Effective as of February 6, 2026
This privacy policy applies to the Umu Şoför app (hereinafter referred to as "Application") for mobile devices that was created by Muhsin Deniz (hereinafter referred to as "Service Provider") as a Free service. This service is intended for use "AS IS".
Information Collection and Use
The Application collects information when you download and use it. This information may include:
Automatically Collected Information
Your device's Internet Protocol address (IP address)
Device information (device model, operating system version, unique device identifiers)
The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
The time spent on the Application
The operating system you use on your mobile device
App crash logs and performance data
Push notification tokens for delivering notifications
Authentication Information
The Application does not offer self-registration. Driver accounts are created by the system administrator. When you log in using your phone number and PIN credentials, we collect and store the following information associated with your account:
Full name
Email address
Phone number
Driver's license number
Driver's license expiry date
Availability status (on/off duty)
Transfer and Assignment Data
When you receive and manage transfer assignments through the Application, we collect:
Transfer pickup and drop-off locations (addresses and coordinates)
Waypoint locations for multi-stop transfers
Transfer statuses and timestamps (accepted, started, completed)
Passenger name and count associated with transfers
Route geometry and distance data
Vehicle assignment information
Navigation
The Application does not directly access your device's location services. When you choose to navigate to a transfer location, the Application opens an external map application (such as Google Maps) using the transfer address. The Application itself does not collect, store, or transmit GPS coordinates from your device.
Purpose of Data Collection
The Service Provider may use the information you provided for the following purposes:
Essential App Functionality
To authenticate your identity and manage your driver account
To assign and display transfer requests
To track transfer statuses and completion
To provide transfer addresses for navigation via external map applications
To manage your availability/duty status
To communicate transfer details and updates
Service Improvement
To improve the Application's functionality and user experience
To analyze usage patterns and optimize performance
To fix bugs and technical issues
Communication
The Service Provider may contact you from time to time to provide:
Transfer assignment notifications
Transfer reminder notifications
Transfer status change updates
Important service announcements
Push Notifications
The Application uses OneSignal and Expo Notifications for push notification services. You can manage your notification preferences through your device settings:
Transfer Notifications: New assignments, reminders, and status changes
General Notifications: Announcements and general information
Push notifications require your explicit permission, which you can grant or revoke at any time through your device settings.
Third-Party Services
The Application utilizes third-party services that have their own Privacy Policy about handling data. Links to the Privacy Policies:
OneSignal - Push notification delivery
Expo - Application infrastructure and notification scheduling
Supabase - Database and authentication
Google Maps - Navigation (opened externally when user requests directions)
Third-Party Data Sharing
Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service.
The Service Provider may share your information with third parties in the following circumstances:
Service Providers: With trusted service providers (e.g., Supabase, OneSignal) who work on our behalf and have agreed to adhere to this privacy statement.
Legal Requirements: As required by law, to comply with legal processes, protect rights, safety, investigate fraud, or respond to government requests, including compliance with Turkish law and regulations.
Data Storage and Security
Your personal data is stored securely on Supabase cloud infrastructure with SSL/TLS encryption, secure authentication, access controls, regular audits, and encrypted storage for sensitive information. Authentication tokens are stored locally on your device via AsyncStorage with automatic session refresh.
Data Retention Policy
User data is retained as long as you use the Application and for a reasonable time thereafter (typically up to 3 years after inactivity). Anonymized transfer records may be retained longer for legal/accounting requirements (up to 10 years).
Data Deletion
You can request deletion of your data at any time using the in-app "Delete Account" feature (Profile > Delete Account) or by contacting muhsindeniz24@gmail.com. When you delete your account:
All personal information (name, email, phone, license details) is immediately erased
All notifications associated with your account are permanently deleted
Your account is deactivated and cannot be recovered
Anonymized transfer records may be retained for legal compliance
In-app deletion is processed immediately. Email requests are confirmed within 48 hours and completed within 7 business days.
Your Rights
You have the right to access, correct, portability, and deletion of your data. You can also opt-out by uninstalling the app, disabling notifications, or contacting the administrator.
Under KVKK and GDPR, you have rights to be informed, rectification, erasure, restriction, portability, objection, and more. Contact: muhsindeniz24@gmail.com
Children's Privacy
The Application is designed for licensed drivers and is not intended for use by individuals under 18. We do not knowingly collect data from minors and will delete any such data immediately.
Cookies and Tracking Technologies
The Application uses local storage and device identifiers for functionality but does NOT use third-party advertising trackers or cross-app tracking.
Data Transfer
Data may be transferred internationally with appropriate safeguards, including Standard Contractual Clauses (SCCs), in compliance with GDPR and KVKK requirements.
Changes to This Privacy Policy
Updates will be notified via in-app notice, push notification, or updated page. Continued use constitutes acceptance.
California Privacy Rights (CCPA)
California residents have rights to know, access, delete, and opt-out of sale (we do not sell personal information).
Contact Us
Email: muhsindeniz24@gmail.com (include "Privacy Request" for data inquiries).
Operated by: Muhsin Deniz
Contact: muhsindeniz24@gmail.com