Türkçe

Privacy Policy

U2 AI SmartHome · Version 1 · 27 October 2026

U2 AI SmartHome lets residential site managements work with residents, staff and building systems in one app. The app is developed and operated by U2 AI Studio Teknoloji A.Ş. This policy explains which personal data the app processes and why, where it is stored and what your rights are.

Controller and processor

The management of the site where you use the app is the data controller for your personal data. U2 AI Studio is the data processor that processes the data on behalf of, and on the instructions of, the site management. Your site's information notice and consent texts are shown in the app at first sign-in and can be read at any time on the Account page.

Data we process

• Identity and contact: first name, last name, phone number.
• Relationship to the site: apartment, residency type (owner, tenant), role (management, security, technical staff, resident, business).
• Vehicle: licence plate; the vehicle owner's name and national ID / tax number from the registration (shown only to site management); make, model, colour, kind and chassis number; the registration document image.
• Identity verification: ID card image (only with your explicit consent). The national ID number you enter with a vehicle request is only compared with the number on the registration document and is not stored.
• Entry records: the plate read by the car park camera, date and time, and the vehicle photo taken by the camera.
• Content you share in the app: fault and service requests and their photos, poll votes, announcement read receipts.
• Account and security records: sign-in time, IP address, device information and a log of actions taken in the app.
• Notification address: the device's push notification token, used to deliver notifications to your phone.

The app shows no ads, does not track you across apps or websites, does not sell your data and uses no third-party analytics.

Purposes

• Verifying residents, staff and vehicles; limiting car park and building access to authorised people.
• Site security: alerting management and security about unrecognised vehicles and suspected tailgating.
• Building management duties: announcements, polls, document archive, fault and request tracking.
• Sending one-time sign-in codes by SMS and protecting your account.

Legal bases

Turkish Personal Data Protection Law (KVKK) Art. 5/2-(c) performance of duties arising from the condominium relationship, Art. 5/2-(ç) legal obligations and Art. 5/2-(f) legitimate interest in site security. Storing ID and registration images additionally relies on your explicit consent, which you can withdraw in the app.

Where data is stored and transfers

Data is processed and stored in Turkey, on servers in the Amazon Web Services Istanbul data centre, over encrypted connections. The following processors are used to provide the service:

• Amazon Web Services (Istanbul): hosting and backups.
• NetGSM: delivery of sign-in code text messages (phone number and code only).
• Apple and Google push notification services: delivering notifications to your phone. Notifications contain no personal data; only the device's notification token is sent to these services.

Data may be disclosed to competent authorities upon a court order or a request from prosecutors or law enforcement. It is not shared with any other third party.

Who can see what

Each user sees only what their role requires. Residents do not see the personal data of other apartments or camera images. Camera images and entry records are available only to site management and security. The building display screen shows no personal data.

Retention

• Entry records and entry photos are deleted after 180 days.
• Account and site records are kept during your residency and archived afterwards for the period set by the site management.
• One-time sign-in codes expire shortly and are not stored.

Security

Connections are encrypted (HTTPS). Access is limited by role and by site; each site sees only its own data. Management actions are written to an audit log. Documents are served through short-lived signed links; photos only to authorised sessions.

Deleting your account

In the app, go to Account > Close my account (Hesap > Hesabımı kapat) to request account closure. The request is sent to your site management; once it confirms your residency, your account is closed, sign-in and notifications stop and your vehicles are removed from the car park camera.

If you cannot access the app, contact your site management or write to info@u2aistudio.com with your site name and registered phone number.

Closing your account does not delete records that the site management must keep for legal obligations (such as entry and action logs) before their retention period ends; those records are deleted when the period ends.

Your rights

Under KVKK Art. 11 you may request information about, correction of, deletion of and object to the processing of your data by contacting your site management. For questions about the app: info@u2aistudio.com.

Changes

If this policy changes, the new version is published on this page; significant changes are announced in the app.