SaveCON Privacy Policy
Last updated: 4 November 2026
This policy explains how personal data is processed when you use the SaveCON mobile app (the “App”). It also serves as the notice required by Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”).
1Data controller
2Data we process
| Data group | Examples | Source |
|---|---|---|
| Identity and contact | Name, username, email address, phone number | What you enter when registering or editing your profile |
| Account and security | Password (stored only as a hash), one-time verification codes, session records | Registration, sign-in, password reset |
| Device and measurement data | Serial number, device and channel names, readings, alarm limits, alarm and notification history, outage and replaced-part records, relay settings | Your device and the settings you make in the App |
| Notification data | Push notification token, notification preferences, quiet hours | When you allow notifications |
| Diagnostics | Crash and error reports, device model, operating system version | Collected automatically by the App |
| Sharing and permissions | Who you share a device with and what each person may do | Your sharing actions |
The App does not collect an advertising identifier and does not track you across other apps or websites. We do not process special categories of personal data.
3Location and Bluetooth
When you set up a new device, the App asks for Bluetooth permission and, on Android where the system requires it, location permission, in order to find nearby devices. These permissions are used only while the App is open and only during device search. Your location is not stored, not sent to our servers and not used in the background.
4Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, signing you in | Performance of a contract |
| Showing device readings and alarms, sending remote settings | Performance of a contract |
| Delivering alarm and alert notifications (push, email, SMS) | Performance of a contract |
| Security, verification codes, preventing misuse | Legitimate interest |
| Finding errors and improving the App | Legitimate interest |
| Legal obligations and requests from authorities | Legal obligation |
| Optional notices that depend on your choice (if any) | Explicit consent, only if you give it separately |
5Sharing
We do not sell your data. We share it only as needed to provide the service:
Push providers: Google (Firebase Cloud Messaging) and Apple (APNs) receive your notification token and the notification content.
SMS provider: Netgsm İletişim ve Bilgi Teknolojileri A.Ş. receives your phone number and message text for verification codes and alarm SMS.
Email service: Mayday Networks for verification and notification emails.
Hosting: Our servers run on Mayday Networks-Netcore Dc / Istanbul. Hosting is in Turkey; there is no hosting-related transfer abroad.
People you share a device with: they see the device data according to the permission you give them.
Authorities: where the law requires it.
The App’s crash reports are sent to our own server, not to a third-party analytics service.
Because the push providers are located abroad, delivering a notification token may count as a transfer abroad. This happens only if you allow notifications, and it is necessary to provide the service.
6Retention
Account data is kept while your account is open.
Device readings and alarm history are kept for 24 months.
When you delete your account, your personal data and the records of devices you own are deleted. Records we must keep by law are restricted and then deleted, destroyed or anonymised when the period ends.
7Deleting your account
In the App, go to Settings → Delete Account and enter your password and the verification code sent to your email. You can also email . Deleting closes your account and removes the records of the devices you own.
8Your rights
Under Article 11 of KVKK you can ask to:
learn whether your data is processed and request information about it,
learn the purpose and whether it is used accordingly,
know the third parties it is transferred to, in Turkey or abroad,
have incomplete or incorrect data corrected,
have your data deleted or destroyed under Article 7, and have this notified to recipients,
object to a result against you produced solely by automated analysis,
claim compensation if you suffer loss from unlawful processing.
Send your request to the email or KEP address above, or in writing to the address above. We answer within thirty days at most. You may also complain to the Turkish Personal Data Protection Board. If you are in the EU or UK, you also have the rights granted by your local data protection law.
9Security
Data travels over encrypted connections (HTTPS), passwords are stored only as one-way hashes, and access is limited by role. No system is completely risk-free, so we cannot promise absolute security.
10Children
The App is not directed at people under 18. If we learn that we hold data from a child without proper consent, we delete it.
11Changes
We may update this policy. For important changes we notify you in the App or by email. The date at the top shows the current version.