carbometria Privacy Policy and KVKK Privacy Notice

Version: 1.0 · Last updated: 27 October 2026

This page has two parts:

• Part 1: Privacy Policy. Additional information for users in the European Economic Area and the United Kingdom under the GDPR and the UK GDPR is in Section 19 of this part.
• Part 2: KVKK Privacy Notice (on this page).

Bu sayfanın Türkçesi: https://www.enerwiseai.com/carbometria/gizlilik

Part 1: Privacy Policy#

1. About this policy#

carbometria is a mobile app provided by Enerwise Enerji Yönetimi ve Verimliliği Çözümleri A.Ş. ("Enerwise", "we", "us") that helps individuals estimate their personal carbon footprint based on information about their daily travel, home energy use and lifestyle. carbometria is offered in English and Turkish in the countries where the App Store and Google Play make it available, and runs on iOS, iPadOS and Android phones and tablets. The app opens in English or Turkish depending on your device language, and you can change the language in the app settings.

This Privacy Policy explains what personal data we collect when you use carbometria and how we collect it, what we use it for, who we share it with, how long we keep it, how you can have it deleted and how you can exercise your rights.

• Enerwise is established in Türkiye. Wherever you use carbometria from, we process your personal data in accordance with Türkiye's Personal Data Protection Law No. 6698 ("KVKK"). The information required under the KVKK is set out separately and in full in Part 2: KVKK Privacy Notice on this page.
• If you are in the European Economic Area or the United Kingdom, additional information under the GDPR and the UK GDPR is set out in Section 19.
• Your use of the app is governed by the carbometria Terms of Use at https://www.enerwiseai.com/en/carbometria/terms-of-use.
• This policy applies only to the carbometria app. The cookie and privacy practices of the www.enerwiseai.com website on which this page is published are covered by the policies at https://www.enerwiseai.com/en/cookies and https://www.enerwiseai.com/en/privacy-policy. The carbometria app does not use cookies or similar technologies for advertising or tracking.

2. Data controller#

3. In short#

• To create your account, we ask for your name and email address. We never store your password in plain text; we store only a one-way hash of it.
• To calculate your carbon footprint, we process the travel, home energy and annual lifestyle information that you enter in the app.
• To choose emission factors and to show the app the way you want, we store your country of residence, your distance unit (kilometers or miles), your spending currency and your language preference. To set the dates of your entries by your local time, we also store your device's time zone setting.
• We do not access your device location; for location, we only store the country you select and your device's time zone setting.
• For security, abuse prevention and support, we keep security, error, activity and usage logs on our servers. These logs are kept for 12 months.
• We do not collect your contacts, photos, camera, health data, advertising identifier or device identifier.
• There are no ads in the app. We do not track you across other apps or websites. We do not sell your data. The app contains no third-party software (SDKs) for analytics or crash reporting.
• Reminders are scheduled locally on your device; reminder information is not sent to our servers.
• You can delete your account at any time in the app (Profile > Delete account).
• carbometria results are indicative estimates, not certified measurements.
• If you are aged 13 to 17, you can find a short summary of this policy in plain language at https://www.enerwiseai.com/en/carbometria/privacy-for-teens.

4. Data we collect and how we collect it#

4.1 Information you provide#

You enter this information yourself in the forms in the app.

a) Account information

• Name
• Email address
• Password (stored only as a one-way hash)

b) Country and preferences

• Your country of residence. When you first use the app, we suggest a country based on your device's region setting, and you confirm or change it. The region setting is read only on your device to show the suggestion and is not sent to our servers; only the country you confirm is sent to us. We use your country to choose the emission factors used in your calculations. In the app stores' privacy labels, the country you select and the hotel country appear as "approximate location"; your device's location is not accessed.
• Distance unit (kilometers or miles)
• Spending currency
• Language preference (English or Turkish)
• Time zone (for example, Europe/Istanbul). The app reads it from your device's date and time settings and sends it to our servers automatically when it changes; location services are not used. Your time zone is used to work out which day "today" is, which dates you can make entries for (today and the previous 7 days for daily entries) and the periods of your weekly, monthly and yearly summaries, according to your local time. It is stored with your account; if no time zone has been sent yet, Türkiye time is used. In the app stores' privacy labels, the time zone is also declared under "approximate location".

