Privacy and KVKK notice
This notice explains how the Yoldaş app and the yoldas.io website process personal data under the KVKK (Turkish Personal Data Protection Law No. 6698).
Last updated: October 4, 2026
Data controller
Ahmet AYDIN. Contact: iletisim@yoldas.io.
The yoldas.io website: cookie-free counter
This site does not use cookies and does not write any identifier or record to your browser. To count how many people open the site and download the APK, we use a small counter:
- When a page opens, the server is told which page was opened, only the domain name of the site you came from (e.g. google.com) and the screen size. When you press the APK button, a "download" is reported.
- Your IP address and browser details are not stored. To count the same person only once per day, a one-way hash is created from them with a random value that is renewed every day.
- This random value and the hashes are deleted every night. Only the daily totals remain.
- The country comes from the two-letter code provided by Cloudflare (e.g. TR); no city or location is kept.
- Daily counts are kept for 400 days and then deleted.
Because this method cannot be used to identify anyone, no cookie consent is requested. The site is served through Cloudflare; Cloudflare processes your IP address to deliver the connection and block attacks.
The Yoldaş app
What data do we process, and for what purpose?
| Data | Purpose | Legal basis |
|---|---|---|
| Account details (email, password hash) | Creating your account and pairing your phone with the car | Formation and performance of a contract |
| Car readings and events | Car status, trip and charging history on your phone | Explicit consent (separate approval in the app) |
| Location | Trip routes, the car's last location, nearby charging stations | Explicit consent (separate approval) |
| Car profile and license hash | Compatibility, licensing and preventing misuse | Performance of a contract, legitimate interest |
| Command and live view logs | Showing who sent a command or watched, and when | Legitimate interest, security |
| Notification subscription | Sending the notifications you choose to your phone | Explicit consent |
Camera recordings stay in the car; live video is not stored on the server. The VIN is not sent to the server. Details are on the security page.
Who do we share data with?
- Cloudflare: the network service in front of the site and the server. It delivers the traffic.
- Notification services (Apple, Google, Mozilla): to deliver notifications to your phone. The notification content is encrypted with a key unique to your phone.
- Weather and map data (Open-Meteo, OpenStreetMap): requests go from our server and the location is rounded to about 1 km; your account is not passed to these services.
Some of these services are located outside Turkey. We do not sell your data or use it for advertising.
How long do we keep data?
App data is kept until you delete it or ask for your account to be deleted. "Delete this car's history" in the phone app deletes readings, events and charging records.
Your rights (KVKK Article 11)
You have the right to learn whether your data is processed, to request information, to ask for it to be corrected or deleted, to learn who it was transferred to, to object, and to claim compensation if you suffered harm. You can submit your request via iletisim@yoldas.io. We will answer free of charge within 30 days at the latest.
You can withdraw your explicit consent at any time: just turn off sending readings and location on the car screen.