Who we are
Rhety Eğitim Teknolojisi Anonim Şirketi
Kandilli Mah. Rasathane Cad. Kandilli Rasathanesi Teknopark Binası B Blok
No: 104/12, İç Kapı No: 9, Üsküdar / İstanbul, Türkiye
MERSİS: 0735233539000001
info@rhety.com · 0212 706 7220 · https://rhetylivespeaking.com/contact
Rhety Eğitim Teknolojisi Anonim Şirketi (“Rhety”) is the developer and technical service provider of the Rhety Live Speaking iPhone app.
The app is provided to schools and organizations. Your school or organization may be the data controller for the creation of student, parent and teacher accounts, the management of educational processes and the processing of academic information. Rhety may process this data as data processor on the instructions of the relevant school or organization.
Rhety is separately the data controller for the processing it carries out to ensure the security of the app, keep technical error logs, manage support requests and fulfill its own legal obligations.
What this covers
This Privacy Notice explains what the Rhety Live Speaking iPhone app does with personal data, including the systems behind it that the app draws on — your schedule, your class and progress information, the school mailbox and your account.
The app has no purchase function, and it does not create or play lesson recordings.
The app is provided to schools and organizations. Your account is created and managed by your school — the app has no sign-up screen. Parents, students and teachers each see a different part of it.
Signing in
Signing in sends your username and password to our servers. Some parents are given a telephone number as their username, in which case that number is sent when they sign in. Passwords are not stored in plain text. Teachers sign in through their school’s own system — Google Workspace, or the school’s Stalwart mail server — in a Safari window inside the app. In this case, the sign-in credentials are processed by the relevant authentication service, and Rhety receives the account identifier and session information required to complete the sign-in process.
After signing in, the app receives and shows your account identifier, name, email address, username, role, language and time zone, and for students grade and section. Your session information is kept in the iPhone Keychain and is used to identify your account when requests are made through the app.
Parents and students
Parents see their children’s names, usernames, grade, section, relationship and primary-contact status, with class schedules and progress reports. Students see their own schedule and notifications.
Parents and students do not send messages or upload files. They can change their notification preferences, which are saved to their account, and their app language and which child is shown, which are kept on the iPhone only.
Teachers
Teachers use the app for their working day, and it sends us:
- Email from the school mailbox — recipients, subject, message text and reply references. Mail is held on the school’s Stalwart mail server. Searching sends the search term so matching messages can be found.
- Cover requests — the reason (illness, emergency or planned absence), a written explanation, and supporting documents. Where the reason is a medical circumstance, family emergency or similar unavoidable situation, your agreement requires appropriate documentation, either with the request or within 24 hours of the cancelled lesson.
- Support requests, and reports about lessons and students — covering conduct, participation, technical problems, and welfare concerns, with written notes.
- Training signups and activity answers, standby availability, and decisions on class offers.
- Notification preferences, language and time zone.
Teachers can also see payment records for their own teaching, showing what they have earned. The app only displays this information; it handles no card or payment details and has no purchase function.
Unsent messages and training drafts created by teachers are stored only on the iPhone being used until they are sent.
Health and welfare information
Two parts of the app can carry information about someone’s health.
When a teacher asks for a lesson to be covered because of illness, the supporting documentation may be a medical note, including a photograph of one. The app accepts any kind of file, so these attachments may be documents or images. These documents are processed only to assess and deal with the cover request.
When a teacher raises a welfare concern about a student, the report may record that the student showed signs of fatigue or illness, appeared distressed, or disclosed a personal or sensitive matter, together with the teacher’s written notes.
So the app can carry health and welfare information about teachers and about children. It is used to deal with the request or concern it was submitted for, and is seen by the staff who handle those requests.
Health data is special-category personal data under Turkish Law No. 6698 on the Protection of Personal Data. Access is limited to authorized personnel responsible for handling the relevant cover request or student welfare report. The information is not used for any unrelated purpose and is not used for advertising or marketing. Appropriate technical and organizational measures are applied to protect special-category personal data.
Camera
The camera reads the QR code shown when you sign in to Rhety on another device, such as a computer or a web browser. Camera images are processed on your iPhone to find the code; they are not recorded, stored or sent to us. Only the code’s contents are sent, so you can approve or refuse that sign-in. The camera is used nowhere else in the app. If you do not allow camera access, you will not be able to use the QR-code sign-in approval feature, but you can continue using the other parts of the app that do not require camera access.
Notifications
If you allow notifications, the app registers a device token from Apple with your platform, language and your choice, and Apple delivers the notifications. Signing out or turning notifications off removes that device’s registration.
