PRIVACY POLICY
The UmrahAI application and its connected services (the "App") are operated by Ofi Teknoloji A.Ş. (the "Company"). This Privacy Policy explains what data we collect, how we use it, whom we share it with and what your rights are. The data protection legislation in force in your country of residence applies, including Law No. 6698 (KVKK) in Turkiye and the GDPR/UK GDPR in the European Economic Area and the United Kingdom.
1. Data Controller
Ofi Teknoloji A.Ş. · PINARBAŞI MAH. HÜRRİYET CAD. ANTALYA TEKNOKENT ULUĞBEY AR-GE 2 BİNASI NO: 3 A İÇ KAPI NO: B190 KONYAALTI/ANTALYA · Contact: [email protected]
2. Data We Collect
| Category | Scope |
|---|---|
| Account | Phone number, full name, date of birth, e-mail |
| Tour registration | Passport and identity details entered through your agency, group and room information |
| Health | Blood type, special needs notes, the content of your SOS alerts (only with your explicit consent) |
| Religious content | Your gender and the questions you put to the artificial intelligence assistant (only with your explicit consent) |
| Location | Precise GPS data for live location sharing, group location and the tawaf counter (only with your explicit consent) |
| Voice | Temporary audio processing during live translation and voice features; no permanent recording is kept |
| Camera | Explore with Camera imagery is processed on your device; it is not sent to our servers |
| Usage and security | IP, device information, logs, in-app activity, licence and purchase status |
3. Purposes of Use
We use your data to manage your account, to provide tour programme and group coordination services, to run the live broadcast, translation and artificial intelligence assistant features, to ensure security and prevent misuse, to handle support requests, to fulfil our legal obligations and, to the extent you allow, to improve the service. We do not sell your data; we do not carry out profiling for advertising purposes.
4. Legal Bases
Processing rests on performance of the contract, legal obligation, legitimate interest (security and record keeping) and, for special categories of data and marketing communications, your explicit consent. For users covered by the GDPR the corresponding bases are Art. 6(1)(b), (c), (f) and Art. 9(2)(a) respectively.
5. Sharing
Within the scope of your tour registration your data is shared with your agency and your tour guide, with our service providers so that the service can operate (current list: https://umrahai.ai/yasal/alt-isleyenler) and, where legally required, with the competent authorities. It is not transferred to any other third party. For payments made through the App or the Agency Panel, card details are processed by the authorised payment institution iyzico; the Company neither sees nor stores your card details.
6. International Transfers
Verileriniz Avrupa Birliği (Hollanda) veri merkezlerinde barındırılır; bazı hizmetler için hizmet bazlı yurt dışı sağlayıcılar kullanılır. Transfers abroad are carried out under the mechanisms provided for in Art. 9 of the KVKK and Chapter V of the GDPR.
7. Retention
We retain your data for as long as it is necessary for the purposes of processing and throughout the statutory limitation periods; the periods are set out by category in our Retention and Destruction Policy. When you delete your account, your data is deleted or anonymised, without prejudice to statutory retention obligations.
8. Security
We apply appropriate technical and administrative measures, including encryption, access control and record keeping. No method of transmission or storage provides absolute security; absolute security cannot be guaranteed.
9. Your Rights
You have the right to access, rectify and erase your data, to restrict processing, to object, to data portability and to withdraw the consent you have given at any time. You can submit your requests through https://umrahai.ai/kvkk-basvuru or [email protected]; for account deletion you can use https://umrahai.ai/hesap-silme. You retain the right to lodge a complaint with the Personal Data Protection Board in Turkiye and, under the GDPR, with the supervisory authority in your country of residence.
10. Children
Hesap sahibi 18 yaş ve üzeri olmalıdır. 18 yaş altı kişiler kendi hesabını açamaz; veli/vasi rızası dahilinde çocuk kaydı olarak tutulur, çocuk kayıtlarına lisans tanımlanmaz.
11. Changes
Changes to this Policy are announced within the App; for material changes you are also informed by e-mail. The current version is always published at https://umrahai.ai.
Version: v0.1 (DRAFT) · Translations are for information purposes; in the event of a difference in interpretation the Turkish text prevails.