Privacy policy

Who is responsible?

Oroponi is operated by Ege Kıyıcı, an individual based in Türkiye, who is the data controller. For questions, access, correction or deletion requests, email contact@oroponi.com or egekiyici@oroponi.com. We collect information electronically through our forms, your use of the service, authentication and messages you send us.

Information we collect

When you apply for beta access or maintain an account, we collect the details you provide: name, username, email, date of birth, nationality, country, language, phone number and selected avatar. If you are under 18, the form requests a parent or guardian’s email. Pet information includes names, species, breeds and ages. Account use can also create pet profiles, observations, test answers, results, notes, reminders, digital-pet progress and reward balances.

Supabase handles account authentication and passwords; beta applications do not ask for a password. We receive messages you send us. Hosting and authentication providers may process IP addresses, browser details and security logs to deliver and protect the service.

Why we use it

• Beta applications: assess applications and contact you about access, based on your consent.
• Accounts and requested features: authenticate you, save your information and provide the service, where necessary to perform our agreement with you.
• Security and support: troubleshoot problems, prevent abuse and respond to requests, for our legitimate interests in operating a reliable service. We consider your rights when relying on these interests.
• Legal duties: process information when required by applicable law.
• Optional analytics: only with your consent, understand visits to the public website. We do not send form contents, account identifiers or pet reports to Google Analytics.

Pet profiles are automatically calculated from observations and task results. They are enrichment guidance, not medical assessments or decisions about people with legal or similarly significant effects.

Providers and recipients

Our service uses Supabase for authentication and database storage, Hostinger for website hosting, and Hostinger Email for messages. Beta application details, including pet and parent-contact information where provided, are forwarded as a table to our beta administration mailbox, tester@oroponi.com, for review by authorised operators. If analytics is enabled and you consent, Google Analytics processes usage information. These providers process information according to their roles and applicable terms.

We may disclose information where lawfully required or to protect users and the service. Links to Instagram and other external websites open services with their own privacy practices. We do not sell your personal information.

The main website includes Google AdSense advertising code. Google and its advertising partners may process technical information and use cookies or similar identifiers to deliver, measure and prevent fraud in advertising. Advertising choices are managed through Google’s consent messages where applicable and are separate from our optional analytics choice. See Google’s advertising privacy information.

International processing

Service providers may process information outside your country. Supabase, Hostinger and Google operate international infrastructure. Where required, cross-border processing must satisfy the transfer rules applicable to you, including Turkish Law No. 6698 and, where applicable, the GDPR. Contact us to request information about the destinations and transfer arrangements for your information. Provider privacy notices and agreements are available from Supabase, Hostinger and Google.

How long we keep information

Account information is needed while your account is active. When you request deletion, we assess and remove information that is no longer needed, subject to legal, security and backup requirements. Beta applications and their email copies are retained while needed to assess access and administer the beta, or until consent is withdrawn, unless a limited record is needed for a legal obligation or dispute. Unsuccessful applications are not retained for unrelated marketing. Support correspondence is retained while needed to resolve the request and any related dispute; security logs are retained only while needed for security and incident investigation. Backup copies expire through the relevant provider’s backup lifecycle. These criteria depend on the purpose, account status and legal obligations; deletion from backups is not immediate.

Your choices and rights

Depending on the law that applies, you may request access, correction, deletion, restriction, a portable copy, or object to certain processing. You can withdraw consent for beta contact by emailing us and for analytics through Cookie settings. Withdrawal does not undo lawful processing before it. We may need proportionate information to verify your identity. You may complain to the data-protection authority in your country; under Turkish Law No. 6698, Article 11, you may ask whether your data is processed, request information about that processing, learn its purpose and recipients in Türkiye or abroad, request correction or deletion where the conditions apply, ask that recipients be notified, object to adverse results from exclusively automated analysis and seek compensation for unlawful processing. Apply to the controller first using the contact details above; we will respond as soon as possible and within the applicable legal deadline, generally 30 days for a KVKK application. You may then use the applicable KVKK complaint procedure.

Young users

The beta form collects a parent or guardian email for applicants under 18. Entering an address does not itself verify parental permission. A parent or guardian should contact us before a minor uses the beta; access must meet the applicable local age and consent requirements. Contact us if a child has submitted information without the required permission.

Security and updates

We use authentication and access controls to limit access to account information. No system is perfectly secure. Do not include medical records or unnecessary sensitive information in notes or messages. We will update this notice as the service changes and seek new consent when necessary for a new consent-based purpose. The date above identifies this version.