1. Scope and responsible party
This policy applies to the Ortiva iOS application, developed by IBlockTechs, and services connected to Ortiva. For privacy or personal-data requests, email hello@iblocktechs.com. Our contact location is Istanbul, Türkiye.
2. Data we process
| Category | Examples | Why it is used |
|---|---|---|
| Account and profile | User ID, full name, email, optional phone number, IBAN, profile image, wallet address and KYC status | Account creation, authentication, profile features and eligibility checks |
| Financial and app activity | Portfolio, holdings, orders and transactions, rent/income history, price alerts, watchlist and notifications | Core investment, reporting and notification functionality |
| Device and security | Device name/model, operating system and app version, session time, approximate city/country derived from IP address, and APNs device token | Display active sessions, protect accounts, deliver notifications and prevent abuse |
| Support communications | Email, issue description and information you choose to include with a request | Investigate and answer requests and improve the service |
Data that stays on your device
Some settings, including language, theme, recent searches and the biometric-lock preference, may be stored on your device. Ortiva cannot access Face ID or Touch ID data; biometric authentication is performed by Apple’s operating system.
3. How data is collected
- Directly from you when you create an account, edit your profile or use app features;
- Automatically when you use the app and its security features;
- Through Apple Push Notification service (APNs) if you grant notification permission;
- When you contact us for support.
4. Purposes and legal bases
We process data for the following purposes, relying as applicable on performance of a contract, legitimate interests, legal obligations or consent:
- Create your account, authenticate you and manage your profile;
- Provide portfolio, transaction, asset, rent income, report, watchlist and price-alert features;
- Send notifications you request and apply your notification choices;
- Protect account and session security, troubleshoot, and prevent fraud or abuse;
- Answer support requests and comply with applicable obligations.
5. Service providers and transfers
Ortiva relies on a limited number of infrastructure providers:
- Supabase: authentication, database, file storage, realtime data and server functions;
- Apple: app distribution, operating-system services and, when enabled, APNs notification delivery;
- Blockchain networks and explorers: displaying or verifying public wallet addresses and transaction identifiers.
These providers may process data under our instructions and their own service terms. Because of the technical structure of these services, data may be processed outside Türkiye; appropriate safeguards are used where required by applicable law. We do not sell personal data or share it with data brokers for advertising.
6. Tracking and advertising
The app does not use an advertising SDK, IDFA-based advertising profiles or tracking across other companies’ apps and websites. The current iOS version does not include a third-party marketing analytics SDK. If this changes, this policy and the App Store privacy disclosure will be updated.
7. Retention and deletion
Account data is retained while your account is active. Security and transaction records are retained only as needed to protect the service, resolve disputes and meet applicable legal obligations. Account data that is not legally required to be retained is deleted or de-identified after account deletion is completed.
8. Security
We use technical and organisational measures such as encryption in transit, Supabase row-level access controls, authentication, Apple Keychain and device security. No internet transmission or storage method is completely secure, but we maintain and review controls appropriate to the risk.
9. Your rights and choices
Under KVKK and, where applicable, GDPR, you may have rights to access, correct or delete data, restrict or object to processing, and receive a copy of your data. You can update profile information and notification preferences in the app and disable notification permission in iOS Settings.
Email hello@iblocktechs.com to make a request. We may need to verify your identity before responding in order to protect your account.
10. Children’s privacy
Ortiva is not directed to anyone under 18. If we learn that a minor’s data has been processed without an appropriate legal basis, we will take reasonable steps to delete it.
11. Changes
We may update this policy when app features, service providers or legal requirements change. Material changes will be communicated in the app or on this page, and the latest date is displayed at the top.