR processing. No background recording is ever performed.
Used to let you select and upload previously saved receipt or invoice images from your photo library.
1. Data Controller & Service Scope
Pursuant to the Turkish Law on the Protection of Personal Data ('KVKK') and the EU General Data Protection Regulation ('GDPR'), the Data Controller for personal data processed through the Fişio mobile app is Ayris Dev / Ayris Tech (info@ayris.tech).
2. Information We Collect
When you interact with Fişio, the following categories of data may be processed to deliver our service:
- •Account & Identity Information: Email address, full name, securely hashed password (Bcrypt), user role (Certified Public Accountant / SMM or Client).
- •Company & Tax Information: Company business name, Tax ID (VKN) / National ID number.
- •Receipt & Expense Data: Receipt and invoice images, extracted merchant names, receipt numbers, dates, line items, VAT rates, totals, and accounting category codes.
- •Device & Diagnostic Data: Error and crash logs, basic device diagnostics for quality assurance.
3. Purposes of Processing
Your personal data is processed solely for the following explicit purposes:
- •OCR & Receipt Parsing: Extracting text and structured items from receipt images using OCR and AI parsing models into line items and accounting codes.
- •Accounting & Reporting: Aggregating receipts under relevant company profiles, calculating total expenditures and VAT sums, and exporting to Excel/CSV format.
- •Accountant - Client Collaboration: Enabling certified accountants to view, categorize, and approve receipts for associated client companies.
- •Account Security: Preventing unauthorized access, enforcing authentication integrity, and managing sessions securely.
4. Third-Party Service Providers
Fişio never sells or monetizes your data with third-party advertisers. Data is exchanged solely through encrypted channels (HTTPS/TLS) with verified infrastructure providers to deliver essential features:
- •AI & OCR Engine (Google Cloud / Gemini API): Receipt images are processed securely for text extraction only; they are not used to train public foundation models.
- •Cloud Storage & CDN (BunnyCDN): High-speed, secure encrypted delivery of receipt photos.
- •Cloud Database: Isolated and encrypted relational database hosting.
5. Data Security & Storage Principles
We deploy industry-standard technical measures to ensure strict confidentiality and data integrity:
- •All network communication is end-to-end encrypted with HTTPS / TLS 1.3.
- •Passwords are salted and cryptographically hashed with Bcrypt; plaintext passwords are never accessible to anyone.
- •Strict Role-Based Access Control (RBAC) prevents cross-tenant data leakage.
6. Data Retention & Erasure Policy
User Control: Users can delete any uploaded receipt, company profile, or client account from within the app at any time. When a receipt or profile is erased, all affiliated records and images are permanently purged from our database and storage CDN. You can also trigger a complete account wipe by contacting info@ayris.tech.
7. Children's Privacy
Fişio is designed for professional business and accounting management and is not directed to individuals under 13 years of age. We do not knowingly collect personal information from children.
8. Data Subject Rights (KVKK & GDPR)
Under KVKK and GDPR regulations, you maintain the right to access, rectify, export, anonymize, or permanently erase your personal data at any time. For requests: info@ayris.tech
Permanently Erase Your Fişio Data
You can delete your account within the app or trigger a formal GDPR/KVKK erasure request by emailing our automated privacy handler. All records are purged within 72 hours.
REQUEST DATA DELETION