Privacy Policy

1. Scope and responsibility

This policy covers OkulMobil's iOS and Android mobile applications and the school management, messaging, notification and support services serving them. The application is used by school administrators, teachers, staff and parents. Users can access information only within the roles, permissions and student relationships defined by the school.

For school and education records concerning students, parents, students' relatives and staff, the relevant school or institution acts as the data controller. OkulMobil processes these data on the school's behalf within the technical infrastructure necessary to provide the service.

OkulMobil does not use entrusted school data for an independent commercial purpose or transfer it to other companies for marketing, advertising, profiling, data trading or similar purposes.

Service name: OkulMobil

Privacy and personal data requests: info@okulmobil.com

Your institution's own privacy notice and personal data processing obligations also apply. Reading this policy or using the application does not automatically constitute consent to all processing that legally requires explicit consent.

2. What data may be processed?

The following information may be processed only when the relevant feature is used, the school enters it into the system or the user provides it. Not every category is collected from every user.

Identity, account and contact information

First name, surname, user ID, date of birth, gender, country or nationality, identity document type and number where necessary; email, telephone, address, country/province/district and institutional contact information.

Verification information needed for sign-in and account security may also be processed.

Student, parent, relative and staff information

School and class relationships, registration and transfer information, duties and permissions, parent–student relationship, degree of relationship, collection authorization, profile and students' relatives' photographs, and educational and professional information shared by staff in the relevant features.

Education and daily school records

Attendance, entry and exit, daily assessments, nutrition and meal lists, announcements, newsletters, homework, activities, surveys, responses to information requests and parental approvals.

Health information

Where needed by the school, student allergy and health notes; medication name, dose, administration time and records, prescriptions and attachments; height, weight and measurement dates entered for physical development tracking.

This information is held so that only users authorized by the relevant school can access it within their duties.

Messages, images and other content

In-app messages, photographs, videos, audio files, documents, contracts, form responses, support correspondence and attachments.

OkulMobil does not continuously listen to the device microphone. Audio, photographs, videos or documents are processed only when the user uses the relevant feature.

Payment, financial transaction and order information

Scheduled payments, instalments, collections, amounts, payment methods, transaction dates and descriptions, debts and balances, expenses and related documents; staff pay records according to permissions; kiosk card campaign requests and order status.

A payment method entry such as “credit card” does not mean that OkulMobil records the card number or security code.

Location and kiosk records

Live location sharing works only when the user starts the relevant feature. The initiating device's location may then be processed to display it to the sharing session's authorized recipients.

In schools using kiosks, card mappings, passage times and any passage images may be held as part of the school record.

OkulMobil does not continuously track users' locations merely because they install or open the application.

Device, usage and technical data

Limited technical information, such as device or application installation ID, notification token, operating system, application version, language, IP address, access logs and error logs, may be processed to keep the application working safely and correctly.

This technical information is not used to build advertising profiles, sell user behaviour or track users in other applications.

3. How is data obtained?

Data may be obtained from:

• forms completed by users;
• uploaded files, photographs and videos;
• in-app messages and support content;
• entries made by school management or authorized staff;
• information supplied by parents or legal representatives;
• connected kiosk transactions;
• device permissions solely within permitted features;
• technical records generated while the application operates securely.

Outside these contexts, OkulMobil does not collect data secretly about users or to build user profiles from other sources.

A user adding information or photographs about another person must acknowledge that they are authorized to do so and have provided the necessary information to that person.

4. Purposes of data use

Data is processed solely for the following purposes:

• Managing accounts and sessions.
• Verifying users and granting school- and role-based access.
• Maintaining student and school records.
• Managing attendance, education, activities and daily school processes.
• Enabling communication between the school, parents and staff.
• Sending notifications.
• Providing health, medication and development tracking for authorized users.
• Providing live location sharing initiated by a user.
• Managing payment, expense, contract and kiosk processes.
• Providing technical support.
• Detecting errors, misuse and attempted unauthorized access.
• Ensuring system security and continuity.
• Meeting legal obligations.

OkulMobil does not use user data for advertising, marketing, data sales, behavioural profiling or other companies' commercial activities.

The application uses no third-party advertising SDK or cross-app tracking system for advertising.

5. Privacy of student, relative and health information

Student data is not public.

Users can see information only within the permissions assigned by the school. A parent's account does not grant access to other students' records in the system.

Students' relatives' records are used solely to identify relatives and people authorized to collect the student.

Health, medication, prescription, height and weight information is accessible only to authorized users in the school's relevant processes.

OkulMobil does not use student health information for advertising, marketing or commercial analysis.

The ability of authorized people within the school to view in-app photographs and videos does not constitute permission to publish them on public websites or social media.

6. Live location feature

Live location does not start automatically.

Location is processed only when:

1. the relevant user starts sharing;
2. the necessary device permissions have been granted; and
3. the sharing session is active.

Location information is shown to recipients authorized by the school for that sharing session.

OkulMobil does not use location for advertising, marketing, user profiling or user tracking by other companies.

Users can stop sharing or revoke location permission in device settings.

7. Device permissions

Notifications

Notification permission is used to deliver messages, announcements and other school notifications to the user.

Disabling notification permission does not delete the account or school records on the server.

Photographs, video, camera and files

These permissions are used only when users use a feature such as adding a profile photograph, uploading a document or sharing photographs or videos.

OkulMobil does not independently access users' galleries to collect content.

