Is Yoldaş safe?

What data is sent?

Sharing of readings only turns on with your consent; location needs a separate consent. If you agree, the following goes to the Yoldaş server:

• Car readings: values such as battery, range, speed, tire pressure, 12 V battery and consumption.
• Events: locking, doors, trunk, switching between parking and driving, start and end of charging.
• Location (with separate consent): for trip routes and "where is my car".
• Car profile: model code and software version.
• For connection diagnostics: the Wi-Fi network name and the car's local network address.

What is not sent?

• VIN. It stays in the car. For the license, only a one-way hash created from it is used.
• Camera recordings. They stay in the car. If you want to download one to your phone, only the recording you choose is transferred.
• Live video. It passes through the server but is not stored.
• Sentry images. The small images it checks are not written to disk or the cloud; only the time and type of the event are sent.

How is data protected?

• All connections are encrypted with HTTPS, and browsers are told to use HTTPS only (HSTS).
• Account passwords are never stored in plain text; they are stored with a strong hashing method (PBKDF2).
• The content of notifications sent to your phone is encrypted with a key unique to your phone.
• The admin panel is closed to the internet; it can only be opened through a secure tunnel to the server.
• Each account sees only its own car's data.

Live camera and phone commands

• Only the account that owns the car can watch the cameras; one viewing session at a time, for up to 10 minutes.
• While someone is watching, the car screen always shows a red "live view on" sign and a Stop button.
• Listening to the cabin and talking to the car are each turned on with a separate permission.
• Phone commands are single-use and valid for up to 60 seconds. Every command and its result is logged.
• If System › Phone control is turned off in the car, no phone command works.

Signed updates

All Yoldaş versions are signed with the same key. Before installing, automatic updates check the file's integrity, package name, version number and signature; an older version is never installed as if it were new. Updates download only over HTTPS and on an unmetered connection. The latest APK is always on the download page.

Permissions the app asks for

You can lock Yoldaş with a PIN on the car screen (System › App lock).

Deleting your data

In the Account section of the phone app, "Delete this car's history" deletes readings, events and charging records from the server. To have your account deleted completely, write to us: iletisim@yoldas.io. Your rights regarding personal data are on the privacy page.

If you find a security vulnerability, please report it to us first: iletisim@yoldas.io.