c) Daily travel entries

• Date of the entry
• Mode of travel: walking, cycling, public transport, taxi, private car
• Distance (in the unit you have chosen)
• Vehicle and fuel type for private cars
• A "no travel today" entry for days on which you did not use any means of transport
• Trip templates you create for journeys you make often

carbometria does not calculate distance from your location. It does not access your device location (GPS and location services) or motion sensors; you enter the distance yourself. Walking and cycling entries are stored only as a mode of travel and a distance; we do not collect health measurements such as step count, heart rate or calories.

d) Home energy information

• Electricity and natural gas use: amount, unit, and start and end dates of the billing period
• Number of people in your household (a number only; we do not ask for any details about household members)
• Electric vehicle ownership and information about charging away from home

e) Annual review

• Diet profile (for example, type of diet) and how often you eat out
• Amounts spent on goods and services (in the currency you have chosen)
• Durable goods you have bought
• Flights: distance band, class and number of flights
• Hotel nights and the country of the stay
• Number of parcels delivered per month
• Number of air conditioning units
• Water use

f) Feedback form

• Device model, operating system and app version (the device model is collected only through this form)
• The screen where the problem occurred
• Steps to reproduce the problem
• Expected and actual result
• Your free-text description

g) Your correspondence with us

• Support requests, personal data requests, complaints and account deletion requests you send us by email or through the contact form, and the content of that correspondence

4.2 Information generated when you use the service#

• The account ID (user number) that our system assigns to your account
• The date on which you accepted the Terms of Use, the version you accepted and the language in which you accepted it, your declaration that you are at least 13 years old, and the version of the Privacy Notice shown to you (terms acceptance record)
• Carbon footprint results and reports calculated from the information you enter
• Points, tasks and badges
• Delivery records of the service emails we send you (recipient email address, time sent, type of email, delivery status)
• Session records: the time a session was opened, refreshed, expired and, if applicable, revoked, and the reason for revocation (only a hash of the session keys is stored)
• Last activity time (the time you last signed in to your account or last refreshed your session) and the time the inactive account notice was sent to you

4.3 Records created automatically on our servers#

These records are created automatically when the app communicates with our servers. See Section 9 for details.

• Activity and usage logs: For every entry you create, edit or delete in the app, the type and path of the operation (which feature was used), the result code and duration, a technical request number, your IP address and a timestamp.
• Security and error logs: When an unexpected error occurs on the server: the path and method of the request, the result code and duration, the IP address, the user agent, a technical request number, the query parameters of the request (values such as passwords and keys are masked), the type, message and technical details of the error, and a timestamp.

We do not collect device identifiers (such as IDFV or Android ID) or device names. We do not infer your location from your IP address.

4.4 Crash reports from Apple and Google#

If you have allowed analytics data to be shared with app developers in your device settings, Apple and Google share the app's crash reports with Enerwise (see Section 12). If you have not given this permission, no such reports reach Enerwise.

4.5 Information that stays on your device#

Your reminder preferences and reminder times are stored only on your device and are not sent to our servers. Your device's region and language settings are read only on your device, when you first use the app, to suggest a country, language, unit and currency. Your device's time zone setting, however, is sent to our servers as described in Section 4.1(b). The session keys that keep you signed in are stored in your device's secure storage and are used only to authenticate you to our servers.

