Your data, in plain words.

What we collect

• Account details: your name, e-mail address, a secure hash of your password, your e-mail verification status and your two-factor setting.
• Project records: the requests you create, the quotes you receive, project and phase details, progress notes and your replies.
• Payment records: your bank transfer reports, the bank transaction number, amount and date. No card details are collected and no payment is taken inside the app.
• Appointment details: the meeting topic, your description, the chosen date and time, the meeting link and your cancellation reason.
• Notification token: your device's push token, if you allow app notifications.
• Technical logs: IP address, browser and device information, error and security logs.
• Visitor statistics: on the website only, and only with your cookie consent.

Why we use it

• To provide the service and perform our agreement: following requests, quotes, projects and payments.
• To schedule meetings: your chosen time goes into the calendar and a Google Meet link is created.
• To keep you informed: quotes, payment requests and meeting reminders are sent by e-mail and as app notifications.
• To keep things secure: protecting your account and preventing abuse and fraud.
• To meet legal obligations: keeping financial and commercial records.

Legal basis

Under Article 5 of the Turkish Personal Data Protection Law (KVKK) we process your data to enter into and perform our agreement, to meet legal obligations and on the basis of legitimate interest (security). App notifications and visitor statistics rely on your explicit consent, which you can withdraw at any time in your device settings or cookie preferences.

Who we share it with

• Cloudflare: hosting, database and e-mail delivery. Servers may be located outside Türkiye.
• Google: when you book a meeting, your name and e-mail address are added to the calendar event and the Google Meet invitation.
• Expo: only your device token and the notification text are passed on to deliver app notifications.
• Apple App Store and Google Play: app distribution; these stores do not pass your personal data to us.

Your data is never sold or shared for advertising.

How long we keep it

• Account data is kept for as long as your account is open.
• When you delete your account, your name, e-mail address and sign-in are removed; quote, project and payment records are anonymised.
• Financial and commercial records are kept anonymised for the period the law requires (10 years).
• The notification token is deleted when you sign out or delete your account.
• Technical and security logs are kept only as long as needed for security and troubleshooting.

Deleting your account

You can delete your account from the Account screen in the app (Delete account) or by e-mailing us. If a project is in progress or a payment request is unpaid, we get in touch before the deletion.

Your rights

Under Article 11 of the KVKK you may ask whether your data is processed, request information, correction or deletion, object to processing and claim compensation for damages. Send requests to info@ipeclabs.com; we reply within 30 days at the latest.

Security

Passwords are stored only as secure hashes, connections are encrypted (TLS), the administrator account is protected with two-factor authentication and the app keeps its session in the device's secure storage.

Children

Our services are not aimed at people under 18 and we do not knowingly collect data from children.

Changes

Changes to this policy are published on this page; we notify you by e-mail about important changes.