Last updated: October 17, 2026 · Data controller: Dode Yazılım
Balcora ("the app") redesigns photos of your balcony and small spaces with AI. This policy explains what data we process and why, and your rights. We only process the data needed to run and improve the app; we do not sell your data and do not perform advertising tracking.
| Data | Purpose | Processor |
|---|---|---|
| Email address (account) | Sign-in and account management | Supabase (auth) |
| Apple / Google identity (social sign-in) | Sign-in | Apple, Google, Supabase |
| Balcony/terrace photos you upload | Generate the AI redesign | Supabase (storage) + fal.ai (AI processing) |
| Approximate location / region (optional) | Climate-appropriate plant suggestions | On-device + Supabase |
| Messages you write to the AI assistant, plant names, region and plant photos you send for diagnosis | Plant care advice and diagnosis | OpenAI |
| Content-rejection record (time and rejection type only) | Prevent abuse | Supabase |
| Purchase history | Manage subscription status | RevenueCat, Apple/Google |
| Anonymous usage events | Improve the product (can be turned off) | PostHog (EU servers) |
| Crash / diagnostic logs | Fix bugs | Sentry |
| Device identifiers | Security, subscription matching | RevenueCat, Sentry |
Photos you upload are used only to generate the design you request. The photo is sent over a secure link to our AI provider (fal.ai) for processing. We do not use your photos for advertising or model training. When you delete your account, your photos and designs are permanently deleted.
The photos you upload and the text and photos you send to the AI assistant are automatically checked before they reach the AI: text first by a word filter on our server and then by OpenAI's content moderation (Moderation) service; photos by OpenAI Moderation. This check exists to stop inappropriate requests from being processed (see the Terms of Use).
Rejected text or photos are not stored. We only record your account's user id, the time of the rejection, the rejection type (text, photo, or a safety refusal by the AI provider) and the feature involved. This record is used to pause AI features temporarily after several rejections in a short time and to prevent abuse; it is deleted when you delete your account.
Some links in the "Shop the look" list are affiliate links; we may earn a commission on purchases made through them. This does not change the price you pay. You are taken to third-party stores where their privacy policies apply.
Supabase (auth/storage/database), fal.ai (AI image processing), OpenAI (AI assistant and content moderation), RevenueCat (subscriptions), Sentry (crash reporting), PostHog (anonymous analytics) and affiliate networks. Each receives only the data needed for the purpose above.
Requests: iletisim@dodeyazilim.com (answered within 30 days).
Balcora is not directed to children under 13 and does not knowingly collect data from them.
We may update this policy from time to time; we will note material changes in the app or on this page.