Cookie & Tracking Policy

1. What this policy covers

This Policy explains how Baysart MMC ("Provider", "we", "us", "our") uses tracking, analytics, and similar technologies in the Baysart mobile app.

Baysart is a mobile-first app. The app itself does not use browser cookies. Instead it uses technologies suited to mobile platforms — device identifiers, an analytics identifier, push notification tokens, and session/authentication tokens.

If a website or other browser-based web property is launched in the future, browser cookies would apply only to that web property and this Policy would be updated accordingly. No such web property exists today.

For full details on how we process personal data generally, please see our Privacy Policy.

2. What we use

The app uses the following categories of identifiers and tokens.

• Analytics SDK — a software library provided by an Infrastructure Provider is integrated into the app. It collects device identifiers (advertising identifiers, an analytics identifier), install-attribution data, your IP address, device/OS information, and in-app events (registration, login, purchases/revenue, KYC status changes).
• Push notification tokens — platform tokens used to deliver notifications to your device.
• Session and authentication tokens — tokens used to keep you signed in and to protect your session.

3. Why we use them

We use each technology only for a specific purpose.

• Attribution and analytics — to understand where installs come from, measure app usage and performance, and improve the product (only with your consent).
• Notifications — to deliver transactional, security, and service-related push notifications.
• Keeping you signed in — to maintain your session so you are not asked to re-enter your password every time.
• Security — to detect fraud and abuse, recognise your device, and protect your account.

4. Third parties

The party providing the analytics service is an Infrastructure Provider acting as a processor under a data-processing agreement (DPA) entered into with us. It processes data only on our instructions.

The specific vendor name is not listed in this Policy; it is recorded in our separately maintained and versioned Sub-Processor Register: https://baysart.com/legal.

Some processors may process data outside Azerbaijan. Any such international transfers are carried out only on the basis of appropriate safeguards.

5. Your choices and controls

You are in control of tracking and analytics.

You can change these settings at any time from your device system settings or the in-app privacy settings. After you opt out of analytics, no new events are collected.

• iOS App Tracking Transparency (ATT) — you are asked for consent before any advertising identifier is accessed. If you do not consent, the advertising identifier is not accessed.
• Analytics opt-out — you can turn analytics off entirely from the in-app privacy settings.
• IP masking — even when analytics is active, your IP address can be masked.
• Push notifications — you can control the use of notification tokens from your device system settings.

6. Data not passed into analytics

Financial data (balances, amounts, card details) and wallet (blockchain) addresses are not included in analytics events and are not passed to the analytics provider.

Your seed phrase and private key are never collected by any tracking or analytics technology — they remain only on your device.