Privacy Policy
What data does Spektio collect, and how does it process and protect it? Our privacy policy regarding observer and monitored-device data.
Last updated: July 8, 2026
This Privacy Policy explains which personal data is collected when you use the Spektio ("Spektio", "we") service, the purposes for which this data is processed, and your rights. Spektio is a device activity monitoring service; therefore, responsibility for data processing lies with both us and the observer using the service.
This text is for general information purposes only and does not constitute legal advice. If you intend to use Spektio within an organization or on the devices of third parties, it is recommended that you separately obtain legal advice to ensure compliance with the applicable legislation.
The parties: the observer and Spektio
Spektio is built around two roles. The observer (the account holder) is the party who designates the devices to be monitored and views the reports. The monitored device, on the other hand, is the computer on which the Spektio application is installed and which generates the activity data.
With respect to the activity data collected from monitored devices, the data controller is the observer who initiates the monitoring. For this data, Spektio is the data processor that provides the infrastructure. With respect to the observer's account information, however, the data controller is Spektio. The observer is solely responsible for monitoring only those devices for which doing so is lawful, for which they are authorized, and/or for which they have obtained explicit consent.
The data we collect
Spektio collects two types of data:
- Account data (from the observer): full name, email address, encrypted password or Sign in with Google identity, account language, and creation date.
- Activity data (from the monitored device): the applications used and their usage durations; the titles and addresses (URLs) of visited websites; gaming activity; daily screen time; device name, operating system and version, device fingerprint, and the device username if any; and attempts to access blocked sites (site, device, time, and number of attempts).
Spektio does not perform keystroke logging (keylogging), does not take screenshots, and does not read the content of private messages. The activity data collected is at the level of usage patterns and durations.
For what purposes do we process the data?
- To provide the monitoring service: to generate activity reports and deliver them to the observer panel.
- Account management and authentication: login, session security, and password operations.
- Sending notifications: email alerts for events enabled by the observer (e.g. a blocked-site attempt, a new device).
- Service security and improvement: preventing misuse, debugging, and performance.
- Fulfilling legal obligations.
Data retention and security
Data is transmitted between the device and our servers over an encrypted connection. Authentication is JWT-based, and passwords are stored encrypted in an irreversible manner (bcrypt).
Activity data is retained for as long as the observer account is active and the relevant device remains connected. When the observer deletes a device or their account, the relevant activity data is removed from the system within a reasonable period.
Third-party services
These service providers access data only to the extent necessary to provide the service. Spektio does not sell your personal data to third parties.
- Google OAuth: when "Sign in with Google" is used, authentication is performed through Google, and Google's privacy policy applies.
- Email delivery: notification and account emails are sent through an email infrastructure (SMTP).
- Hosting: data is hosted on the server infrastructure on which we run the service.
Your rights
Under the applicable data protection legislation (KVKK and/or GDPR), you have the right to access your data, to request its correction or erasure, to object to processing, and to request the portability of your data. You can contact us with your requests.
If you are the user of a monitored device and you have a request regarding the processing of your data, you must first apply to the observer who initiated the monitoring, since with respect to this data the data controller is the observer.
Children's privacy
Spektio may be used for parental control purposes. A parent/guardian who monitors a child's device is the controller of the relevant data and must use the data solely for the purpose of the child's safety and supervision.
Changes and contact
We may update this policy from time to time; the current version is always published on this page and the "last updated" date is changed. You can contact us with your questions.