Ailem Güvende
Privacy Notice
This notice explains how personal data is processed in the Ailem Güvende mobile app, its server and the ailemguvende.app website, in line with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK").
1. Data controller
The data controller is the sole proprietorship operated by Recep Yazgan under the Webotion brand ("Webotion"). Ailem Güvende is a Webotion product. For any question or request about personal data, write to destek@webotion.net.
2. Data, purposes and legal bases
Ailem Güvende processes only the minimum data needed for family members to share their status after a disaster. It does not ask for your full name, national ID, email address or contacts.
| Data | Purpose | Legal basis (KVKK Art. 5) |
|---|---|---|
| Phone number | Account creation, SMS verification code, sending status requests by SMS when there is no internet and matching SMS replies | Formation and performance of the contract (5/2-c) |
| Display name in the group, membership and role | Running the family group and the board | Performance of the contract (5/2-c) |
| Status reports ("I'm OK", "I need help"), time and delivery channel | Delivering your status to your family group and reminding members who have not replied | Performance of the contract (5/2-c) |
| Approximate location (about 1 km), optional home location | Sending status requests to people in the affected area and a one-time notice to family members outside it; showing it to your family group with your permission | Performance of the contract for targeting (5/2-c); your explicit consent for showing it to family (5/1) |
| Shake report (detection time and approximate location) | Detecting an earthquake before official data when many phones in the same area sense shaking | Legitimate interest (5/2-f); the feature is turned on by you in the app |
| Device notification ID and platform | Delivering app notifications to your device | Performance of the contract (5/2-c) |
| Location access log (who saw your location during a disaster, and when) | Transparency, notifying you and accountability | Legal obligation (5/2-ç) and legitimate interest (5/2-f) |
| Security logs (IP address, request time, failed verification and signature attempts) | Service security, abuse prevention, troubleshooting | Legal obligation (5/2-ç) and legitimate interest (5/2-f) |
If a relative does not reply, the board automatically shows "waiting for reply" or "no reply" after a set number of reminders. This label only informs your family group and has no other effect on you.
3. Location data
- Location sharing is off by default. For each family group you can give two separate permissions: Always share and Reveal in a disaster.
- With Reveal in a disaster, your location is shown to your family group only while an earthquake event is active, only if your last location is in the affected area, and only if you have not replied for about two hours despite repeated requests. Showing ends when the event closes.
- Every family member who sees your location this way is logged. When you report your status, you are told that your location was viewed.
- You can withdraw your permissions in the app at any time. Withdrawal does not affect processing carried out before it. Full consent texts: Consent texts.
- Location is stored at roughly 1 km precision (geohash). It is not precise enough to identify a building or address, and no location history is kept.
4. How data is collected
Data is collected electronically from your mobile device while you use the app, partly by automated means. Shake reports are sent only if you turn shake detection on. Location is collected only if you grant location permission on your device.
5. Sharing and transfers
- Your family group: your display name and status reports are shared with members of your group; your location only to the extent you allow.
- SMS provider (in Türkiye): your phone number and the message text, for verification codes and SMS fallback.
- Notification service (Google Firebase Cloud Messaging): your device notification ID and the notification content. This service may use servers outside Türkiye; such transfers rely on the appropriate safeguards set out in Article 9 of the KVKK.
- Hosting and technical infrastructure providers: to the extent needed to run the service.
- Competent public authorities: where required by law and upon request.
No personal data is sent to AFAD, Kandilli Observatory or EMSC, from which earthquake information is received. Your personal data is not sold and is not used for advertising or profiling.
6. Retention and deletion
| Data | Period |
|---|---|
| Last location and location in status records | 30 days, then deleted automatically |
| Shake reports | 7 days |
| Location access logs | 365 days |
| SMS verification codes | At most 1 day after use or expiry |
| Phone number, group membership, status reports | Until your account is deleted |
| Security logs | A period proportionate to the purpose, at most 1 year, subject to legal obligations |
You can ask for your account and data to be deleted (details: Account and data deletion) by writing to destek@webotion.net with your registered phone number. The request is completed within 30 days at the latest after identity verification. Expired data is deleted, destroyed or anonymised.
7. Security
Communication with the server uses encrypted connections (TLS). Status messages are signed with a device-specific key. Access keys are stored in hardware-backed encrypted storage on the device and only as hashes on the server. Only authorised people can access the admin panel, which does not show phone numbers, locations or group names. No method of transmission or storage over the internet is completely secure; in the event of a data breach, the notification duties required by law are fulfilled.
8. Children
Family groups may include members under 18. People under 18 should use the app with the knowledge and approval of a parent or guardian. If you become aware of an account opened for a minor without such approval, please let us know.
9. Website and cookies
ailemguvende.app does not use cookies or analytics, and does not load third-party fonts or tracking code. Your light or dark theme choice is stored only in your browser. The site's hosting provider may keep standard server logs (IP address, request time) for security and operations.
10. Your rights
Under Article 11 of the KVKK you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether data is used accordingly, to know the third parties to whom it is transferred in Türkiye or abroad, to request correction of incomplete or inaccurate data, to request deletion or destruction, to request that these actions be notified to recipients, to object to a result against you arising solely from automated analysis, and to claim compensation for damage caused by unlawful processing.
Send your request to destek@webotion.net with enough information to verify your identity and registered phone number. Requests are answered free of charge as soon as possible and within 30 days at the latest. If your request is rejected, you find the answer insufficient or no answer is given in time, you may lodge a complaint with the Personal Data Protection Board (KVKK Kurulu).
This notice may be updated. Significant changes are announced in the app.