EchoFarmPrivacy policy
In short: you sign in to EchoFarm with your Apple or Google account. For sign-in we keep only your user ID and email address. Your field, animal and photo records stay on your phone; only if you tap “Back up my data” are the text and measurements backed up to your account. We don't show ads, we don't track you, and we don't sell your data.
1. Who we are
The EchoFarm app is developed by 97 Yazılım Ltd. Şti. (“we”). This policy covers the EchoFarm iOS and Android app and the pages at echofarm.ai. 97 Yazılım Ltd. Şti. is the data controller for your personal data. Questions: zai@97.team · +90 212 909 00 97.
2. Account and sign-in
You use the app by signing in with Apple or signing in with Google. You don't create a separate password. When you sign in, we keep:
- The user ID provided by the sign-in service, and which service you used (Apple or Google)
- Your email address. If you choose “Hide My Email” with Sign in with Apple, we keep the relay address Apple gives us.
We don't ask for your name, phone number or profile photo. Sign-in data is kept in Google Firebase Authentication. The key that keeps you signed in is stored in your phone's secure Keychain.
3. Cloud backup
When you tap Back up my data on the Me screen, the text and measurements of your records on the phone (plots, soil and water values, irrigation, greenhouse, soilless and livestock records, notes, settings) are backed up to your account. Photos are not included. The backup is kept in Google Cloud Firestore, in the Frankfurt (europe-west3) region, in a space that only your account can read and write. Each backup replaces the previous one; only one latest backup is kept. The backup exists only so you can restore it; it isn't used for anything else and isn't shared with anyone.
4. Information kept on your phone
The following is stored only on your phone and stays there until you delete it:
- The nickname and village details, if you enter them
- Plot boundaries you draw on the map, crops, planting dates, greenhouse and soilless system records
- Soil and water test values, irrigation and water ledger records
- Plant photos you take and scan results
- Animal records, observation notes, birth dates and, if you save it, your veterinarian's phone number
- Field journal, assistant conversations, the app's transparency log and your language choice
- Credentials of devices you connect
5. Data that leaves your phone
Some features send requests to outside services to work. Here is what goes to which service:
| Service | When | Data sent |
|---|---|---|
| Sign in with Apple (Apple) or Sign in with Google (Google) | When you sign in | The sign-in request; your user ID and email come back |
| Google Firebase Authentication | On sign-in, session renewal, sign-out and account deletion | User ID, email, sign-in service, your device's IP address |
| Google Cloud Firestore (Frankfurt) | When you tap “Back up my data” or “Restore backup” | The text and measurements of your records (no photos) |
| Open-Meteo | When weather, evaporation and soil moisture are shown | Your field's approximate location (latitude and longitude rounded to about 1 km) |
| Esri (ArcGIS) satellite map | When the map opens | The map area being viewed, your device's IP address |
| Apple speech recognition (iOS), Google speech recognition (Android) | When you use a voice note or voice question | The voice recording |
| The maker of a device you connect | When you connect to your own sensor or controller from the Device Hub | The credentials you enter for that device and the commands you send; directly to a device on your local network, through the maker's server for a cloud device |
These services process the data under their own privacy policies. For Firebase, Google acts as a processor on our behalf. If you don't use a feature, no data goes to that service.
Photos, reports and the assistant: Your plant photos, lab reports and what you write to the assistant don't leave your phone; spot marking, the symptom guide and the assistant's answers are produced on the phone.
6. Why we process it
- Sign-in and account: to provide the app to you and to make sure only you can open your backup (performance of a contract).
- Backup: because you ask for it, and only so you can restore it (performance of a contract).
- Location, map and voice: when you start the feature, to make that feature work.
We don't use your data for profiling, advertising or marketing.
7. Device permissions
- Camera and photos: for photos of plants, soil reports and trees.
- Location (only while using the app): to fetch your plot's weather and map.
- Microphone and speech recognition: for voice notes and voice questions.
- Bluetooth and local network: to find and read your own sensors in the Device Hub.
- Notifications: if you turn them on, frost, heat, irrigation and birth alerts are created and shown locally on the phone; they aren't sent from a server.
All permissions are optional and you can turn them off at any time in your phone's settings.
8. Ads, tracking and selling
There are no ads in the app. We don't track you across apps or websites, and we don't use analytics, advertising or tracking libraries. We don't sell, rent or share your data. This website doesn't use cookies.
9. Village sharing
Anonymous contributions to the village data pool (disease reports, soil data, water use) are off by default. It only starts if you turn it on, and you choose item by item what to share. Shared data doesn't include your name or your field's exact location.
10. Retention and deletion
- Records on your phone: stay on your phone until you delete them or remove the app.
- Account and backup: kept while your account is open. The Delete my account button in the app deletes your account, email address and backup immediately and permanently; if you signed in with Apple, the Apple authorization is revoked as well. If you can't reach the app, write to us and we'll delete it within 30 days.
- Signing out doesn't delete your account or backup.
Steps: Delete your data.
11. International transfers
The backup is kept in the European Union (Frankfurt). Sign-in data may be processed on Google's global infrastructure, including in the United States. Open-Meteo, Esri, Apple and Google are also services with servers outside Türkiye. These transfers follow Article 9 of Türkiye's Personal Data Protection Law No. 6698 (KVKK) and, in Europe, the GDPR's transfer rules (EU Standard Contractual Clauses for Google).
12. Children
EchoFarm is designed for adults who farm and raise livestock. It isn't intended for anyone under 16 and doesn't knowingly collect data from them. If you think a child has created an account, write to us and we'll delete it.
13. Security
All requests to outside services are sent over encrypted HTTPS. Your backup can be reached only with your own account's session; the access rule doesn't let any other account read it. Unencrypted connections to your own devices on the local network are allowed only to private network addresses. Your phone's lock also matters for keeping your data safe.
14. Your rights
Under Article 11 of KVKK and, if you're in Europe, the GDPR, you have the right to access your data, and to ask for it to be corrected, deleted, restricted or ported, and to object to its processing. You can see, export (Me → Data and privacy → Export everything) and delete your records and your account directly in the app. For other requests write to zai@97.team; we reply within 30 days at the latest. You also have the right to complain to Türkiye's Personal Data Protection Authority or to the data protection authority of your country in Europe. Details: KVKK notice.
15. Language
This policy is published in Turkish and English. Both texts carry the same content; if they differ, the Turkish text prevails.
16. Changes
We update this policy as the app changes. We announce important changes on this page and in the app in advance. The date at the top of the page shows the latest update.
17. Contact
97 Yazılım Ltd. Şti.
Email: zai@97.team
Phone: +90 212 909 00 97