5. Data we do not collect#

carbometria does not collect or process:

• Device location (GPS or the device's other location services). We do not access your device location; for location, we only store the country you select and your device's time zone setting. We do not infer location from your IP address. Your time zone setting is not taken from location services and is not used to determine your location (Section 4.1(b)). In the app stores' privacy labels, the country you select, the hotel country and the time zone appear as "approximate location"; your device's location is not accessed.
• Health data (including step count, heart rate, calories and similar data)
• Contacts
• Photos, videos or camera access
• Advertising identifiers (IDFA, Google advertising ID) or device identifiers
• Social media sign-in data
• Push notification tokens for remotely sent notifications
• Data from third-party SDKs for analytics or crash reporting
• Payment or card details (there are no payments in carbometria)

Special categories of personal data: carbometria does not process the special categories of personal data listed in Article 6 KVKK and Article 9 GDPR (such as health, religion, beliefs or biometric data). Your diet profile is used only to calculate diet-related emissions; we do not use it to draw conclusions about your beliefs or health. Please do not include such information in the free-text fields of the feedback form or in your emails.

Commercial electronic messages: We do not send you advertising, promotional or marketing messages. We send you only the emails needed to provide the service (email verification, password reset, account deletion confirmation, material changes to the terms and security notices), in the language you have chosen.

6. What we use your data for#

1. To create your account, verify your email address, manage your session, handle account operations such as password resets, and record your acceptance of the Terms of Use
2. To determine the emission factor and the result label according to the country you have selected, and to show the app and send service emails in your chosen language, with distances in your chosen unit and spending in your chosen currency; and to set the dates of your entries and the periods of your summaries by your time zone
3. To calculate and report your carbon footprint from the information you enter and show how it changes over time
4. To create and show your progress, tasks, points and badges
5. To schedule reminders on your device (this happens on your device; no data is sent to our servers)
6. To respond to your support requests and feedback, and to identify and fix errors
7. To keep your account and our systems secure, and to detect and prevent unauthorized access, failed sign-in attempts and misuse
8. To send mandatory notices about the service and to monitor the delivery of these emails
9. To comply with our legal obligations and respond to lawful requests from competent authorities
10. To protect our rights in the event of a dispute
11. To detect accounts that have not been used for a long time by their last activity time, to notify them in advance by email and to delete them

We do not use your data for advertising, for marketing based on profiling, for credit assessment or for automated decisions that produce legal effects concerning you.

7. Legal grounds under the KVKK#

We mainly process your personal data on the ground set out in Article 5(2)⁠(c) KVKK (processing directly related to the conclusion or performance of a contract), in order to provide you with the service under the carbometria Terms of Use. This includes your country, unit, currency and language preferences. In addition:

• Article 5(2)⁠(ç) (legal obligation): responding to personal data requests, recording deletions, lawful requests from competent authorities and mandatory notifications.
• Article 5(2)⁠(e) (establishment, exercise or protection of a right): protecting our rights in a dispute and keeping the terms acceptance record.
• Article 5(2)⁠(f) (legitimate interest): we rely on our legitimate interests, provided that this does not harm your fundamental rights and freedoms, only for the following:
  • keeping activity and usage logs for security, abuse prevention and support,
  • keeping security and error logs and preventing unauthorized access and misuse,
  • using feedback and the crash reports shared by Apple and Google to fix errors,
  • keeping delivery records of service emails,
  • detecting inactive accounts by their last activity time, notifying them in advance and deleting them.

We do not rely on explicit consent to process your personal data in carbometria. A table matching each category of data with its purpose and legal ground is included in the KVKK Privacy Notice in Part 2. If you are in the European Economic Area or the United Kingdom, the legal bases under the GDPR and the UK GDPR are set out in Section 19.3.

8. Reminders and notifications#

carbometria uses your device operating system's local notification feature to remind you to make entries. Reminders are scheduled and shown on your device; reminder times and preferences are not sent to our servers. carbometria does not use a remote push notification service.

You grant notification permission through the operating system's permission prompt when you first use the feature, and you can withdraw it at any time in your device settings. Withdrawing the permission does not affect the app's other features.

