takpark — Privacy Policy

Last updated: 2026-05-24

This Privacy Policy explains how the takpark mobile application ("App", "Service", "takpark") collects, uses, shares, and protects personal data. takpark is operated in the Republic of Türkiye and complies with both the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).

By using the App, you agree to the terms of this Policy.

1. Definitions

• Service: A mobile application that matches drivers leaving a parking spot with drivers searching for one based on location, and enables matched users to talk via voice call.
• User: A natural person who has created a takpark account and uses the App.
• Personal Data: Any information relating to an identified or identifiable natural person.

2. Data We Collect

The table below uses terminology aligned with Apple App Store privacy nutrition labels.

None of this data is shared with third parties for advertising or marketing purposes. takpark does not sell user data.

3. Voice Calls

Voice calls between matched users are conducted peer-to-peer via WebRTC. Audio data is never sent to, recorded by, or accessible to takpark servers. Only technical signaling data (SDP, ICE candidates) is briefly relayed through Firestore for connection setup and deleted once the call is established.

4. Third-Party Services

We rely on the following third parties to operate the Service. Their own privacy policies apply.

• Firebase (Google LLC) — Authentication, Cloud Firestore, Cloud Messaging (FCM), Crashlytics. Data is stored on Google infrastructure. See Firebase Privacy and Google Privacy Policy.
• Google Sign-In — Only name and email are received.
• Apple Sign-In— Name and email are received. If you choose "Hide My Email", Apple's private relay email service is used and your real email is never shared with takpark.
• Google Maps SDK — Used to display maps and visualize location.

5. International Data Transfers

Firebase and Google services may process your data on servers outside Türkiye (e.g., EU and US). Google LLC provides GDPR-compliant transfer guarantees through Standard Contractual Clauses (SCCs). Under KVKK, your explicit consent for these transfers is obtained upon account creation.

6. Legal Bases (GDPR Art. 6)

• Performance of a contract — Providing the parking match service and operating the credit system.
• Legitimate interest — Ensuring app stability (Crashlytics).
• Explicit consent — Precise location access and push notification permissions. These can be revoked any time via device settings.

Under KVKK, our processing bases are Art. 5/2(c) (contract performance), Art. 5/2(f) (legitimate interest), and Art. 5/1 (explicit consent).

7. Data Retention

• Location data: Shared in real time only while a match is active. No location history is retained after the match ends.
• Account and profile information: Retained as long as your account is active.
• Match history: Retained against your account for display in the activity history. Even if you delete your account, an anonymized referenceis preserved so the other party's activity history remains intact (this reference contains no PII).
• Crashlytics data: Retained per Firebase defaults (up to 90 days).

8. Deleting Your Account

You can delete your account directly from the App via Profile → "Delete Account". This triggers:

1. Deletion of your Firebase Authentication user.
2. Deletion of your users/{uid} Firestore document and all PII it contains (name, email, vehicle info).
3. Invalidation of your FCM token.
4. Conversion of your match history into an anonymous reference.

To request full deletion of historical activity records as well, contact us at takpark2020@gmail.com.

9. Your Rights (KVKK Art. 11 + GDPR Art. 15–22)

You have the right to:

• Access your personal data
• Request correction or update
• Request erasure("right to be forgotten")
• Object to processing
• Exercise data portability
• Withdraw consent at any time

To exercise these rights, write to takpark2020@gmail.com. In Türkiye you may file a complaint with the Personal Data Protection Authority (KVKK); in the EU, with your competent supervisory authority.

10. Children's Privacy

The App is intended for users aged 13 and over. We do not knowingly collect data from anyone under 13. If you believe a child's data has been collected, please contact us and we will delete it.

11. Security

Your data is protected using Firebase's industry-standard encryption and security infrastructure. All traffic is transmitted over HTTPS/TLS. Firestore Security Rules ensure that only authorized users can access their own data.

No system is 100% secure on the internet. In the event of a data breach we will notify the relevant authority and affected users within the timeframe required by KVKK (72 hours).

12. Policy Updates

We may update this Policy from time to time. Material changes will be announced via in-app notification or email. The current version is always published on this page; the "Last updated" date indicates the version in force.

13. Contact

Email: takpark2020@gmail.com