Privacy Policy

inSCADA Mobile (Android and iOS) application privacy policy

Effective date: October 7, 2026

This privacy policy applies to the Android and iOS (iPhone/iPad) versions of the inSCADA Mobile application (the "App") developed by İNS YAZILIM SANAYİ VE TİCARET A.Ş. ("INS Yazılım", "we"). It explains what data the App processes, why, and what your rights are.

1. How the App works and who is responsible for your data

inSCADA Mobile is a client application for monitoring industrial facilities. The App connects to an inSCADA server chosen by you or your organization; process values, alarms, trends, reports, screens and chat messages are stored on and displayed from that server.

  • If you use the inscada.cloud service, INS Yazılım is the data controller for your personal data on that server.
  • If you connect to your organization's own inSCADA server, your organization is responsible for the data on that server. INS Yazılım does not access data on such servers; please contact your organization's administrator for any request about this data.

2. Data we process

Account and session information

  • Username and password: Sent only for sign-in, over an encrypted connection (HTTPS), to the server you connect to. Your password is not stored on the device.
  • Session token: When "Remember me" is selected, it is stored in the device's secure storage (Keychain on iOS, encrypted storage on Android) to renew your session, and deleted when you sign out.
  • Name, email address and phone number: Read from your account profile on the server and displayed in the App.
  • Server address: The address of the server you connect to is stored on the device.

Data created while you use the App

  • Your actions: Actions such as acknowledging alarms, writing values or starting/stopping connections are sent to the server and may be recorded in the server's audit logs together with your username.
  • Chat messages: Messages you send are stored on the server and can be seen by authorized users of the same workspace (space).
  • App device identifier: On first use the App generates a random identifier and sends it to the server to manage your sessions. It is not your device's hardware or advertising identifier and is lost when the App is deleted.
  • Technical connection data: As with any internet connection, your IP address is visible to the server you connect to and may appear in its logs.

Data that stays on your device

  • Camera: Used only to scan the QR code when pairing a TV display. The image is processed on the device and is neither stored nor sent; only the scanned pairing code is sent to the server.
  • Photos: A profile photo you choose is stored only on the device and is not uploaded. Charts and reports you export are saved to your device or shared with an app you choose, only at your request.
  • Preferences: Display name, language, theme, dashboard and notification settings are stored on the device.

Data we do not collect

The App does not collect your location, contacts or advertising identifier. The App contains no advertising, analytics or user-tracking tools. Your data is not sold and is not used for marketing.

3. Platform differences

  • Push notifications (Android only): If push notifications are enabled on the server you connect to, your device's Firebase Cloud Messaging (Google) token is registered with the server and alarm and chat notifications are delivered through that service. The token is removed from the server when you sign out.
  • Background alarm checks (Android only): If you turn on alarm notifications, the App periodically checks your server for active alarms even when the App is closed.
  • Sign in with Google (Android only): If your server supports it, you can sign in with your Google account. In that case Google shares your name and email address with the server you connect to under Google's own privacy policy, and the server may use them to create or match your account.
  • App updates (Android only): New-version checks are performed through Google Play.
  • iOS: The iOS version currently has no push notifications, background alarm checks or Sign in with Google; notifications are shown only while the App is open.

4. Purposes of processing

Data is used only to provide the App's functionality: authentication, displaying facility data, alarms and reports, delivering notifications, team communication, and system security and auditing.

5. Third parties

Your personal data is shared with third parties only in the following cases:

  • Google LLC, on Android, for push notifications and Sign in with Google (Firebase Cloud Messaging, Google Sign-In);
  • service providers operating the inscada.cloud infrastructure on our behalf, solely to provide the service;
  • where required by law, court order or a request from a competent authority.

6. Retention

  • Data on the server: On inscada.cloud, kept for as long as your account exists; on organization servers, the retention period is set by your organization.
  • Data on the device: Session information is deleted when you sign out; all other App data is removed from the device when you delete the App.

7. Security

The App communicates with the server only over encrypted connections (HTTPS). Session information is kept in the operating system's secure storage. Before connecting to a server that uses a self-signed certificate, the certificate is presented for your approval.

8. Your rights and deleting your account

Under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to access your data, request its correction or deletion, restrict its processing, and object.

To delete your inscada.cloud account: Send an email to info@inscada.com from the email address registered to your account, with the subject "Account Deletion Request" and your username. Your request will be completed within 30 days at the latest: your account, name, email address, phone number and notification tokens are deleted, and your chat messages and the user information in audit records are deleted or anonymized. Records that must be kept by law may be retained for the required period.

For an account on your organization's server: Please contact your organization's system administrator for deletion and other requests.

9. Children

The App is a professional tool for businesses and is not directed at children under 16. We do not knowingly collect personal data from children.

10. Changes

This policy may be updated. The current version is always published in the App and on our website; significant changes are announced through the App or the website.

Contact Us

İNS YAZILIM SANAYİ VE TİCARET A.Ş.
Mustafa Kemal Mah. Dumlupınar Bul. No: 266C İç Kapı No: 46, 06530 Çankaya / Ankara, Türkiye
Email: info@inscada.com