Last updated: 9 October 2026
By checking the relevant boxes, you confirm that you have read and understood the text below and that you give your consent separately and of your own free will for each item. Each consent is independent; declining one does not affect your access to the other services.
Data Controller: YCT Sağlık Hizmetleri Ltd. Şti., Alacaatlı Mah. Park Cad. No: 15/15, Çankaya / Ankara
Personal Data to Be Processed: Full name, email address.
Purpose of Processing: Sending commercial electronic communications by email regarding LA Fish services, product updates, campaigns, special offers and events.
Legal Basis: Article 5/1 of Law No. 6698 on the Protection of Personal Data ("KVKK") (explicit consent) and Law No. 6563 on Commercial Communication and Commercial Electronic Messages.
Retention Period: Until you withdraw your consent. To withdraw your consent, you can use the "Permission and Consent Preferences" section in your account panel, or click the "Unsubscribe" link in each message.
I give my consent, of my own free will, to the processing of my personal data for the purpose stated above and to commercial electronic communications being sent to me.
Data Controller: YCT Sağlık Hizmetleri Ltd. Şti., Alacaatlı Mah. Park Cad. No: 15/15, Çankaya / Ankara
Data Transferred: The receipt/invoice images and card statements (PDF or image) you upload using the "AI reading" feature on any plan, including the merchant, amount, date and tax number on them, if any; on a statement, the bank name, the card's last 4 digits and the transaction lines (temporarily, for the duration of OCR/AI processing).
Country / Organisation of Transfer: The Vertex AI artificial-intelligence infrastructure (Gemini model) provided by Google Cloud EMEA Limited (Ireland). Processing takes place on servers in the European Union (EU); from Türkiye, this constitutes a cross-border transfer. Under the Vertex AI service terms, the images and files sent are not used by Google to train or improve its AI models. Google Cloud EMEA Limited acts as a processor under a Data Processing Agreement (DPA).
Purpose of Transfer: Automatic reading, through AI-assisted optical character recognition and field extraction, of the text fields in the receipt/invoice image (amount, date, VAT and merchant) and of the transaction lines on a card statement.
Retention Period: Images and files sent for AI processing are not stored permanently by Google and are not placed in a temporary cache either; only where abuse is suspected may Google keep the relevant record for up to 90 days in the same region (EU). The image is not permanently retained on our servers either. What happens to the receipt image depends on which reading method you use: (a) Standard reading is performed on your device, and the image is not sent to the server; (b) with the "AI reading" feature, the image is only temporarily present on the server for the duration of processing and is deleted afterward; (c) only under the separate Cloud Receipt Archive consent (Consent 3), and only if you choose to save the receipt image, the image is stored encrypted on our server in Türkiye. For a card statement, the file itself is not stored; the transaction lines that are read stay as an encrypted draft until you save them, and the draft is deleted once you save. The expenses you save are kept in your cloud receipt archive on our server in Türkiye. The full card number is never stored; only the last 4 digits are used.
Card Statement Scope: This text has been updated to cover card statements. Reading card statements requires accepting this current text; consent you gave earlier remains valid for reading receipt/invoice images.
Withdrawal: To withdraw your consent, you can disable AI reading in your account settings. Once consent is withdrawn, this feature will not operate for new receipt-processing requests; however, withdrawal has no effect on transfers already carried out before that point.
I give my consent, of my own free will, to my receipt/invoice images and card statements being transferred to and processed on Google Cloud EMEA Limited's Vertex AI infrastructure under the conditions described above, with processing taking place abroad (on servers in the EU).
Data Controller: YCT Sağlık Hizmetleri Ltd. Şti., Alacaatlı Mah. Park Cad. No: 15/15, Çankaya / Ankara
Personal Data to Be Processed: The fields read from the receipt (merchant name, date, time, receipt number, amount/tax base/VAT, payment type, category); the tax identification number / Turkish national ID number (T.C. Kimlik No.) on the receipt, if any (an optional field, stored encrypted); and, if you choose, the receipt image (optional, stored encrypted). Your receipts are kept separately according to the company/taxpayer you define in the application.
Purpose of Processing: Permanently storing your receipts in the cloud archive; enabling access from different devices, search, reporting, and organisation on a multi-company/multi-taxpayer basis.
Legal Basis: Article 5/1 of the KVKK (explicit consent).
Storage Location and Retention Period: Data is stored exclusively on our server in Türkiye; no transfer abroad or across borders takes place under this consent. In this respect it differs from the AI processing under Consent 2, where the image is processed abroad. Data is protected with TLS in transit and stored encrypted (Fernet/AES-based) on the server; receipt images and the tax identification number / Turkish national ID number fields are encrypted. Your data is retained until you withdraw your consent, delete the relevant receipt yourself, or delete your account. Receipt images are subject to your plan's quota; if you keep the "automatically delete oldest image" preference switched on, the oldest receipt image may be automatically deleted to free up space (the receipt's data is preserved). If you delete your account, your archived receipt data, receipt images and company records are permanently deleted.
Withdrawal: You may withdraw your consent at any time; once withdrawn, your new receipts will no longer be archived. You can use the "My Receipts" screen in the application or the "Permission and Consent Preferences" section for this. You can delete any receipt or receipt image individually from the "My Receipts" screen; you can also export your archived receipts and company records from the account panel (data portability).
I give my consent, of my own free will, to my receipt data and, if I so choose, my encrypted receipt images being permanently stored on the server in Türkiye under the Cloud Receipt Archive, as described above.
Consent 2 above relates solely to the optional "AI reading" feature. Apart from that, some processors that are necessary for the service to function and remain secure are located abroad: email delivery (Brevo – France/EU) and content delivery and bot/DDoS protection (Cloudflare – USA/global). Error/crash logs are sent to the error-tracking system running on our own server in Istanbul; only versions of the mobile app older than 1.1.2 may continue to send these logs to the error-tracking provider Sentry (EU) for a while. These transfers are carried out under the performance of the contract and legitimate security interest, governed by data processing agreements (DPAs) with the relevant processors and appropriate safeguards; because they are necessary for using the service, they do not fall within the scope of a separate explicit consent. For the detailed list, see Section 5.2 of the KVKK Disclosure Notice.
Under Articles 7 and 11 of the KVKK, consent given may be withdrawn at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw your consent: