Privacy Policy
Last updated: November 14, 2026
This Privacy Policy explains how personal data is collected, processed, stored and deleted when you use the mobile app, website and related services provided by Repory ("we"), together the "Service".
It also informs you of your rights under applicable law, in particular the Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Definitions
- App: the Repory mobile app.
- Website: reporytheapp.com.
- Personal data: any information relating to an identified or identifiable natural person.
- Service provider: third parties that process data on behalf of Repory to provide the Service.
- User: a natural person using the Service.
2. Data we collect
2.1 Account data
Repory accounts are created outside the app, on behalf of the company the user works for. The following data is processed:
- Email address, first and last name
- Company, user role and report permissions
- App preferences (language, theme, favorite reports) and notification settings
2.2 Usage and technical data
- Device name and type, operating system, app version
- Sign-in and screen usage records (such as which report was opened when)
- Crash and error reports (they do not contain your identity)
- A notification identifier (push token) for your device, used to send notifications
2.3 Support and feedback
Support requests and feedback messages you send from within the app.
2.4 Website
- Demo request form: name, email, phone, company, message and the source the request came from.
- Cookies: Google Analytics cookies are used only if you give consent in the cookie notice.
2.5 Your business data (ERP)
The sales, inventory, financial and similar business data you see in reports comes directly from your company's own server to your device. Repory does not store this data on its servers.
The only exception is notifications: if you have turned them on, the notification text (e.g. the daily revenue summary) is delivered to your device through notification services and kept in the delivery log for 30 days.
2.6 Camera
The camera is used only to scan barcodes. No images are stored or sent to servers.
3. Purposes of processing
- Providing, operating and maintaining the Service
- Creating and managing user accounts
- Authentication and report authorization
- Sending notifications, updates and support communication
- Detecting errors and improving performance and the product
- Following up on demo requests
- Complying with legal obligations
Your personal data is not used for marketing or advertising without your explicit consent.
4. Legal bases
Your personal data is processed because it is necessary to enter into or perform a contract, to comply with legal obligations, for our legitimate interests (provided they do not override your fundamental rights and freedoms) and, where required, on the basis of your explicit consent (e.g. analytics cookies).
5. Service providers and transfers
Your data is shared only to the extent needed to provide the Service, with these service providers:
- Google Firebase: authentication, database and server functions
- Sentry: crash and error reports
- Expo together with Apple and Google notification services: delivering notifications to your device
- Google Analytics: website visit statistics (only with your consent)
Otherwise, data is shared only upon lawful requests from competent public authorities. Your personal data is never sold or rented.
6. International transfers
The servers of the service providers above may be located outside Türkiye. These transfers are carried out in accordance with KVKK and related legislation.
7. Retention periods
- Account data: as long as your account is active
- Usage records, support records and notification delivery logs: 30 days
- Demo requests: 30 days; deleted at the end of this period if you have not started using Repory
Where the law requires a longer period, that period applies.
8. Account and data deletion
To request deletion of your Repory account and personal data:
- Email support@reporytheapp.com from the email address registered in Repory.
- Use the subject line "Account deletion request" and include your company name.
- We confirm receipt by email and complete the request within 30 days at the latest.
Your company's Repory administrator can also request deletion of your user account by emailing support@reporytheapp.com.
Data deleted: your Repory account (sign-in credentials) and your user record (name, email, company, role, preferences).
Data kept for a limited time: usage records, support records and notification delivery logs are deleted 30 days after they are created.
9. Your rights (KVKK Art. 11)
- Learn whether your personal data is processed
- Request information about the processing
- Learn the purpose of processing and whether data is used accordingly
- Know the third parties in Türkiye or abroad to whom data is transferred
- Request correction of incomplete or inaccurate data
- Request deletion or destruction of data under the conditions set out in KVKK
- Request that corrections and deletions be notified to third parties to whom data was transferred
- Object to an adverse outcome resulting exclusively from automated analysis
- Claim compensation for damages arising from unlawful processing
You can send your requests to support@reporytheapp.com.
10. Data security
Appropriate technical and organizational measures are taken to protect personal data against unauthorized access and unlawful processing; report access is authorized per user. However, absolute security of data transmitted over the internet cannot be guaranteed.
11. Children's privacy
The Service is not directed at children under 13 and we do not knowingly collect their data. If we learn that such data has been collected, it is deleted immediately.
12. Changes
This policy may be updated from time to time. The current version is published on this page with its effective date shown above.
13. Contact
For any questions or requests about this policy or your personal data: support@reporytheapp.com