Privacy Policy
By using the Service, you agree to the practices described in this Privacy Policy.
1. Introduction
This Privacy Policy explains how RTECH YAZILIM TEKNOLOJİ VE TİCARET LİMİTED ŞİRKETİ (“Company”, “We”, “Us”, “Our”) collects, uses, stores, processes, and protects your information when you use our mobile application Orak and its related services, including IoT integrations, satellite imagery processing, cloud services, and remote device management.
2. Data We Collect
We collect the following categories of information to operate and improve our services:
2.1 Personal Information
- Full name
- Phone number
- Email address
- Address / City
- Account details (username, role, cooperative assignment)
2.2 Device Information
- Device model
- Operating system version
- App version
- IP address
- Mobile network information
- Device identifiers (e.g., Android ID, UUID)
2.3 IoT Sensor & Telemetry Data
We collect real-time data from devices registered to your cooperative, including:
- Pressure sensor values
- Temperature & humidity readings
- Relay switch states (ON/OFF)
- Battery level / solar charging data
- Device ID, firmware version, uptime
- IoT event logs (online/offline status)
- MQTT telemetry metadata
- GPS coordinates of IoT devices (if available)
2.4 Satellite Imagery Data
We obtain satellite imagery data to provide visualization and analysis services:
- Sentinel / Landsat / other open-source satellite providers
- NDVI / vegetation indices
- Geo-referenced raster data
- Field boundaries & polygons submitted by users
We do not track or identify a person from satellite images.
2.5 Location Data (Foreground + Background)
If you grant permission, we may process:
- Precise location
- Approximate location
- Background location (used only if you enable specific features)
Location is used for:
- Displaying your live map position
- Matching you with the nearest field or cooperative
- Showing IoT device positioning
- Route visualization (milk collection, agricultural tasks)
- Field boundary creation on the map
We do not sell or share your location with third parties. You can disable location access via device settings.
2.6 Media Access
If you give permission, we may process:
- Photos you upload
- Images for field boundaries, device installation reports, or notes
We never access your gallery without your consent.
2.7 Usage Data & Analytics
Automatically collected to maintain system quality:
- Screen views, clicks, and navigation paths
- Crash reports
- Performance metrics
- API error logs
- Device-server latency data
3. How We Use Your Data
3.1 Service Operation
- Deliver IoT telemetry in real time
- Monitor device health (online/offline)
- Provide satellite map features
- Maintain user accounts and permissions
- Sync data across cloud services
3.2 Communication
- Push notifications
- Device alerts (sensor threshold warnings)
- Maintenance reminders
- Account or security updates
3.3 Improving the Service
- AI-based field suggestions
- Sensor calibration algorithms
- Satellite analysis improvements
- Interface / UX optimization
3.4 Legal Requirements
- Compliance with KVKK and GDPR
- Compliance with Turkish commercial and technology laws
- Fraud prevention and security investigations
4. Legal Basis (GDPR / KVKK Compliance)
We process personal data based on:
- Explicit consent (location, camera, IoT authorization)
- Performance of a contract (app functionality)
- Legitimate interest (security, analytics)
- Legal obligations (accounting, investigation requests)
5. Third-Party Services & Data Transfers
We may store or process your data using trusted cloud providers:
- Supabase (EU / US data centers)
- AWS (EU / US regions)
- Google Cloud
- Satellite data providers (Sentinel, Landsat, etc.)
Transfers are done with encryption, Standard Contractual Clauses (where applicable) and KVKK-compliant safeguards. We never sell your personal data.
6. Data Sharing
We only share data when necessary:
- With service providers (hosting, database management, error logging, IoT communication such as MQTT / WebSocket)
- With cooperatives: authorized users may view your field boundaries, device locations and sensor telemetry if your cooperative manages an IoT system
- Legal compliance: we may disclose data if required by law, court order, or governmental authority
We do not share your data with advertisers, marketing firms or unrelated third parties.
7. Data Retention
- IoT telemetry: 2 years
- User account data: as long as your account is active
- Satellite imagery: cached temporarily for performance
- Logs & analytics: 6–12 months
- Deleted account data: fully erased within 30 days unless legally required otherwise
8. Data Security
We apply multiple layers of protection, including:
- End-to-end encryption (TLS 1.3)
- At-rest encryption (AES-256)
- Role-based access control (Supabase RLS)
- Regular security audits
- Hashing for sensitive data
- Strict API key rotation
- Limited internal access
Despite best practices, no system is 100% secure.
9. Your Rights
Under KVKK and GDPR, you may request:
- Access to your data
- Correction of inaccurate data
- Deletion of your data
- Export of your data (data portability)
- Restriction of processing
- Withdrawal of consent (location, camera, notifications)
For requests, please contact: destek@orakapp.com. We respond within 30 days.
10. Children’s Privacy
Our service is not intended for children under 13. We do not knowingly collect children’s personal data.
11. Cookies & Web Tracking
For users who access our website, we may use:
- Session cookies
- Authentication cookies
- Analytics cookies (non-identifiable)
You may disable cookies from your browser settings.
12. Changes to This Policy
We may update this Privacy Policy as our services evolve. Changes become effective upon posting the updated version within the app and on our website.
13. Contact Information
If you have any questions, please contact us:
- 📧 destek@orakapp.com
-
🏢 RTECH YAZILIM TEKNOLOJİ VE TİCARET LİMİTED ŞİRKETİ
Derinkuyu / Nevşehir, Turkey