SPECTERGUARD PRIVACY POLICY

2. Data Controller

The data controller under KVKK is our company, whose identity and contact details are set out below.

Trade Name

SPECTER TEKNOLOJİ YAZILIM VE DANIŞMANLIK LİMİTED ŞİRKETİ

MERSIS No

0781117057300001

Istanbul Trade Registry No

1154839

Registered Office

Caferağa Mah. Şifa Sk. No: 19, Kadıköy / İstanbul

E-mail

info@specterteknoloji.com

3. Scans Stay on Your Device

During a scan, the App processes the following raw sensor data only in the moment, in your device's memory:

• Advertisement signals broadcast by nearby Bluetooth devices
• Names of nearby Wi-Fi networks (Android only)
• Magnetometer (compass sensor) readings
• Microphone audio — for live sound analysis; audio is never recorded
• Camera frames — for the live lens reflection finder; no frame is ever saved

This data is processed in real time and is never recorded, stored or transmitted off your device. Specter Teknoloji has no access to it.

4. What Is Stored on Your Device

So that you can review past scans, the App stores only scan summaries on your device: the time of the scan, the indicator score, the types of findings and, if you choose, a place label you type yourself (e.g. "hotel room"). These summaries are not sent to us; you can delete them in the App at any time, and they are removed when you uninstall the App.

Daily tips are local notifications scheduled on your device. No push token is created for them and no information is sent to our server.

5. Professional Service Requests

When you choose to request a professional Specter TSCM sweep from within the App, the following information is sent to Specter Teknoloji over an HTTPS-encrypted connection and delivered to our company mailbox:

• Your name, phone number and (optionally) e-mail address
• City / district, place type (hotel, vehicle, office, home, boat, other), your preferred time and your note
• App language, App version and platform (iOS / Android)
• Only if you tick the box: the summary of a scan (indicator score and finding types)

Purpose

To contact you and to plan and provide the service you request.

Legal basis

KVKK Art. 5/2(c): processing is directly related to establishing or performing a contract. For the optional scan summary, your explicit consent under KVKK Art. 5/1, which you may withdraw at any time.

Collection method

Electronically, from the information you enter in the App's request form.

Retention

At most 2 years after our last contact with you, unless a longer period is required by law. The data is then deleted or anonymised.

Transfers

Not transferred to anyone, except disclosures to competent public authorities that are required by law. Not transferred abroad.

Hosting

Requests are processed and stored on our servers in Türkiye.

Sending a request is entirely optional. Without your name, phone number, city and place type, however, we cannot contact you or plan the service.

To prevent abuse, the IP address a request comes from is kept not in raw form but as a keyed one-way hash, solely to limit the number of requests; this record expires after one hour and is deleted by automatic clean-up (KVKK Art. 5/2(f), legitimate interest).

6. Permissions and Why They Are Needed

The permissions the App requests and what they are used for are listed below. You can revoke any permission at any time in your device settings; only the related feature will then stop working.

Bluetooth

To scan for indicators of nearby Bluetooth trackers (AirTag, SmartTag, Tile, Chipolo, etc.).

Location

Android requires the location permission for Bluetooth and Wi-Fi scanning. Your location is not collected, stored or transmitted by the App.

Camera

For the lens reflection finder. The image is processed live only; no frame is ever saved.

Microphone

For live sound analysis. Audio is never recorded.

Notifications

To show daily tips as local notifications.

Nearby devices (Android 12+)

Required on Android 12 and later to scan for Bluetooth devices.

7. Detection Only, Indicative Results

The App is detection-only: it does not block, jam, interrupt, listen to or intercept any communication. Scan results are indicators only; they are not a definitive verdict on any environment and do not replace a professional TSCM sweep.

8. Third Parties

The App contains no advertising, analytics or tracking services and no third-party SDK that collects data; your data is never sold. The store you download the App from (Apple App Store, Google Play) processes download and purchase data under its own privacy policy; that processing is outside Specter Teknoloji's control.

9. Security

Service requests are transmitted only over HTTPS-encrypted connections and are seen only by the operations team handling the request. Raw scan data never leaves your device; the only scan information on our side is the summary attached to your request if you tick the box.

10. Your Rights (KVKK Art. 11)

Under Article 11 of KVKK you have the right to learn whether your personal data is processed; to request information if it has been; to learn the purpose of processing and whether it is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data; to request deletion or destruction within the framework of Article 7; to request that such corrections or deletions be notified to the third parties to whom the data was transferred; to object to a result against you arising exclusively from automated analysis; and to claim compensation for damage caused by unlawful processing.

You may send your application by e-mail to info@specterteknoloji.com or in writing to "Caferağa Mah. Şifa Sk. No: 19, Kadıköy / İstanbul". Your application will be concluded as soon as possible depending on its nature and within 30 days at the latest, as a rule free of charge. If your application is rejected, you find the answer insufficient or it is not answered in time, you may lodge a complaint with the Turkish Personal Data Protection Board (KVKK Kurulu).

Because there is no account and scan summaries are kept only on your device, you can exercise your access and deletion rights over them directly in the App. For applications about a service request you sent, quoting your request reference number (SG-…), if you have it, speeds things up.

If the law of your country (e.g. the EU General Data Protection Regulation) grants you additional rights, you can exercise them through the same channels.

11. Changes

When we update this policy, the current version is published at this address and the date at the top is updated.