Data controller: HNK Tech
Application: Çiftçi AI (com.ciftciai.app)
Effective date: 14.08.2026 · Version: 1.0
> This is the English translation of the Turkish original
> (gizlilik-politikasi.md). In case of conflict, the Turkish text prevails,
> as the service is provided in Türkiye and governed by Turkish law.
you draw, the content you post and the technical data required for security.
apps or websites.**
to AI providers located outside Türkiye. This requires your explicit consent.
at any time.
| Category | Data |
| Identity | First and last name, year of birth / age, gender, profile photo |
| Contact | Phone number (verified by SMS), e-mail address (Google Sign-In) |
| Verification (worker / trader roles only) | Turkish national ID number and ID document front/back images (worker role); tax/registration number (trader role) |
| Location | Device location (latitude/longitude), field boundaries you draw (polygons) |
| Farm data | Field name, area, crop, operation log, soil sampling points, laboratory results, satellite indices |
| Images | Plant disease photos, feedback screenshots |
| User content | Community posts and replies, group and direct messages, listings, ratings and comments |
| Labour records | Work agreements (peer-to-peer arrangement details: job title, daily wage, date range), timesheets (workday, daily wage, approval) |
| Commercial | Purchase enquiries, subscription status and store purchase events |
| Moderation | Reports you file, automatic filter decisions, block list, enforcement records |
| Technical | App version, platform, device model, IP address, session token digest, push notification token |
Turkish Data Protection Law (health, biometrics, religion, ethnicity, trade
union membership, criminal record).
| Purpose | Legal basis (Law No. 6698, "KVKK") |
| Creating and operating your account | Art. 5/2-c — necessary for the performance of a contract |
| Verifying login by SMS | Art. 5/2-c; Art. 5/2-ç — legal obligation |
| Satellite, weather, irrigation and fire analyses | Explicit consent for location (Art. 5/1) |
| Verifying worker / trader accounts | Explicit consent (Art. 5/1) |
| Community, messaging and listings | Art. 5/2-c |
| Content moderation and community safety | Art. 5/2-f — legitimate interest; Art. 5/2-e — establishment and protection of rights |
| Accounting and tax records | Art. 5/2-ç — legal obligation (Tax Procedure Law Art. 253) |
| Security, rate limiting, abuse prevention | Art. 5/2-f |
| Subscription verification | Art. 5/2-c |
AI outputs in the app (disease detection, irrigation advice, satellite
interpretation, content moderation) are advisory. No automated decision
producing legal effects is taken about you. The automatic content filter may
block a post; you can appeal that decision to [email protected] and a
human will review it. Account suspension is applied only after human review.
Other users see only: your name, profile photo, role, city/district/village,
speciality, hourly rate, biography, rating, years of experience, main crops and
registration date, plus any content you publish yourself.
Never visible to other users: e-mail address, national ID number, tax
number, ID document images, exact location, field boundaries.
Your phone number is shown only where you choose to share it — for example, on
a job advert you publish (if you choose phone contact), or to a work-agreement
counterpart once you have set up an arrangement with them.
| Recipient | Country | Data shared | Purpose |
| Hosting and infrastructure provider | Türkiye | All service data (encrypted in transit) | Running servers and databases |
| SMS provider (Netgsm or equivalent) | Türkiye | Phone number, verification message | Login verification |
| Google LLC (Sign-In) | USA | E-mail, name, profile photo | Authentication |
| Google LLC (Earth Engine) | USA | Field boundary coordinates | Satellite imagery and vegetation indices |
| Open-Meteo | EU | Latitude/longitude only | Weather forecast |
| NASA FIRMS | USA | Bounding-box coordinates only | Active fire alerts |
| Stadia Maps | EU | Map tile requests, IP address | Map display |
| Google (Gemini), OpenAI, Anthropic | USA | Your question text, uploaded plant photos | AI analysis |
| RevenueCat, Apple, Google Play | USA | User identifier, purchase receipt | Subscription verification |
| Expo | USA | Device push token | Notification delivery |
| Sentry (Functional Software, Inc.) | USA / EU | Error message, code location, app version, platform, device model and user identifier only | Detecting app crashes and server errors |
> Never sent to Sentry: name, e-mail, phone number, national ID number,
> IBAN, location, field boundaries, message content, uploaded images, request
> bodies, cookies or IP address. These are masked before transmission; if
> masking fails the report is dropped entirely. Screenshot capture is disabled.
| Competent public authorities | Türkiye | Data requested | Where legally required |
We do not sell personal data and we do not share it for third-party
marketing purposes.
