Ephor Servis mobile app (iOS / Android) and our customer-facing web pages
The Turkish version of this policy is the binding text; this English version is provided for information.
Personal data processed in the Ephor Servis app is processed by Ephortech Teknoloji Hizmetleri Ltd. Şti. as the data controller, under Turkish Personal Data Protection Law no. 6698 (KVKK).
Contact: [email protected]
Ephor Servis is a business app built for the employees of technical service companies that use the EphorCRM system. Accounts cannot be created from the app; your account is set up by your employer or by Ephortech. The app is not intended for general consumer use.
This policy covers not only the app but also the web pages we open to claim owners: document upload (belge.ephortech.com), service evaluation and claim tracking. These pages need no account either; they work through the link we send you.
The table below mirrors, item by item, the answers we give in the Google Play Data safety form and in the App Store App Privacy declaration. The “Shared” column states whether the data is transferred to a third party; data goes only to servers operated by Ephortech. The coordinates sent to Google Maps Platform to calculate the estimated arrival time fall outside that definition and are described separately in section 5.
| Data type | Collected | Shared | Purpose | Required / optional |
|---|---|---|---|---|
| Name | Yes | No | App functionality — account and team list | Required |
| Email address | Yes | No | App functionality — signing in | Required |
| Phone number | Yes | No | App functionality — call bridge (the switchboard calls you first) | Optional |
| Location (precise and approximate) | Yes — only during a trip | No | App functionality — live trip tracking | Optional |
| Photos | Yes | No | App functionality — damage record | Optional |
| Videos | Yes | No | App functionality — damage record | Optional |
| In-app messages (case correspondence) | Yes | No | App functionality — messages between the technician and the operations team | Optional |
| App activity (diagnosis, repair note, status change) | Yes | No | App functionality — work record | Optional |
| Device ID (push notification token) | Yes | No | App functionality — delivering push notifications | Optional |
| Crash logs and app version | Yes | No | App functionality and analytics — debugging | Required |
The app works without the data marked optional: a user who does not enter a phone number calls the customer from their own line, a technician who adds no photo or video can still progress the case, and a user who denies the location permission simply cannot use live trip tracking.
What we do not collect. The app contains no advertising network, no tracking and no third-party analytics SDK. We do not collect advertising identifiers, contacts, calendar, SMS, audio recordings, financial data or health data; the audio recording permission has been removed from the app package. Your data is not sold.
Location is processed only for the live trip tracking feature. The points below describe that feature in full.
Collection starts only after you tap “Yola Çıktım” (“I’m on my way”) on a case, and continues until you reach the address or stop it yourself. Until you give that consent your location is never collected; every other function of the app — the case list, photos, invoices and status updates — works without location.
Collection continues while the app is in the background and while it is closed. This is necessary because the technician is driving with the phone in a pocket or with the screen off; foreground-only tracking would stop the moment the drive begins.
Outside a trip, location data is never collected. Collection ends by itself when the trip finishes; your location is not tracked during ordinary use of the app, outside working hours or while you are on leave.
Only Ephor’s internal team (operations staff and managers). The customer never sees your location; they receive only a text message saying that the service team has set off or is approaching, containing no coordinates and no map link.
Location traces are deleted automatically after 7 days. The trip record itself (which case was visited, when, and the arrival time) is kept as a work record and contains no location data.
While tracking is active your device shows a persistent notification: “Ephor Servis — konum paylaşımı açık” (“Ephor Servis — location sharing is on”). It cannot be dismissed for as long as sharing continues, so you can always see that tracking is running.
Stated as plainly as Google Play requires: Ephor Servis collects location data, including while the app is closed, in order to track the technician’s trip to the customer’s address, send the customer an approach notification and record the arrival time. Collection begins only after the technician taps “Yola Çıktım”.
On iOS, the system location indicator stays visible in the status bar for as long as sharing is active.
When you ask for directions to an address, the address is handed to the map app on your device — a one-off hand-off that you start yourself, and your location is not sent to us.
To assess your claim we sometimes need a photo of the device, its serial-number label, its invoice, or a short description of how the damage happened. In that case we send you a link by SMS that is specific to that single claim file. The link is sent one by one by our operator; there is no automatic or bulk sending. You do not need an account to open the page.
The Ephortech team can see what you upload. If your claim runs under an insurance company's programme, the requested documents are shared with that company — they are collected at its request in the first place. If your file has been routed to an authorised service centre, that centre can see the device and damage photos so the repair can be carried out; the device invoice is not visible to the service centre. Beyond this, the data is not shared with third parties, not used for advertising and not sold.
This section describes a flow that runs on the web. The store table above is the declaration of the Ephor Servis mobile app; the document upload page is not part of the app.
All traffic between our app or web pages and our servers is carried encrypted (HTTPS/TLS); unencrypted connections are not permitted. Records are held on servers operated by Ephortech; uploaded images and documents are stored in Cloudflare R2 object storage and can only be opened through short-lived signed links.
No data is transferred to any third party other than the following:
The app contains no advertising network, no tracking and no third-party analytics SDK. Crash logs are also sent to our own server rather than to a third-party service. Your data is not used for advertising and is not sold.
Records relating to work cases are retained in line with applicable legislation and contractual obligations. Sessions are valid for at most 30 days; when a password is changed, sessions on all devices are invalidated.
Location traces collected during live trip tracking are deleted automatically after 7 days.
A document-upload link sent to a customer expires after 7 days; the link record (including the phone number) is deleted within 90 days at the latest. Uploaded documents remain part of the claim file.
Under article 11 of the KVKK you have the right to: learn whether your personal data is processed; request information about it if it has been processed; learn the purpose of processing and whether the data is used in line with that purpose; know the third parties, in Turkey or abroad, to whom the data has been transferred; request that incomplete or inaccurate data be corrected; request that it be erased or destroyed; request that these actions be notified to the third parties the data was transferred to; object to an outcome to your detriment arising from analysis carried out solely by automated systems; and claim compensation if you suffer damage because the data was processed unlawfully.
Once your account is closed you can no longer sign in; all your sessions and device registrations are deleted. The work records you entered (case notes, correspondence, status history, photos) remain on the case because of legal and audit obligations.
The last remaining manager of a service company cannot close their account from the app, because the company would be left with no one able to manage it. In that case please write to our support address.
You can send any request under article 11 of the KVKK, including complete erasure of your data, to [email protected]. Your request is answered within 30 days at the latest; statutory retention obligations are reserved.
When this policy is updated it is published on this page, and the effective date and version number above are changed.