9. Server logs#

carbometria servers keep two types of records:

Activity and usage logs: Every entry you create, edit or delete in the app is recorded together with the type and path of the operation, its result code and duration, a technical request number, your IP address and a timestamp. These logs do not contain your account ID or your name; they are used to detect misuse of the system, to investigate security incidents and to understand technically what happened when we handle support requests.

Security and error logs: When an unexpected error occurs on the server, the path and method of the request, the result code and duration, the IP address, the user agent, a technical request number, the query parameters of the request (values such as passwords and keys are masked) and the type, message and technical details of the error are recorded. These logs are used to identify and fix errors and to keep our systems secure.

Both types of logs are kept for 12 months from the date the record is created and are then deleted. They are not used for advertising, profiling or marketing and are not shared with third parties, except where required by law.

10. Who we share your data with#

We do not sell or rent your personal data or share it with third parties for advertising or marketing. We share your data only with the following categories of recipients and only for the purposes stated:

Protection by third parties: We require by contract that the service providers to whom we transfer your personal data process it only on our instructions and for the purposes set out in this Privacy Policy, and that they provide the same or an equivalent level of protection as this policy and applicable law require.

Changes in our corporate structure: In the event of a merger, demerger or transfer of business, your data may pass to the relevant legal entity in accordance with the law and subject to the protections in this policy. We will inform you in advance if this happens.

11. Transfers abroad#

Your personal data is not transferred abroad unless the conditions set out in Article 9 KVKK are met.

If you are in the European Economic Area or the United Kingdom, information on where your data is processed is in Section 19.7.

12. Apple and Google#

When you download carbometria from the App Store or Google Play, the data that Apple and Google collect in connection with app distribution, your account and their store services is subject to their own privacy policies. Enerwise has no control over that data:

• Apple: https://www.apple.com/legal/privacy/
• Google: https://policies.google.com/privacy

Crash reports: Apple and Google share the app's crash reports with Enerwise only if you allow this in your device settings:

• iOS and iPadOS: If "Share With App Developers" is turned on under Settings > Privacy & Security > Analytics & Improvements, Apple shares crash data and app usage statistics in aggregated form or in a form that does not personally identify you.
• Android: If you have agreed to share usage and diagnostics data automatically, Google Play shares crash information (device brand and model, Android version and technical details of the crash) in its developer console.

These reports do not contain your name, email address or carbometria account ID. Enerwise does not link them to your account and uses them only to identify and fix errors. You can turn off this sharing at any time in your device's privacy or diagnostics settings.

13. How long we keep your data#

We keep your personal data only for as long as necessary for the purpose for which it is processed. When that period ends, we delete, destroy or anonymize the data. The periods below are the same for all users, wherever they are located.

If a dispute, investigation or request from a competent authority is pending, the relevant data may be kept until that process ends, and only for that purpose.

14. Deleting your account and data#

You can delete your account at any time:

• In the app: Profile > Delete account. Access to your account is closed as soon as you confirm.
• Outside the app: by sending an email with the subject "carbometria account deletion request" to info@enerwisetech.com from the email address registered to your carbometria account. In this case, access to your account is closed once we have verified that the request comes from you.

Within 30 days of the time your deletion request is verified and access to your account is closed (a request made in the app is treated as verified by your signed-in session and your confirmation), your account and data are permanently deleted from our servers; they are removed from backups at the end of the backup cycle. Some records, such as activity and usage logs and security and error logs, are kept for the periods in Section 13 and then deleted. Deletion cannot be undone. For the full list of data deleted and kept, and the steps: https://www.enerwiseai.com/en/carbometria/delete-account

Uninstalling the app from your device does not delete your account.

15. Consent and your choices#

We do not rely on explicit consent to process your personal data in carbometria, so there is no consent to withdraw. However:

• You can change your country, distance unit, spending currency and language at any time in the app settings.
• Your time zone follows your device setting; if you change it on your device, the app updates it automatically.
• You can withdraw notification permission at any time in your device settings.
• You can turn off the sharing of crash reports by Apple or Google in your device settings (Section 12).
• You can choose not to enter optional information such as the annual review; in that case the related categories are left out of the calculation or shown using average assumptions.
• You can edit or delete your entries in the app.
• You can ask us at any time to delete your data or exercise your other rights (Sections 18 and 19).