Kept on your iPhone only
Unsent message and training drafts stay on your iPhone until you send them. Attachments you open are written to a temporary area and deleted when you close the preview. Deleting the app removes both.
Diagnostic information
Our servers receive what any internet request carries, including your IP address and which data was requested.
When a request fails we record it so the fault can be fixed. Those records include your account identifier, role, and the address of the failed request — which means a mailbox search term can appear in one if the search itself failed. We use Sentry for these reports and PostHog, hosted in the European Union, for counts of failures. These records hold what the failed request itself contained, and are used only to find and fix the fault.
Advertising and tracking
The app contains no advertising and no tracking. It does not follow you across other companies’ apps or websites, does not use Apple’s Advertising Identifier, and never asks for tracking permission. We do not sell personal data and do not share it with data brokers.
Who else is involved
| Who | Their part |
|---|
| Your school or organization | Creates and manages your account; holds your academic information |
| Your school’s Stalwart mail server | Holds the school mailbox, and signs teachers in |
| Google Workspace | Authenticates and signs in teachers where your school uses Google Workspace. |
| Apple | Delivers notifications |
| Google Cloud | Hosts our service and stores its data |
| Sentry | Receives reports of failed requests |
| PostHog | Receives counts of failed requests |
Where information is processed
Our database, storage and services run in Google Cloud’s europe-west1 region in Belgium, and PostHog processes data in the European Union. Your information is therefore processed outside Türkiye.
As a result, certain personal data processed through the app is stored outside Türkiye or may be accessed from outside Türkiye. International transfers are carried out using an appropriate safeguard provided under Article 9 of Turkish Law No. 6698 on the Protection of Personal Data. Depending on the relevant transfer relationship, the standard contractual clauses published by the Turkish Personal Data Protection Board are executed and the required notifications are made. The information transferred is limited to what is necessary to provide the relevant service.
Children
Students using the app may be children. Their names, usernames, grades, sections, schedules and progress reports are processed so the school can teach its lessons and parents can follow their child’s progress. Where consent is needed for a student who is not of legal age, it is obtained from the parent or legal guardian.
How long information is kept
Your personal data is retained only for as long as necessary for the purpose for which it is processed and for any applicable statutory retention or limitation period. When the relevant period expires, the information is erased, destroyed or anonymized.
Your user account and the educational records associated with it are retained for as long as your school or organization keeps the account active. When the account is closed or your relationship with the school or organization ends, the information is removed from active systems. Records that must be retained to comply with a legal obligation or to establish, exercise or defend legal rights are kept with restricted access only for the relevant period.
Several things are removed without anyone asking.
- A QR sign-in request expires by itself 5 minutes after it is created.
- Your notification registration is removed when you sign out or turn notifications off.
- Attachment previews are deleted from your iPhone when you close them, and drafts stay there only until you send them.
- Records of failed requests are kept for the period set in Sentry and PostHog.
- Cover requests and any health-related supporting documents are retained for 2 years.
- Student welfare reports and teachers’ notes are retained for 2 years.
Your rights, and deleting your account
Under Article 11 of Turkish Law No. 6698 on the Protection of Personal Data, you have the right to:
- learn whether your personal data is being processed;
- request information if it has been processed;
- learn the purpose of the processing and whether the information is used in accordance with that purpose;
- know the third parties in Türkiye or abroad to whom the information has been transferred;
- request correction if the information is incomplete or inaccurate;
- request erasure or destruction where the statutory conditions are met;
- request that correction, erasure or destruction be communicated to third parties to whom the information has been transferred;
- object to a result arising against you solely through automated analysis; and
- request compensation if you suffer damage because your personal data has been processed unlawfully.
To ask for any of these, or to have an account and its data erased, write to info@rhety.com, call 0212 706 7220, or use https://rhetylivespeaking.com/contact. You can also ask your school. User accounts are not created by users within the app, and the app does not include an individual account-creation function. The request will be handled together with the school or organization that manages your account. Except for records that must be retained by law, your account and the personal data associated with it will be erased or anonymized.
We may ask you to verify your identity and your connection with the relevant account before completing the request. A deletion request concerning a student who is not of legal age must be submitted by the student’s parent or legal guardian.
Security
The app uses HTTPS when it talks to our servers, keeps your session in the iPhone Keychain, and processes camera images on your iPhone rather than sending them to us.
Changes, and contact
If we change this notice we will update the date above and publish the new version here.
info@rhety.com · 0212 706 7220 · https://rhetylivespeaking.com/contact
---
