Privacy Policy
This policy explains, clearly and plainly, what personal data the Analiz ProX website and mobile apps (the "Platform") process, why, and on which infrastructure.
1. Who we are
Analiz ProX is a software and analytics platform that lets organizations run employee-experience, trust, stress, meeting-effectiveness, crisis-readiness, vision-alignment and candidate assessments. It is operated by independent developer Barış Akça (Bursa, Türkiye). Contact: [email protected]
The Platform is a tool: organizations create the surveys, invite the respondents and interpret the results. Analiz ProX does not run surveys on anyone's behalf, does not contact employees directly and does not provide consultancy.
2. Roles
- Organization accounts (name, phone, email, organization details): Analiz ProX is the data controller.
- Survey and assessment responses: the organization that creates the assessment and invites respondents is the data controller; Analiz ProX acts as a data processor, processing the data only to operate the Platform on the organization's instructions.
3. Data we collect
a) Organization admins: full name; mobile number (for sign-in and verification); email (contact only, not verified); an irreversible hash of your password (the password itself is never stored); title and language; organization name (or the alias you use instead), sector and size band; the assessments you create; read status of messages from Analiz ProX; dates of password-reset requests; trial and subscription status (end date, store, renewal state). Card or payment details never reach us; Apple, Google or Microsoft collect payment.
You may use an alias instead of your organization's name. The Platform does not require or ask for your real business name. You can enter an alias or code only you will recognise (e.g. "Tests 1980", "Blue Team"); no feature is affected. What you enter is entirely your choice. We apply technical and organisational safeguards, but no data processed over the internet is entirely free of risk, so we recommend not sharing information that identifies your business and using an alias unless you need the real name. If you choose to enter your real name, it is protected by the measures in this policy.
b) Employee-survey respondents: answers; group information the respondent chooses (unit, position group, tenure band); response times per item; a random device identifier used only to prevent duplicate responses; language. Name, email, phone, IP address or location are not stored with responses. Free-text answers are stored as written; respondents are asked not to include identifying details.
c) HR candidates: the candidate code given by the organization (no name is requested), position, and the optional email and note entered by the organization; the candidate's answers; scores calculated on the server; response times. These are linked to the candidate and shown only to authorised staff of the inviting organization.
d) Technical data: our infrastructure providers may process IP address, browser details and request times in short-lived system logs for security and operations. These logs are not linked to survey answers and are not used by us for profiling.
4. Purposes
- Creating your account, verifying your phone once, signing in and resetting your password;
- Publishing assessments, collecting responses and calculating reports;
- Preventing abuse and keeping the service secure (e.g. duplicate responses, one password reset per week);
- Sending essential service notices in the app;
- Meeting legal obligations.
We do not advertise, sell data, use third-party tracking or analytics tools, or use your data to train AI models.
5. Legal basis
Account data: performance of contract, legal obligation and legitimate interest. For survey data the organization determines and communicates the legal basis; HR candidates give explicit consent before starting.
6. Infrastructure and service providers (transparency)
| Provider | Purpose | Data and location |
|---|---|---|
| Supabase Inc. | Database, authentication, server functions | All account, assessment and response data. Database hosted in Frankfurt, Germany (AWS eu-central-1). |
| Cloudflare Inc. | Hosting and secure (HTTPS) delivery of the website | Serves site files; processes technical data such as IP address during connections. Global network. |
| İletimerkezi (iletimerkezi.com) | Sending verification and password-reset SMS | Only your phone number and the 6-digit code. Türkiye. |
| RevenueCat Inc. | Validating and managing in-app subscription purchases | Your organization's random ID (uuid), purchased product, subscription dates and the store receipt. No name, phone or survey data is sent. USA. |
| OpenRouter Inc. and Anthropic PBC (Claude AI) | Only when an authorised user starts "Deep Analysis" on a paid subscription: interpreting results with the Claude AI model. OpenRouter forwards the request to Anthropic. | Aggregated scores (dimension, item and group averages), response counts and dates; respondents' open-ended comments as written; for HR analysis the candidate code, position and test scores. Names, phones and emails of users and candidates are not sent. Based on a one-time consent by the organization. USA. |
| Apple / Google / Microsoft | Distributing the app via App Store, Google Play and Microsoft Store; collecting subscription payments | Subject to their own policies. |
Fonts and all app files are served from our own host; no Google Fonts or similar external resources are used.
7. International transfers
Supabase and Cloudflare are based outside Türkiye and data is stored on servers in the European Union. When Deep Analysis is used, the aggregated results and open-ended comments described above are transferred to OpenRouter and Anthropic in the USA solely to produce the analysis, based on the organization's explicit in-app consent. All transfers follow the safeguards required by applicable law.
Use of AI
"Deep Analysis with Claude" uses Anthropic's Claude AI model. The generated text is for decision support; decisions about individuals must not rely solely on automated analysis. Data is processed only to answer the request. Generated analyses are stored in your organization's account and deleted with the assessment or account.
8. Retention and deletion
- Account data is kept while your account is open. Use My account → Delete account to permanently delete your account and all data of organizations you own, instantly, inside the app.
- Organizations can delete any single response or an assessment with all its responses at any time.
- Deleted data leaves provider backups within 30 days at the latest.
- Password-reset logs are kept to enforce the 7-day limit and are deleted with the account.
9. Data stored on your device
We do not use cookies. Local storage holds only: the session token, language, selected organization, progress of an unfinished survey (deleted on submission) and the random device identifier. None of it is used for advertising or tracking.
10. Security
All connections use HTTPS. Each organization can see only its own data, enforced on the server at database level (row-level security). Respondents cannot read response tables. HR answer keys exist only on the server. Sub-groups with fewer than 5 responses are never shown. Following data minimisation, we recommend an alias instead of your real organization name (see 3-a). No system is 100% secure; breaches will be notified as required by law.
11. Children
The Platform is not intended for anyone under 18 and does not knowingly collect their data. Organizations must invite only people aged 18 or over.
12. Your rights
You may request access, rectification, erasure, objection, information about recipients and compensation. Write to [email protected]; we reply within 30 days. Survey respondents should first contact the inviting organization; as responses are anonymous, Analiz ProX cannot identify an individual's answers.
13. Changes
This policy may be updated; the current version is always published here with its date, and significant changes are announced in the app.