16. Data security#

We take appropriate technical and organizational measures to protect your personal data, as required by Article 12 KVKK. These include:

• Encrypted connections (HTTPS/TLS) between the app and our servers
• Storing passwords only as one-way hashes
• Restricting access to data to authorized staff who need it for their work
• Keeping activity and usage logs and security and error logs

No system is completely free of risk. If we learn that your personal data has been unlawfully obtained by others, we will notify you and the Personal Data Protection Board as soon as possible, as required by Article 12(5) KVKK; for users in the European Economic Area and the United Kingdom, Section 19.8 also applies. We recommend that you do not share your password with anyone and that you choose a strong password that you do not use for other services.

17. Age limit and users aged 13 to 17#

You must be at least 13 years old to use carbometria. Children under 13 may not use carbometria. If we find that an account belongs to someone under 13, we will close it after notifying the registered email address, and the data linked to the account will be deleted within the periods in Section 13. If you become aware of such an account, please let us know at info@enerwisetech.com.

If you are aged 13 to 17 and use carbometria (a short summary of this section and of the policy in plain language: https://www.enerwiseai.com/en/carbometria/privacy-for-teens):

• Your data is protected in the same way, and with the same safeguards set out in this policy, as the data of other users.
• There are no ads in the app, and we do not use your data to build profiles for advertising or marketing. Your carbon footprint is calculated only to show you results based on the information you enter.
• We do not access your device location; for location, we only store the country you select and your device's time zone setting.
• Your parent or guardian can ask us to delete your account. How to do this is explained in the "Request by a parent or guardian" section of the account deletion page: https://www.enerwiseai.com/en/carbometria/delete-account

18. Your rights#

Under Article 11 KVKK, you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of the processing, to know the third parties to whom it is transferred, to request its rectification, erasure or destruction, to request that these actions be notified to third parties, to object to a result against you that arises from analysis carried out exclusively by automated systems, and to claim compensation for damage.

The full list of your rights and how to apply are set out in the KVKK Privacy Notice in Part 2. We respond to applications within 30 days at the latest and, as a rule, free of charge; if the response involves an additional cost, a fee may be charged in accordance with the tariff in Article 7 of the Communiqué on the Procedures and Principles for Applications to the Data Controller.

The rights of users in the European Economic Area and the United Kingdom under the GDPR and the UK GDPR are set out in Section 19.5. If the law of your country gives you rights in addition to those described in this policy, you can exercise them through the same channel (info@enerwisetech.com), and we will handle your request in accordance with the law that applies to you.

19. Additional information for users in the European Economic Area and the United Kingdom (GDPR and UK GDPR)#

19.1 Scope#

This section applies to users in the European Economic Area (the member states of the European Union, Iceland, Liechtenstein and Norway; the "EEA") and in the United Kingdom. Enerwise has no establishment in the EEA or the United Kingdom. Because we offer carbometria, free of charge, to users in these regions, the General Data Protection Regulation (EU) 2016/679 (the "GDPR") and the United Kingdom General Data Protection Regulation (the "UK GDPR") apply to our processing of these users' personal data under Article 3(2)⁠(a) of each. This section supplements the rest of this policy; for these users, it prevails in the event of any conflict with other sections.

19.2 Controller#

• Controller: Enerwise Enerji Yönetimi ve Verimliliği Çözümleri A.Ş., Altunizade Mah. Kuşbakışı Cad. No:11/1, 34662 Üsküdar/İstanbul, Türkiye. Email: info@enerwisetech.com

19.3 Legal bases#

We process your personal data on the following legal bases under Article 6(1) of the GDPR and the UK GDPR:

We do not rely on consent (Article 6(1)⁠(a)) for any processing. Your account information and your country of residence are necessary to enter into the contract and provide the service; if you do not provide them, you cannot use carbometria. You may leave optional fields blank. We do not process special categories of personal data (Article 9 GDPR).