Location

Location permission is used only for features requiring location, such as live location sharing.

Not granting location permission does not prevent use of other OkulMobil features that do not require location.

Language and device records

Application language may be used to present notifications and the interface in the correct language.

Session information, device ID, user preferences and necessary temporary files may be stored on the device for the application to operate.

8. Is data provided to third parties?

OkulMobil does not sell or rent user and school data, share it for marketing, or trade in data in any way.

Student, parent, staff, message, photograph, document, health and school records in OkulMobil are accessible only within the relevant school's own permission structure.

For example:

• A parent can see only authorized content relating to the student linked to them.
• A teacher can access only records of classes or students for which the school has authorized them.
• A school administrator can access only data within their own institution's authorization scope.
• Messages are shown only to the users or groups to whom they were sent.
• Content sent for support can be accessed only when necessary by authorized OkulMobil support staff.

This is access within the OkulMobil service's own authorization structure, rather than data being “shared” with other companies or unrelated people.

Technical service providers

Certain infrastructure services are used so the mobile application can function technically. These services are not commercial data recipients receiving OkulMobil data to use for their own purposes.

For example:

• Google Firebase Cloud Messaging (FCM) and Apple Push Notification service (APNs) process only the technical data necessary to deliver mobile notifications to devices.
• OpenStreetMap processes technical internet requests only while map images are displayed on the device.
• Server/hosting infrastructure is used to store OkulMobil data securely and operate the service.

Using these services does not mean that student lists, parent information, school records, messages or files are provided to these organizations for advertising, sales or marketing.

OkulMobil does not transfer any user data that is unnecessary for the service to operate to third-party advertising, marketing or data analytics companies.

Legal requirements

OkulMobil does not voluntarily share user data with public authorities.

However, if an authorized authority makes a legally valid and binding request under applicable law, only information legally required to be provided may be shared with that authority.

Outside these circumstances, OkulMobil does not provide user data to any person, company or institution.

9. Hosting and data transfers

OkulMobil's core school and messaging data is stored in the server infrastructure used to provide the service.

Because of how technical services such as notifications and maps operate, IP addresses, device notification tokens or technical connection information may be processed through the relevant infrastructure provider's systems.

These technical operations do not mean that OkulMobil provides user data to other companies for commercial purposes.

Whenever personal data must be transferred, the security and transfer requirements prescribed by applicable law are followed.

10. Retention, account closure and data deletion

Personal data is retained for as long as necessary for its processing purpose and within applicable legal obligations.

Some media content and files may be kept for specific periods under product rules. A record not appearing on an application screen does not mean it is automatically deleted from every system before its legal or technical retention period ends.

If the current mobile application does not have a button allowing users to delete their account directly, requests for account closure or personal data deletion can be sent to the relevant school and/or info@okulmobil.com.

When the conditions for processing cease to apply, deletion, destruction or anonymization is carried out under applicable law.

Records subject to mandatory legal retention may not be deleted before that obligation ends.

Signing out or removing the application from the phone does not automatically delete the school's records on the server.

11. Data security

Security is a fundamental part of OkulMobil's system design.

Communication with production services is encrypted over HTTPS.

Access is limited by controls such as:

• user account;
• school relationship;
• user role;
• student relationship;
• permission level.

Protected files and media content are not made publicly available without authorization checks.

Live location data is processed only using authorization information belonging to an active sharing session.

OkulMobil employees or support staff do not inspect user content unless their duties require it.

OkulMobil does not sell user data, provide it to advertising companies, use it to build third-party databases or create commercial profiles from users' personal content.

Although no internet system can guarantee absolute, one hundred percent security, OkulMobil implements appropriate technical and organizational measures to prevent unauthorized access and protect data.

Users are also advised not to share account passwords, to sign out on shared devices and to notify support if they see anything suspicious.

12. Rights under the KVKK

Under the conditions set out in Article 11 of Türkiye's Personal Data Protection Law (KVKK), users have the right to:

• learn whether their personal data is processed;
• request information if it has been processed;
• learn the purpose of processing and whether data is used accordingly;
• learn the recipients to whom it is transferred within legal conditions;
• request correction of incomplete or inaccurate data;
• request deletion or destruction when the conditions are met;
• request that necessary recipients be notified of relevant corrections or deletions;
• seek compensation for damage caused by unlawful processing.

Requests: info@okulmobil.com

For records where the school is the data controller, the school management's request channel may also be used.

13. Policy changes

This policy may be updated when OkulMobil's features, technical services or data processing activities change.

The current policy date appears at the top of the page.

Where a new processing purpose requires separate information or explicit consent, changing the privacy policy alone is not considered sufficient; the required process is followed separately.

This privacy policy page contains no advertising, advertising tracking code or system for building user profiles.

14. Contact

OkulMobil — Privacy and Personal Data Requests

Service name: OkulMobil

Email: info@okulmobil.com

Website: okulmobil.com

You may also contact the relevant school management about the student's school registration, school educational practices or retention operations determined by the school.

Our privacy commitment

Information entrusted to OkulMobil is not OkulMobil's commercial product.

OkulMobil:

• does not sell user data;
• does not rent user data;
• does not share user data for advertising;
• does not transfer user data to marketing lists;
• does not use student or parent information for commercial profiling;
• does not make user content available for other companies to use.

Data is processed solely to enable the school's authorized users to use the OkulMobil service and to keep the system operating securely.