KeyCell Privacy Policy

Last updated: 2026-11-05

This policy describes the QR-code features of the current KeyCell mobile application provided by KareKimlik Bilgi Teknolojileri A.Ş..

1. How KeyCell works

KeyCell allows users to scan QR codes with the device camera and display a personal or employee QR code on the phone. The displayed code contains a person identifier (personId) and a time-dependent verification code (hash).

The receiving QR reader or access-control system validates the code independently. If validation succeeds, that system may accept the employee's entry and, if connected to a door controller, unlock a door. KeyCell does not make the access decision or maintain the receiving system's entry and exit logs.

The current version does not provide NFC or Bluetooth door-access features.

2. Information used by the application

The personal QR display uses a personId and a time-dependent verification code. A personId is personal data where it can be linked to an identifiable person. Verification codes should also be protected because they are relevant to access security.

When a user chooses to scan a QR code, its contents may be processed to provide the requested feature. Information voluntarily provided in a support request may be processed to respond to that request.

3. Camera permission

KeyCell requests camera access to scan QR codes. Without camera permission, QR scanning cannot be used; displaying a QR code is a separate function. Whether camera images are stored or transmitted elsewhere must be confirmed against the actual data flows of the deployed application version.

4. QR validation and access logs

The QR code displayed by KeyCell is processed by the receiving reader or access-control system. Code validation, authorization decisions and employee access logs are handled by that receiving system.

The receiving system may record the person identifier, event time and access result. The organization operating that system is responsible for explaining its own purposes, retention periods and disclosures. These logs are not automatically collected by KeyCell itself.

5. Purposes and security

Information handled by KeyCell may be used to provide QR scanning and personal QR display functions, respond to user requests and support application security. Processing is subject to applicable law and relevant legal bases.

Users should not disclose access QR codes or their contents to unauthorized persons. Time-dependent verification codes do not eliminate every risk of misuse.

6. Retention and disclosure

Data handling by KeyCell is distinct from records created by organizations operating QR readers or access-control systems. The categories and retention periods of any information held by KeyCell's own infrastructure must reflect the deployed version's actual behavior. Requests about access logs maintained by a receiving system should be directed to its operator.

7. Your rights and contact

For requests relating to access, correction, deletion or other applicable data-protection rights concerning information processed by KeyCell, contact KareKimlik Bilgi Teknolojileri A.Ş. at support@karekimlik.com. For records created by an employer, building or other access-system operator, that organization may also be the appropriate contact.

8. Updates

Updates to this policy and their effective dates will be published on this page.

General contact: info@karekimlik.com