19.4 Legitimate interests assessment#

Where we rely on legitimate interests, our interests are to keep accounts and systems secure, prevent misuse, fix errors, provide support, protect our rights in legal claims and comply with the law of Türkiye, where we are established. We have weighed these interests against your rights and freedoms: the logs contain only the data needed for these purposes, are deleted 12 months after they are created, can be accessed only by authorized staff, and are never used for advertising, profiling or marketing. People who use an account-based service can reasonably expect such records to be kept to protect the service. You can ask for a summary of our assessment at info@enerwisetech.com and you can exercise your right to object described in Section 19.5.

19.5 Your rights#

Under the GDPR and the UK GDPR, you have the following rights:

• Access (Article 15): to find out whether we process your personal data and, if we do, to receive a copy of it and information about the processing.
• Rectification (Article 16): to have inaccurate or incomplete data corrected. You can also correct your country, unit, currency, language and entries in the app.
• Erasure (Article 17): to have your data deleted. You can delete your account in the app (Section 14).
• Restriction (Article 18): to have processing restricted in the cases set out in law, for example while you contest the accuracy of your data or have objected to the processing.
• Data portability (Article 20): to receive the data you have provided to us and that we process by automated means on the basis of our contract (account information, country and preferences, travel, home energy and annual review entries) in a structured, commonly used and machine-readable format (CSV or JSON), and to have it transmitted directly to another controller where technically feasible. The app does not currently offer a way to download your data directly, so please send this request to info@enerwisetech.com from the email address registered to your account; we will send you the file by a secure method.
• Objection (Article 21): to object, on grounds relating to your particular situation, to processing based on legitimate interests. If you object, we will stop the processing unless we have compelling legitimate grounds that override your interests, rights and freedoms, or we need the data to establish, exercise or defend legal claims. We do not carry out direct marketing.
• Automated decisions (Article 22): we do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Carbon calculations are not decisions of this kind.

How to make a request: Send your request to info@enerwisetech.com from the email address registered to your carbometria account. To prevent your data from being disclosed to someone else, we may verify your identity through your registered email address. We respond free of charge and within one month at the latest; where necessary because of the complexity or number of requests, we may extend this by two further months, in which case we will tell you why within the first month. Where a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on it (Article 12(5)). We notify the recipients to whom we have disclosed your data of any rectification, erasure or restriction (Article 19).

Complaints procedure for UK users: If you believe that we have processed your personal data in breach of the UK GDPR, you can complain to us first (section 164A of the UK Data Protection Act 2018). Send your complaint to info@enerwisetech.com or use the form at https://www.enerwiseai.com/en/contact. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.

19.6 Complaints to a supervisory authority#

• EEA: You can lodge a complaint with the data protection supervisory authority in the member state of your habitual residence, your place of work or the place of the alleged infringement (Article 77 GDPR). List of supervisory authorities: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
• United Kingdom: You can complain to the Information Commission (ICO): https://ico.org.uk/make-a-complaint/

We would appreciate the chance to resolve your concern first, so please contact us before going to an authority. This is not a requirement for any user.

19.7 Processing of your data in Türkiye#

carbometria is operated from Türkiye. When you use carbometria from the EEA or the United Kingdom, you provide your personal data through the app directly to us, as a controller established in Türkiye, and your data is processed in Türkiye. Neither the European Commission nor the United Kingdom has recognized Türkiye as providing an adequate level of data protection; in Türkiye, your data is protected by the KVKK and by the provisions of the GDPR and the UK GDPR that apply to us. If we need to transfer your personal data to another recipient, including processors and recipients in Türkiye, we will do so only in accordance with Chapter V of the GDPR and the UK GDPR (for example, on the basis of an adequacy decision or appropriate safeguards such as standard contractual clauses).

