Privacy Policy
Effective date: 30 September 2026
Kokpit is the mobile app that gives organizations access to their Odyssey OS workspace from a phone. It is published by Odyssey Capital. This policy explains what personal data the iOS and Android versions of Kokpit process, why they process it, who it is shared with and how long it is kept.
- Kokpit connects only to the server of the workspace you enter on the sign-in screen.
- The app contains no advertising, analytics or tracking software, and your data is never sold.
- Kokpit does not access your location, contacts, camera, microphone or photos.
1. Who is responsible for your data?
Kokpit is a business app. Your account is created by your organization's administrator; new accounts cannot be created from the app. The app connects to the server of the workspace you enter on the sign-in screen (for example company.kokpit.dev).
- Your organization is the data controller for the content of the workspace (user accounts, files, dashboards, reports). Odyssey Capital processes that content on your organization's behalf, as a data processor.
- Odyssey Capital is the data controller for the app itself and for the notification infrastructure.
2. Data we process
Account detailsYour username, password, name and role, plus your email address and phone number if your administrator recorded them.So that you can sign in and see the content you are authorized to see.
Device and session detailsA random device identifier the app generates the first time it opens (it is not an advertising ID or a hardware ID), your device's name or model, operating system, app version, your IP address, and the times you signed in and last used the app.To manage your session, protect your account and allow a session on a device to be ended remotely when needed.
Notification tokenThe token Firebase Cloud Messaging generates so that push notifications can reach your device.Stored only if you allow notifications, and deleted when you sign out.
Content you viewThe files, dashboards, reports and notifications in your workspace.Read from the workspace server. Files you open are downloaded to your device's temporary storage.
AI chatsIf your organization has turned this feature on, the questions you ask and the answers you receive.Chat history is stored on the workspace server under your account; you can delete chats one by one or all at once from the app.
PreferencesYour interface language and wallpaper choice.To open the app the way you set it up.
Stored on your deviceYour session key, workspace name, device identifier and language preference.Kept in the operating system's secure storage (iOS Keychain, Android Keystore).
3. Why we process data and on what legal basis
- Providing the service: signing you in, showing content and saving your preferences. This is necessary to perform the contract between us and your organization (GDPR Art. 6(1)(b), Turkish KVKK Art. 5/2-c).
- Security: session records and limits on failed sign-in attempts, based on our legitimate interest (GDPR Art. 6(1)(f), KVKK Art. 5/2-f).
- Notifications: sent only if you grant notification permission in the operating system. You can withdraw that permission at any time in your device settings.
We do not use your data for advertising, profiling or tracking you across other apps and websites.
4. Who we share data with
Your data is shared only with the providers the service needs in order to work:
- Google Firebase Cloud Messaging and Apple Push Notification service: deliver notifications to your device. The notification token and the title and text of each notification pass through these services.
- OpenAI: if your organization has turned on the AI feature, your question and the dashboard data needed to answer it are sent to OpenAI to generate the answer.
- Google Fonts: the interface font is downloaded from Google's servers on first use, at which point Google sees your IP address.
These providers may process data on servers outside Türkiye and the European Economic Area. We do not share your data with anyone else unless the law requires it.
5. How long we keep data
- Mobile session: deleted as soon as you sign out; an unused session expires on its own after 90 days.
- Notification inbox: at most 200 notifications per user, kept for up to 90 days.
- Report pages: deleted after 180 days.
- AI chat history: kept until you delete it.
- Your account and workspace content: kept for as long as your organization decides. When your account is deleted, your mobile sessions end too.
- Data on your device: the session key is deleted when you sign out.
6. Security
- Communication between the app and the workspace server is encrypted with HTTPS.
- Your session key is kept in the operating system's secure storage on your device, and only as a hash on the server.
- Repeated failed sign-in attempts are temporarily blocked.
- When your password changes, your sessions on other devices are ended.
7. Your rights and account deletion
Under the GDPR and Article 11 of the Turkish KVKK, you have the right to access your data, to have it corrected or deleted, to object to its processing and to receive a copy of it.
Your account is created and deleted by your organization's administrator. You can ask for your account or your data to be deleted through your administrator or by writing to privacy@odyssey-cap.com. We respond to requests within 30 days. If you are not satisfied with our response, you can lodge a complaint with your data protection authority.
8. Children
Kokpit is designed for employees of organizations. It is not directed at anyone under 18 and does not knowingly collect their data.
9. Changes to this policy
When we update this policy we publish the new version on this page and change the effective date. We also announce significant changes inside the app.
10. Contact
Odyssey Capital
Email: privacy@odyssey-cap.com
Web: kokpit.dev