Privacy Policy

Data Controller

MotoRider TR (Avşar Ocak) (Individual Data Controller)
Location: Istanbul, Türkiye
Email: privacy@motorider.tr
Web: motorider.tr

What Data Do We Collect?

Data You Provide Directly

Automatically / Usage-Collected Data

Data We Do NOT Collect from Individual Users

Why We Collect Your Data

• Providing core app features (ride tracking, messaging, event organization)
• Account management and authentication
• Matching with nearby riders (location-based)
• Forwarding help requests to nearby towing / repair services
• Sending notifications (messages, event invitations, etc.)
• Complying with legal obligations
• Improving service quality (anonymous analytics)
• Fighting abuse, fraud, and unwanted behavior

Where Is Your Data Stored?

• Your data is stored encrypted on Supabase infrastructure (server location: Frankfurt, Germany — within EU)
• Ride GPS points are stored in Supabase Storage in individual folders, accessible only by the owner and admin
• Communication data may be outside Türkiye; GDPR compliance ensures the same level of protection
• When you delete your account, your data is fully erased within 30 days (except legal retention requirements)

Who Do We Share Your Data With?

• Other users: They can see your profile and shared content (social media style)
• Infrastructure providers: Supabase (database), Netlify (web hosting), Apple Push Notification Service / Google FCM (notifications)
• Authentication (Sign in with Google / Apple): When you sign in with Google or Apple, authentication is handled by Google LLC and Apple Inc.; these providers may process the name and email you share (if you choose Apple's "Hide My Email", a private relay address generated by Apple instead of your real email) under their own privacy policies.
• Apple App Store / Google Play: App download and payment processes
• Legal authorities: When legally required

Children's Privacy

MotoRider TR is intended only for users 18 years or older. We do not knowingly collect data from anyone under 18. If you believe your child has provided data without your knowledge, contact us — we will delete the data within 30 days.

How Do We Protect Your Data?

• HTTPS/TLS encryption on all connections
• Database-level Row Level Security (RLS) — users access only their own data
• Passwords are bcrypt-hashed, never stored in plain text
• Regular backups
• Two-factor authentication (coming soon)

Reasonable-measures principle: MotoRider TR takes the reasonable technical and organizational measures above to protect your personal data under KVKK Art. 12. However, no system can guarantee that transmission over the internet or electronic storage is 100% secure; in the event of unforeseeable and unpreventable breaches, our liability is limited to the extent required by applicable law.

User responsibility: The confidentiality of your password, the security of your device, and the information you enter/share are your responsibility. MotoRider TR cannot be held liable for damages resulting from sharing your password or your device falling into others' hands.

Limitation of liability: To the maximum extent permitted by applicable law, we are not liable for indirect damages arising from circumstances beyond our control (third-party services, user-caused breaches, force majeure). Your mandatory consumer-law rights remain reserved.

Your Rights Under KVKK Art. 11 / GDPR Art. 15-22

• Learn whether your data is being processed
• Request information about processing
• Learn the purpose of processing and whether it is used accordingly
• Know the third parties to whom data is transferred domestically / abroad
• Request correction of incomplete or incorrectly processed data
• Request deletion or destruction of data
• Request notification of these actions to third parties
• Object to outcomes adverse to you resulting from automated systems
• Request compensation for damages caused by unlawful processing

How to Delete Your Account

Use Profile → Settings → Delete Account in the app, or send a request to privacy@motorider.tr.

Cookies & Similar Technologies

MotoRider TR uses cookies and similar technologies such as localStorage and session storage to keep you signed in, remember your preferences, and improve the service:

• Essential (session & security): tokens that keep your login session and security — the app cannot work without them.
• Preferences: remembering your map, filter and view settings.
• Anonymous analytics: page views and "download" clicks on our website — no personal identity, not for advertising.
• Third-party (technical): map services (Google, OpenStreetMap) may set their own technical cookies.

We do not use advertising or personalized tracking cookies. You can clear or block cookies/storage in your browser settings; however, blocking essential ones may prevent sign-in or break some features.

We May Update This Policy

We will notify you in the app or via email when significant changes occur. The last update date appears at the top of this page.

Questions?

For exercising your rights under KVKK/GDPR or questions about this policy, contact us. We respond within 30 days.

Jurisdiction

Disputes arising from this Privacy Policy are subject to Istanbul Courts and Enforcement Offices. The policy is governed by Turkish law.