19.8 Retention, security and personal data breaches#

Retention periods are set out in the table in Section 13 and are the same for users in the EEA and the United Kingdom. Security measures are described in Section 16. If a personal data breach affects your personal data, we will notify the relevant supervisory authorities and you where required by Articles 33 and 34 of the GDPR and the UK GDPR.

19.9 Users aged 13 to 17#

We process the data of users aged 13 to 17 in the EEA or the United Kingdom on the same legal bases as for other users (Section 19.3). The legal basis for the account and the service is contract (Article 6(1)⁠(b)), not consent; the age rule for a child's consent in Article 8 of the GDPR and the UK GDPR applies only to processing based on consent (Article 6(1)⁠(a)), so it does not apply directly to this processing. For these users, the defaults are high privacy: there are no ads, we do not access device location, and we do not build profiles for advertising or marketing (Section 17). For users in the United Kingdom, we have set these defaults taking into account the high-privacy, geolocation and profiling standards of the UK data protection regulator's Age Appropriate Design Code.

20. Changes to this policy#

We may update this policy to reflect changes to the service or the law. The current version is always published at this address in English and Turkish, and the "Last updated" date and version number at the top are changed. We will notify you separately in the app or by email before any update that materially changes how your personal data is processed takes effect. If a new processing activity requires explicit consent, we will ask for it separately.

21. Contact#

For questions about this policy or your personal data:

• Email: info@enerwisetech.com
• Support: https://www.enerwiseai.com/en/carbometria/support (links to the form at https://www.enerwiseai.com/en/contact for general support requests)
• Phone: (0216) 474 00 41 (Monday to Friday, 08:30-17:30 Türkiye time)
• Post: Enerwise Enerji Yönetimi ve Verimliliği Çözümleri A.Ş., Altunizade Mah. Kuşbakışı Cad. No:11/1, 34662 Üsküdar/İstanbul

Part 2: KVKK Privacy Notice#

This Privacy Notice has been prepared under Article 10 of Türkiye's Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, to inform users of the carbometria mobile app about the processing of their personal data. It applies to you wherever you use carbometria from. This notice is not a request for approval or consent.

1. Data controller#

As the data controller is established in Türkiye, no data controller representative has been appointed under the KVKK.

2. Categories of personal data processed and their sources#

Device location is not processed; for location, we only keep the country you select and your device's time zone setting. In the app stores' privacy labels, the country you select, the hotel country and the time zone appear as "approximate location"; your device's location is not accessed. Device identifiers (such as IDFV or Android ID) and device names are not processed; the device model appears only in the feedback form and in crash reports shared by Apple and Google. Apple and Google share crash reports in aggregated form or in a form that does not show your identity, and Enerwise does not link them to your account. They are listed here in case they qualify as personal data.

No special categories of personal data are processed. Your diet profile is used only to calculate diet-related emissions; it is not used to draw conclusions about your beliefs or health.

3. Purposes of processing and legal grounds#

We do not rely on explicit consent to process personal data in carbometria. The legal ground for each purpose is set out below.

Reminders are scheduled locally on your device; reminder information is not sent to Enerwise's servers and is not processed by Enerwise.

4. How personal data is collected#

Your personal data is collected electronically, partly by automated means, as follows:

• Directly from you: information you enter in the first-use screen (country, unit and currency), registration, travel, energy, annual review, settings and feedback forms in the carbometria app
• While you use the service: results, points and badges calculated on our servers from the information you enter; the terms acceptance record; email delivery records
• Automatically: activity and usage logs, security and error logs, session records and last activity time created when the app communicates with our servers; your device's time zone setting
• Through Apple and Google: crash reports that these companies share with the developer if you allow this in your device settings
• Through correspondence: support requests, account deletion requests, personal data requests and complaints you send by email or through the contact form

Your device's region and language settings are read only on your device, to show suggestions, and are not sent to our servers. The time zone setting, however, is sent automatically as described above. Data collected in these ways is processed on the legal grounds set out in Section 3.

