PRIVACY POLICY
The UmrahAI application and its connected services (the "App") are operated by Ofi Teknoloji A.Ş. (the "Company"). This Privacy Policy explains what data we collect, how we use it, whom we share it with and what your rights are. The data protection legislation in force in your country of residence applies, including Law No. 6698 (KVKK) in Turkiye and the GDPR/UK GDPR in the European Economic Area and the United Kingdom.
1. Data Controller
Ofi Teknoloji A.Ş. · PINARBAŞI MAH. HÜRRİYET CAD. ANTALYA TEKNOKENT ULUĞBEY AR-GE 2 BİNASI NO: 3 A İÇ KAPI NO: B190 KONYAALTI/ANTALYA · Contact: [email protected]
2. Data We Collect
| Category | Scope |
|---|---|
| Account | Phone number, full name, date of birth, e-mail |
| Tour registration | Passport and identity details entered through your agency, group and room information |
| Health | Blood type, special needs notes, the content of your SOS alerts (only with your explicit consent) |
| Religious content | Your gender and the questions you put to the artificial intelligence assistant (only with your explicit consent) |
| Location | Precise GPS data for live location sharing, group location and the tawaf counter (only with your explicit consent) |
| Voice | Temporary audio processing during live translation and voice features; no permanent recording is kept |
| Camera | Explore with Camera imagery is processed on your device; it is not sent to our servers |
| Usage and security | IP, device information, logs, in-app activity, licence and purchase status |
3. Purposes of Use
We use your data to manage your account, to provide tour programme and group coordination services, to run the live broadcast, translation and artificial intelligence assistant features, to ensure security and prevent misuse, to handle support requests, to fulfil our legal obligations and, to the extent you allow, to improve the service. We do not sell your data; we do not carry out profiling for advertising purposes.
4. Legal Bases
Processing rests on performance of the contract, legal obligation, legitimate interest (security and record keeping) and, for special categories of data and marketing communications, your explicit consent. For users covered by the GDPR the corresponding bases are Art. 6(1)(b), (c), (f) and Art. 9(2)(a) respectively.
5. Sharing
Within the scope of your tour registration your data is shared with your agency and your tour guide, with our service providers so that the service can operate (current list: https://umrahai.ai/yasal/alt-isleyenler) and, where legally required, with the competent authorities. It is not transferred to any other third party. Where payments are enabled, payments for digital entitlements purchased within the mobile App are processed by Apple App Store or Google Play, depending on the platform used. Card payments in the Agency Panel are a separate payment channel and, when enabled, are processed by the authorized payment institution iyzico. The Company does not receive or store your full payment card details.
6. International Transfers
Your data is hosted in data centers in the European Union (the Netherlands); some services use providers located abroad on a service-by-service basis. Transfers abroad are carried out under the mechanisms provided for in Art. 9 of the KVKK and Chapter V of the GDPR.
7. Retention
We retain your data for as long as it is necessary for the purposes of processing and throughout the statutory limitation periods; the periods are set out by category in our Retention and Destruction Policy. When you delete your account, your data is deleted or anonymised, without prejudice to statutory retention obligations.
8. Security
We apply appropriate technical and administrative measures, including encryption, access control and record keeping. No method of transmission or storage provides absolute security; absolute security cannot be guaranteed.
9. Your Rights
You have the right to access, rectify and erase your data, to restrict processing, to object, to data portability and to withdraw the consent you have given at any time. You can submit your requests through https://umrahai.ai/kvkk-basvuru or [email protected]; for account deletion you can use https://umrahai.ai/hesap-silme. You retain the right to lodge a complaint with the Personal Data Protection Board in Turkiye and, under the GDPR, with the supervisory authority in your country of residence.
10. Children
Account holders must be at least 18 years old. Persons under 18 cannot create their own accounts. With the consent of a parent or legal guardian, their information may be maintained as a child record; licenses are not assigned to child records.
11. Changes
Changes to this Policy are announced within the App; for material changes you are also informed by e-mail. The current version is always published at https://umrahai.ai.
Translations are for information purposes; in the event of a difference in interpretation the Turkish text prevails.