A local model runs on our own server first. If its confidence is below the
configured threshold, the request is forwarded to the external provider selected
by the administrator. This means your text and images may leave Türkiye.
> Warning: do not type national ID numbers, IBANs, addresses or other
> people's personal data into the AI advisor.
Çiftçi AI contains **no third-party advertising SDK, no cross-app tracking and
no advertising identifier**. We do not build advertising profiles and we do not
share data with data brokers.
| Permission | Why | If you decline |
| Location (while in use) | Centring the map on your position, matching fields to weather and fire alerts | You can still draw fields manually by entering coordinates |
| Camera | Taking plant disease photos | You can pick an existing photo instead |
| Photo library | Uploading disease photos and feedback screenshots | Photo-based features are unavailable |
| Notifications | Fire, frost and moderation notices | Alerts appear only when you open the app |
| Motion / compass | Direction guidance for the soil sampling route | Sampling guidance shows distance only, no bearing |
Permissions are requested at the moment they are first needed, with an
explanation, and can be withdrawn from your device settings at any time.
after 5 minutes and are burned after 5 wrong attempts.
and every access is logged.
We keep each category only as long as its purpose requires:
| Data | Retention |
| Account and profile | While the account is open |
| Verification documents | Up to 1 year after verification, then destroyed |
| Field, log and analysis data | Until you delete them, or account deletion |
| AI conversations and disease photos | 12 months |
| Moderation records | 2 years from the decision |
| Purchase requests | Until the listing is removed or the account is deleted |
| Work agreements, timesheets | 5 years, anonymised (Labour Law — proof of wage claims) |
| Pro subscription purchase record | 5 years (Tax Procedure Law Art. 253) |
| Security and consent logs | 2 years |
Your account is deleted, not anonymised. Everything that identifies you —
name, e-mail, phone, national ID, documents, location, messages, listings — is
removed immediately. The only exception is the legally required work agreement
and timesheet records, which are kept anonymised for up to 5 years. See
In the app: Profile → Delete My Account. Also available from outside the
app at https://toprax.info/legal/hesap-sil.
Çiftçi AI is not directed at anyone under 18. We do not knowingly collect
data from children. If you believe a minor has created an account, write to
[email protected] and we will delete it.
Under Article 11 of Law No. 6698 you may learn whether your data is processed,
request information about it, learn the purpose and whether it is used
accordingly, learn the third parties it is transferred to, request correction,
request erasure or destruction, request that these be notified to recipients,
object to results produced solely by automated analysis, and claim compensation
for damage caused by unlawful processing.
In-app shortcuts: Profile → Legal → Download my data · My consents ·
Profile → Delete My Account · Profile → Blocked users.
Transfers listed in section 4 to recipients outside Türkiye are made under
Article 9 of Law No. 6698 on the basis of your explicit consent. You may
withdraw consent at any time from Profile → Legal → My consents; the related
feature then stops working, and processing carried out before withdrawal
remains lawful.
When this policy changes, the version number is increased and you are asked to
review it in the app. Material changes are announced at least 7 days in advance
by in-app notice.
E-mail: [email protected]
KEP (registered e-mail): —
Address: Akyurt / Ankara, Türkiye
Data controller registry (VERBİS) no: kayıt yükümlülüğü bulunmamaktadır
Web: http://hnktech.com.tr/ · Phone: —
Sürüm 1.2 · Çiftçi AI