Privacy Policy

Last updated: 08.08.2026

This Privacy Policy (“Policy”) describes how GreenCode (“GreenCode”, “Company”, “we”) collects, processes, stores, protects and shares personal data within the scope of the Botanic application (“Botanic”). The Policy aims to comply with relevant legislation, primarily the Law No. 6698 on the Protection of Personal Data (“KVKK”), and where applicable, the European Union General Data Protection Regulation (GDPR).

GreenCode is the data controller under this Policy. Terms written in capital letters shall have the meanings set forth in the Terms of Use unless otherwise defined.

1. Data Collected and Method

Data in the following categories; Data may be collected from you, your device, distribution channels such as the App Store, or automatically when you use our Services:

• Identity: first name, last name (when you contact us)

• Contact: email, phone (if you share it)

• Transaction security and application data: IP address, device name, operating system, application configuration, usage time, in-app purchase history, token if you allow notifications; advertising/developer identifiers (IDFA/IDFV) if you allow them; location (e.g., weather/regional pricing) if you allow it. You can turn off location; the IP address may still be used for Service delivery.

• User content: messages, text, photos, images, videos, and similar content that you upload or transmit. Camera access may be requested for features such as plant identification/diagnostics; you can refuse, but some features may not be available.

• Customer transaction: order/subscription information

• Marketing (permitted): advertising identifiers

Log data may include device IP, device name, OS version, configuration, and usage statistics.

2. Processing Principles

Data is processed in accordance with the law and principles of fairness, accurately and, where necessary, up-to-date, for specific, explicit, and legitimate purposes, limited and proportionate to the purpose, and stored for the period required by legislation or necessary for the purpose.

3. Processing Purposes

Your data may be processed specifically for the following purposes:

• To provide the service, establish and perform the contract

• Plant analysis, diagnosis, chat and related features

• Subscription / in-app purchase and automatic renewal processes

• Improving user experience, personalization and product development (including training of AI models; you can object to this via support@greencode.app)

• Information security, audit, business continuity

• Support, complaints and communication

• Legal obligations and providing information to authorized authorities

• Marketing / campaign analysis if you have given your explicit consent

• Storage and archiving

4. Legal Grounds

Processing; The establishment/performance of a contract, the establishment-use-protection of a right, legal obligation, legitimate interest (provided it does not harm your fundamental rights and freedoms), and, where necessary, your explicit consent may be the basis for your use. Explicit consent (e.g., App Store/system permissions) is required for marketing identifiers.

5. Third-Party Links

Botanic may contain links to sites or applications outside of our control. GreenCode is not responsible for their privacy practices. The terms and conditions of third parties apply to the information you provide to them.

6. Cookies

Cookies or similar technologies may be used for the operation of the service, performance and functionality, and (where applicable) for interest-based content delivery. You can delete or block cookies from your browser/device settings.

7. Push Notifications

Push notifications may be sent for application updates or service notifications. You can disable them from your device settings.

8. Storage

Data is stored for a reasonable period as required by law or necessary for the purpose of processing; within the statute of limitations periods. After the purpose is fulfilled, data is deleted, destroyed, or anonymized unless there is a legal obligation or your consent.

9. Security

GreenCode takes reasonable technical and administrative measures to prevent unauthorized access, unlawful processing, disclosure, alteration, or destruction (such as access authorization, encryption, record keeping, backup, security testing, and personnel awareness). No method is 100% secure. In case of a breach, users and, if necessary, the relevant authority are informed.

10. Domestic/International Transfer

The server and cloud infrastructure may be located abroad. Data may be transferred abroad for storage, business activities, after-sales support, and customer relations purposes. It may also be shared with authorized public institutions and service providers such as those providing analysis, crash reporting, cloud, and artificial intelligence infrastructure, in accordance with Articles 8-9 of the Personal Data Protection Law (KVKK) and relevant legislation.

11. Data Subject Rights (KVKK)

Under Article 11 of the KVKK; You have the right to know whether your data is being processed, to request information, to verify its suitability for the purpose, to know the third parties to whom it is transferred domestically/internationally, to request the correction of inaccuracies and their notification to the recipients, to request deletion/destruction/anonymization and notification if the reasons for processing cease to exist, to object to unfavorable outcomes resulting from automated systems, and to claim damages arising from unlawful processing.