Users in Türkiye can read the formal notice under the KVKK in Turkish: KVKK aydınlatma metni.
Who we are
RKad is built and run by Rıfat Kaşıkcı, Dokuz Eylül University, Faculty of Engineering, Tınaztepe Campus, 35390 Buca, İzmir, Türkiye, privacy@rkad.app. The CAD and OpenRocket files belong to the team that uploads them; RKad stores them on the team's behalf.
What we collect
| Data | Source | Purpose |
|---|---|---|
| Name, role, team; email if you add one | You and the captain who invited you | Your account; showing the team who did what |
| A hash of your sign-in token | The app | Sessions. The token itself stays on your computer, in Windows Credential Manager |
| Locks: person, computer name, time | The app | Showing who is editing a part, and on which machine |
| Versions: author, note, date, files | You | Version history |
| Usage events: screens opened, actions and their duration, errors, app version, the computer's memory, CPU and disk use | The app | Improving the product, finding problems, statistics for the team and the operator |
| Error reports: error type and message, stack trace, screen | The app and the server | Fixing bugs |
Usage events and error reports identify people by id only; names are never written to them. The Windows account name and profile path are removed from error texts before they are sent. File contents and free text (searches, notes) never enter usage events. IP addresses are not stored: they are held only in the server's memory to limit abuse and cleared when it restarts (at least daily). Our hosting providers (Heroku, Cloudflare) keep their own short-lived access logs, which include IP addresses.
This website sets no cookies and runs no analytics or trackers.
Why
To provide the service you signed up for (account, locks, versions), and our legitimate interest in keeping it secure, fixing errors and understanding how it is used. We don't sell data or share it beyond the providers below. Your team's owners and captains can see their own team's usage statistics.
Where it is stored
| Provider | For | Location |
|---|---|---|
| Heroku (Salesforce) | Application server | EU (Ireland) |
| Supabase | Database | EU (Frankfurt) |
| Cloudflare | File storage (R2), domain, DDoS protection, this website | Eastern Europe (Cloudflare EEUR); the network is global |
| Backblaze | Backups | EU (Amsterdam) |
| Telegram | Alerts and summary reports to the operator (error messages, totals) | Global |
Files travel directly between your computer and storage; they never pass through RKad's server.
How long we keep it
| Data | Kept for |
|---|---|
| Account, lock and version records | As long as the team uses RKad. A removed member's name stays in the version history |
| Usage events | 400 days |
| Error reports | 90 days |
| Database backups | The last 30 nights |
Your rights
You can ask whether we hold data about you, ask for a copy, ask us to correct or delete it, and object to its use. Write to privacy@rkad.app; we answer within 30 days.
Last updated 15 November 2026.