1. Data controller, publisher and contact
Rich Garage processes your personal data as data controller under Turkish Personal Data Protection Law No. 6698 (KVKK). Phone: +90 534 459 12 40. Email: richgarage2026@gmail.com. Address: Meydankavağı, Perge Blv. Alaylı Sitesi No:58-B, 07200 Muratpaşa/Antalya.
The app may be technically distributed on Google Play and the App Store through the Digivisor Growth Agency developer account. Rich Garage determines the purposes and means of personal-data processing. Where authorised, Digivisor Growth Agency acts only under Rich Garage’s instructions as a technical publishing, maintenance or support provider; ownership of the store account alone does not make it the data controller.
2. Data we process
Depending on the features you use, we may process:
- Identity and contact details: name, phone number, email, date of birth, identity and address details.
- Vehicle details: plate, VIN, make, model, year, colour, mileage, registration details and vehicle images.
- Service records: appointments, service history, warranties, inspection and job reports, contracts, support conversations and uploaded files.
- Financial records: service charges, payment/collection status and commercial transaction records. The app does not store payment card details.
- Technical data: notification preferences, device push token, last-seen time and security logs.
- Location: only with permission, to display nearby businesses and provide map features.
3. How we collect data
Data is obtained from information you enter in account and profile fields, records created by authorised Rich Garage staff during service and commercial processes, photos and files you choose to upload, and limited technical data transmitted automatically by your device according to the features you use.
Location, camera, photo-library and notification data is accessed only when you use the relevant feature and grant the required operating-system permission. Your phone number is verified with a one-time code during sign-in.
4. Purposes and legal bases
We process data to create and verify accounts, provide vehicle and service records, manage appointments and support, deliver contract and warranty services, send notifications, protect the service, comply with legal obligations and establish, exercise or defend legal rights.
Processing relies on contract performance, legal obligations, the establishment or defence of rights and legitimate interests that do not override fundamental rights. Location and marketing communications remain subject to the user’s choices where consent is required.
5. Device permissions and changing your choices
The following permissions are used only for the stated functions and can be disabled at any time in your device settings:
- Location: used only while the app is in use to show nearby participating businesses on the map. The app does not track location in the background.
- Camera: used by authorised staff to take vehicle or damage photos and scan a vehicle identification number (VIN).
- Photo library: used to attach images and files you select to vehicle, damage, appointment or support records.
- Notifications: used for service, appointment, support and account updates. Notification permission and in-app preferences can be disabled later.
- Disabling a permission does not delete your account; it may limit only the feature that requires that permission.
6. Sharing and international transfers
Only where necessary to operate the service, data may be shared with technical providers such as Supabase for authentication, database and file storage; Expo/EAS and Expo Push for app updates and push notifications; Netgsm and WhatsApp infrastructure for OTP delivery; and Google Maps or the device’s map services for map features. Authorised Rich Garage staff, relevant service partners and legally authorised public bodies may also access data within the scope of the relevant transaction.
Service providers are required to process data only for the service and under applicable instructions, and to apply appropriate privacy and security safeguards. Some providers or servers may be located abroad; transfers are made under the conditions and safeguards required by the KVKK and other applicable law.
Personal data is not sold, and the app does not use third-party advertising or cross-app advertising tracking.
7. Retention and account deletion
Account, profile and technical data is retained while the account remains open; support records for the time necessary to resolve and follow up the request and related disputes; and contract, service, warranty, report, financial and commercial transaction records for applicable statutory retention and limitation periods. The purpose, legal obligations and potential legal claims determine the applicable period.
When an account is deleted, the login identity, phone number, email, date of birth, identity and address details are permanently removed, and sessions, push tokens and personal notification preferences are invalidated.
The customer name and past service, financial, contract, warranty, report, related-file and commercial transaction records may be retained only for record integrity, accounting or consumer-law obligations and the establishment or defence of legal rights, and only for the applicable period. Their direct sign-in link is removed, access is restricted, and deletion, destruction or anonymisation follows when the retention basis expires.
A limited audit record of the deletion operation is retained for at least three years as required by KVKK rules.
8. Security
Data is transmitted over encrypted connections. We use authorisation controls, row-level access rules, OTP verification, logging and administrative safeguards proportionate to the risks.
9. Your rights and withdrawing permissions
Under Article 11 of the KVKK, you may request information, access, correction, deletion or destruction where applicable, details of recipients, objection to certain automated outcomes and compensation for unlawful processing. Contact Rich Garage through the app support area, at richgarage2026@gmail.com, or by phone at +90 534 459 12 40. Device permissions can be withdrawn in operating-system settings, and notification preferences can be changed in the app or device settings. You can use the Account deletion page to delete your account directly.
10. Children and updates
The app is intended for users aged 18 and over and does not knowingly create accounts for children. This policy may be updated when the service or law changes; the current version is always published here.
