This policy explains what data is processed when you use the Akıllı Ev app and SmartRelay modules, where it is kept, and what rights you have over it. The Turkish version is the authoritative one.
1. Who is responsible
Eyüp Apaydın
Contact: eyupapaydin56@gmail.com
2. In short
- We show no ads, do not sell your data, and use no third-party tracking or analytics.
- Your home Wi-Fi password, room layout and module keys are never sent to our server; they stay on your phone.
- You can delete your account for good from the app or from this page.
3. Data processed on our server
| Data | Purpose | Legal basis |
|---|---|---|
| Account: your e-mail address, the display name you chose, an irreversible hash of your password, the time you registered | Creating your account, signing you in, sending verification and password reset codes | Performance of the contract |
| Sessions: the name of the app you signed in with, when the session was opened and last used | Keeping you signed in; noticing and closing stolen sessions | Performance of the contract; legitimate interest (security) |
| Your modules: the module's identifier and name, the account and home it belongs to, whether it is online, whether its relay is on or off, when it was last seen | Controlling the relay from outside your home and showing its state | Performance of the contract |
| Remote commands: which account sent which module an on/off command, when, and the result | Delivering the command and preventing it from being applied twice | Performance of the contract |
| Home sharing: the home's name, its members and their roles; the e-mail address of a person you invite | Letting you share your home with other accounts | Performance of the contract |
| Access logs: your IP address, the time and address of the request, the type of client | Limiting abuse and attacks; finding faults | Legitimate interest (security) |
| Error reports: the kind of error and where in the program it happened, the app version, the Android version. Not linked to your account. | Finding and fixing faults in the app | Legitimate interest. You can switch this off in the app's Settings. |
Remote commands are the only record from which something sensitive could be inferred, such as when your home is in use; they are therefore kept only briefly (see section 7). Commands you give from inside your home network never pass through our server.
4. Data that stays on your phone
The following is kept only in your phone's encrypted storage and is not sent to our server:
- The name and password of your home Wi-Fi network. During setup it is passed only to the module, over an encrypted Bluetooth connection.
- The local keys of your modules.
- Your room and home layout and the local names you give your modules.
- Schedules. These are kept on your phone and on the module concerned.
Uninstalling the app removes this data from your phone.
5. Permissions the app asks for
- Bluetooth and location: only to find a nearby module while you set a new one up. Android ties Bluetooth scanning to the location permission; your location is not read, stored or sent.
- Camera: only to scan a module's setup QR code. The image is processed on your phone and is neither stored nor sent.
- Internet and local network: to reach your modules from your home network and from outside.
6. Who receives data
- Hosting: our server runs in Türkiye, in a data centre of Keyubu. The provider operates the infrastructure and can access data only on our behalf and for that purpose.
- E-mail delivery: verification and password reset codes are sent through Brevo (Sendinblue SAS, France). For this your e-mail address and the content of the message are passed to Brevo; this is a transfer abroad, made only to deliver those messages to you.
- Legal obligation: upon a lawful request from a competent authority.
Your data is not shared with anyone else.
7. How long data is kept
| Data | Period |
|---|---|
| Account, module and home data | Until you delete your account |
| Remote command records | 24 hours after completion |
| Verification and password reset codes | Valid for at most 15 minutes; deleted once expired |
| Access logs | 14 days |
| Error reports | 90 days |
| Backups | Taken daily; overwritten after at most 30 days |
When you delete your account, the account, your sessions, the homes you own and their sharing are removed at once, and your modules are detached from the account. Deleted data remains in backups for at most 30 more days and is used for no other purpose in that time.
8. Security
- All connections between app and server and between module and server are encrypted (TLS).
- Your password is never stored in readable form; only an irreversible hash is kept.
- On your home network the app does not send a module its key; it signs each command with it.
- Modules accept only firmware updates that we have signed.
- Backup copies that leave the server are encrypted.
9. Your rights
Under Article 11 of the Turkish Personal Data Protection Law (KVKK), and under the GDPR where it applies to you, you may ask whether your data is processed, request information about it, learn the purpose and the recipients, have incomplete or incorrect data corrected, have data erased, and object to processing. Send requests to eyupapaydin56@gmail.com; they are answered within 30 days. You may also complain to the Turkish Personal Data Protection Authority or your local supervisory authority.
You can delete your account and the data tied to it yourself, without waiting: in the app under Hesaplar → Hesabı kalıcı olarak sil, or on the account deletion page.
10. Children
The service is not directed at anyone under 18 and does not knowingly collect their data.
11. Changes
If this policy changes, the current version is published at this address and the date above is updated.