1. Data controller information
This Privacy Policy explains how personal data is processed in the WReports app. The data controller is the legal entity or individual reachable through the contact channels stated in the App (update to match your App Store registration).
Requests: destek@wreports.app
2. What data is processed?
Together with Supabase, the App may process data including:
Account identity: Email address; verified identifiers from Apple or Google sign‑in are managed via Supabase. If you choose a password, a hashed form is stored by Supabase Auth—the App never stores your password in plain text.
Profile (optional): Name, profession, company, etc. (“profiles” table).
Operational report data: Report titles and descriptions, worker/machine counts and names, timestamps, project names, and related IDs.
Media and files: Entry photos in Supabase Storage (“entry‑photos”); generated PDFs may be stored under “pdf‑reports”.
Subscriptions: Plan and status, trial/billing dates (payment card data is not stored by the App; Apple processes payments).
Technical logs: Unless you add analytics SDKs, behavioural ad SDKs are not used by default. Operational logs may exist on Supabase for security.
Device preference: Theme choice may be stored locally via UserDefaults and is not synced to Supabase.
This list may evolve with app versions; significant changes will be reflected in this policy.
3. Purposes of processing
Data is processed to perform the Service (account, sync, reports, PDFs), maintain security, comply with law, respond to support requests, and—only where you consent or another legal basis applies—for product communications.
Fully automated decision‑making based solely on profiling is not performed.
4. Legal basis (KVKK & GDPR summary)
Under Turkish law (KVKK) and the EU GDPR, processing requires a legal basis. Typical bases for this App include contract performance, legitimate interests (security and continuity), and consent where applicable.
Stricter protections in your jurisdiction may give you additional rights and remedies.
5. Sharing and processors
Data may be hosted via Supabase Inc. or its infrastructure partners; Supabase acts as a processor. See https://supabase.com/privacy.
Apple Sign In or Google sign‑in may process authentication data.
Payments run through the Apple App Store; Apple’s privacy policy applies.
We do not sell your data for advertising or profiling.
6. International transfers
Depending on your Supabase configuration, data may be hosted in Türkiye, the EEA, the UK, or the US, among others. Cross‑border transfers under KVKK Art. 9 and GDPR Chapter V should use appropriate safeguards—choose your hosting region in the Supabase dashboard to support compliance.
Clarify your processing region in your public materials where helpful (this text is general).
7. Retention
While your account is active, data is retained as needed to provide the Service. Upon deletion, associated database and storage records are removed per your procedure; delayed deletion of backups or legal holds may apply.
Legal disputes or audits may require limited retention.
8. Your rights
Under KVKK you may request information, correction, deletion, restriction, objection, and damages where applicable. Under GDPR you may have access, rectification, erasure, restriction, portability, objection, and complaint rights.
Manage some settings in Profile & Settings; initiate deletion from account deletion. Further requests: destek@wreports.app
9. Children’s privacy
The Service is not directed at children under 13. Ages 13–18 may require parental consent under local law.
If you believe we collected data from a child under 13 without intent, contact destek@wreports.app and we will seek to delete it safely.
10. Security
We aim for HTTPS/TLS, row‑level access controls, and strong authentication options. No system is risk‑free; keep your device locked and updated.
11. Policy changes
This policy may be updated. Material changes may be communicated in‑app or by email. Check the “Last updated” date.
12. Contact
Privacy requests and questions: destek@wreports.app