Privacy Policy
Draft — awaiting legal review before launch.
Last updated:
1. Who we are
This policy applies to the Plakadan mobile app and website. The data controller for your personal data is [Full name] (“Plakadan”, “we”). Questions: destek@plakadanapp.tr.
2. Data we process
- Anonymous account id: a random id is created for your device on first launch. We never ask for your name, phone number or e-mail.
- Plate and message: the plate of the car you message, the reason you pick and your text (up to 250 characters).
- Vehicle verification: if you add your car, its plate and the registration-document photo you upload for verification.
- Push token: your device’s push token if you allow notifications.
- Technical data: an irreversible, salted hash of your IP address to prevent abuse (the IP itself is not stored).
Plate recognition with the camera runs on your device; plate photos are never sent to our servers.
3. Purposes and legal bases
- Delivering messages to the vehicle’s verified user and showing you their status (providing the service).
- Verifying vehicle ownership so messages don’t reach the wrong person.
- Preventing spam and abuse: sending limits, blocking and reports (legitimate interest).
- Sending notifications (with your permission).
4. Who sees what
Senders never see the owner’s identity, phone number or e-mail. Owners never see the sender’s identity; they see only the plate, the reason and the message text. Unverified users cannot see message content.
5. Retention
- Undelivered messages: up to 7 days.
- Delivered messages: 30 days.
- Registration-document photo: only during review; deleted after the decision.
- IP hashes and rate-limit counters: up to 2 days.
- When you delete your account in the app, your vehicles, inbox and push tokens are deleted. Messages you sent may remain, anonymised, in the recipient’s inbox.
6. Transfers and service providers
Your data is never sold or used for advertising. We use infrastructure providers to run the service: database and hosting (Supabase), push notifications (Expo, Apple, Google) and website hosting. Their servers may be located outside Türkiye.
7. Your rights
To access, correct or delete your data, or exercise your other rights under Article 11 of the Turkish Personal Data Protection Law (KVKK) and similar laws, write to destek@plakadanapp.tr. You can delete your account at any time in the app under Profile → Delete my account.
8. This website
This website uses no cookies or trackers and loads no third-party fonts or analytics.
9. Changes
We may update this policy; we will announce significant changes in the app.