LABGO Mobile App Privacy Policy

Last updated: 29 September 2026

This policy explains which personal data the LABGO mobile application (the “App”), developed by GELECEK YAZILIM MÜHENDİSLİK MEDİKAL VE ARAŞTIRMA GELİŞTİRME PAZARLAMA TİCARET LİMİTED ŞİRKETİ (“Gelecek Yazılım”, “Futurelab”, “we”), processes, for what purpose and how.

The App is a corporate application developed for authorised personnel (couriers) who transport blood samples from health centres to laboratories. There is no public sign-up; accounts are created by the organisation.

1. Data controller

Information relating to samples and patients is processed on behalf of the health institutions we serve. For that data the relevant health institution is the data controller and Gelecek Yazılım is the data processor.

2. Data we process

Account information: Full name, username or e-mail address, role and the organisation you belong to. Your password is stored on the server only in an irreversible form.

Operational records: Racks picked up and delivered, bag identifiers; hand-over, transfer and laboratory acceptance times; transport durations and the temperature records of the bags. These records are associated with the user who performed the transport.

Technical records: The time and IP address of requests made to the server, for security and error detection.

Stored on your device: Session keys (in the device's secure storage), your language preference, your consent to permissions, and operations pending while there is no internet connection. Session keys are deleted from your device when you sign out, the rest when you uninstall the App.

The App does not display patient names or identity numbers and does not store them on your device. Only the tube barcode and the transport code are used for tube verification.

3. Camera

The camera is used only to scan QR codes and barcodes, and only while you have the scanning screen open. No image is recorded or sent to the server; only the text of the scanned code is transmitted to the server.

4. Location

In this version the App does not collect location information and does not send it to the server. If a feature using location is added in the future, this policy will be updated and location permission will be requested separately.

5. Purposes of processing and legal bases

• To enable user sign-in and authorisation: conclusion and performance of a contract (Turkish Data Protection Law “KVKK” art. 5/2-c).
• To record sample transport, the hand-over and transfer chain and the cold chain: compliance with a legal obligation and performance of a contract (KVKK art. 5/2-ç and 5/2-c).
• To ensure the security of the service, detect errors and improve the service: legitimate interest (KVKK art. 5/2-f).

6. Sharing of data

Your personal data is not sold and is not used for advertising purposes. The App contains no advertising, analytics or tracking tools.

Data is shared only with the following parties:

• The health institutions served (family health centres and laboratories): transport and delivery records.
• Hosting service provider: Our servers are hosted in Hetzner Online GmbH's data centres in Germany. This transfer is carried out with the safeguards required under KVKK art. 9.
• Competent authorities and public bodies: only where legally required.

7. Retention periods

Personal data is retained for as long as the purpose of processing requires and the relevant legislation prescribes. Account information is kept for as long as the account is active; transport, delivery and temperature records for the period prescribed by the applicable health legislation and the institutional contract; technical records are kept for a limited period for security purposes. When the period expires the data is deleted, destroyed or anonymised.

8. Security

All connections are encrypted (HTTPS). Session keys are held in the device's secure storage and are short-lived. Each user can access only the information permitted by their role.

9. Your rights

Under KVKK art. 11 you have the right to learn whether your personal data is being processed, to request information if it has been processed, to learn the purpose of processing and whether the data is used in line with that purpose, to know the third parties to whom it has been transferred, to request rectification if it has been processed incompletely or inaccurately, to request its erasure or destruction within the conditions set out in KVKK, to object to an adverse outcome arising solely from analysis by automated systems, and to claim compensation if you suffer damage due to unlawful processing.

You can send your requests to mehmet_unluel@gelecekmuhendislik.com. Requests are answered within 30 days at the latest.

10. Account and data deletion

LABGO accounts are created by the organisation; an account cannot be created from within the App.

To request deletion of your account and your personal data:

1. Send an e-mail with the subject “LABGO account deletion request” to mehmet_unluel@gelecekmuhendislik.com.
2. State your username and the organisation you belong to in the e-mail.
3. Once your identity has been verified, your request is processed within 30 days at the latest and you are informed.

Upon a deletion request your account information (full name, username, e-mail) is deleted. Transport, delivery and temperature records that must be retained by law are deleted or anonymised at the end of the retention period. You may also submit your request through the organisation you belong to.

11. Children

The App is not intended for persons under 18 years of age.

12. Changes

When this policy is updated, the date at the top of the page changes. Significant changes are also announced within the App.

13. Contact