5. Recipients of personal data and purposes of transfer#

Your personal data is not sold and is not transferred for advertising or marketing. It may be transferred only to the following categories of recipients, in accordance with the conditions in Articles 8 and 9 KVKK:

Service providers process your data only on Enerwise's instructions, as processors.

6. Transfers abroad#

Your personal data is not transferred abroad unless the conditions set out in Article 9 KVKK are met.

7. Retention period#

Your personal data is kept for as long as required for the purpose of processing and for the periods set out in applicable law; when that period ends, it is deleted, destroyed or anonymized. Account data and country and preference information are kept for as long as your account remains open, and are permanently deleted from our servers within 30 days of the time your deletion request is verified and access to your account is closed; they are removed from backups at the end of the backup cycle. Activity and usage logs and security and error logs are kept for 12 months. Separate periods apply to the terms acceptance record, email delivery records, correspondence and deletion records. The detailed retention table is in Section 13 of the Privacy Policy.

8. Your rights under Article 11 KVKK#

Under Article 11 KVKK, by applying to the data controller you have the right to:

a) learn whether your personal data is processed, b) request information about the processing if your personal data has been processed, c) learn the purpose of the processing and whether your data is used in line with that purpose, ç) know the third parties in Türkiye or abroad to whom your personal data is transferred, d) request rectification if your personal data has been processed incompletely or inaccurately, e) request erasure or destruction of your personal data under the conditions set out in Article 7 KVKK, f) request that actions taken under (d) and (e) be notified to the third parties to whom your personal data has been transferred, g) object to a result against you arising from the analysis of the processed data exclusively by automated systems, ğ) claim compensation if you suffer damage because your personal data was processed unlawfully.

Carbon calculations in carbometria are carried out automatically, but they do not involve any decision that produces legal effects concerning you. Your right to object under (g) is not affected.

9. How to apply#

Under the Communiqué on the Procedures and Principles for Applications to the Data Controller, you can submit requests relating to your rights by any of the following methods:

Information your application must contain: Under Article 5 of the Communiqué, your application must include your name and surname and, if the application is in writing, your signature; for citizens of the Republic of Türkiye, your Turkish identity number; for foreign nationals, your nationality and passport number or, if any, identity number; your residential or business address for notifications; if any, your email address for notifications; your phone and fax number; and the subject of your request. Any relevant information and documents should be attached.

Identity verification: To prevent your data from being disclosed to others, we may need to verify that the application comes from you. For this purpose, we may send a verification email to the email address registered to your account.

Response time and fees: Your application will be concluded as soon as possible depending on the nature of the request, and within 30 days at the latest. Applications are, as a rule, handled free of charge. If the response involves an additional cost, a fee may be charged in accordance with the tariff in Article 7 of the Communiqué: no fee is charged for written responses of up to ten pages, and a processing fee of 1 Turkish lira may be charged for each page above ten; if the response is provided on a recording medium such as a CD or flash drive, the fee may not exceed the cost of the medium. Our response will be sent in writing or electronically.

Refund of fees: Under Article 6(5) of the Communiqué and Article 13(3) KVKK, any fee charged will be refunded to you if the application arose from an error by the data controller.

Complaint to the Board: If your application is rejected, you find our response insufficient or we do not respond in time, you may file a complaint with the Personal Data Protection Board under Article 14 KVKK within 30 days of learning of our response and, in any case, within 60 days of the date of your application.

Account deletion requests: If you only want your account and data deleted, you do not need to follow the procedure above: you can delete your account in the app (Profile > Delete account) or by writing to info@enerwisetech.com from your registered email address. Details: https://www.enerwiseai.com/en/carbometria/delete-account

10. Changes#

This Privacy Notice is updated when our processing activities or the law change. The current version is published on this page, and the "Last updated" date and version number are changed. Material changes will also be notified separately in the app or by email.

Version history#