Privacy Policy
Last updated: 13 April 2026
Nitro Bilişim ("Tamirhane.ai", "we") takes the security of your personal data seriously. This policy explains what data we collect through the Tamirhane.ai mobile app and website, how we use it, who we share it with, and your rights — in accordance with the Turkish Data Protection Law (KVKK, Law No. 6698) and applicable regulations.
1. Data Controller
Data controller: Nitro Bilişim · Tamirhane.ai
Contact: [email protected]
Web: https://tamirhane.ai
2. Data We Collect
We process the following categories of data to provide the service:
- Account data: name, phone number, email, password (stored as a hash), profile photo.
- Identity verification (KYC) documents: for workshop / technician accounts — ID card, tax plate, insurance policy, shop photos, national ID number, equipment photos.
- Vehicle data: plate, brand, model, year, engine, registration photo, VIN, odometer.
- Location data: device location used to show nearby workshops and create appointments (only with your permission).
- Payment data: payments are processed via PayTR. Card details are NOT stored on our servers — only transaction ID and amount.
- Camera and photo access: to take and upload vehicle, fault, or document photos.
- Push notification data: Firebase Cloud Messaging token used to send notifications.
- Device and usage data: OS, device model, app version, IP address, crash reports, in-app interactions.
- Diagnostic data: for authorized technician accounts, vehicle diagnostic reports from OBD/Autel/Topdon devices (DTC codes, system scan results).
3. How We Use Your Data
- To create and manage your account
- To run appointment, offer, payment and service-tracking flows
- To review workshop/technician KYC submissions
- To show you service providers nearby
- To provide customer support and communication
- To meet legal obligations (invoicing, tax)
- To measure quality and improve the product
- With your consent, to send marketing communication
4. Legal Basis
Your data is processed under KVKK Art. 5 and 6 on the following legal grounds: performance of a contract, compliance with a legal obligation, our legitimate interests, and your explicit consent for notifications and marketing.
5. Sharing and Third Parties
Your data is shared only in the following cases and only to the extent required:
- Google Firebase (Cloud Messaging, Crashlytics) — notifications and crash reporting
- Google Cloud / AWS — application infrastructure and file storage
- PayTR — payment processing
- Map providers (Leaflet / OpenStreetMap) — location visualization
- Workshops / technicians — appointment and service details (only for the related transaction)
- Public authorities — when legally required
We do not sell your data to third parties for advertising.
6. Data Retention
Your data is retained for the duration of the service and for the period required by applicable law (generally up to 10 years for commercial records). When you delete your account, your active data is deleted immediately; only data we are legally required to keep (e.g. invoice records) is retained for the statutory period.
7. Security
Data is transmitted over TLS. Passwords are hashed with bcrypt. Sensitive documents (KYC, vehicle registration) are stored with access-controlled storage. Card details are not stored on our servers — they are handled by a PCI-DSS compliant payment provider.
8. Your Rights
Under KVKK Art. 11 and GDPR where applicable, you have the right to:
- Know whether your personal data is processed
- Request information about processed data and receive a copy
- Have incorrect or incomplete data corrected
- Request deletion or erasure
- Be informed about third parties your data has been shared with
- Object to decisions made solely by automated processing
- Claim compensation for damages
To exercise these rights, email [email protected] or use the "Delete my account" option inside the app.
9. Children's Privacy
Tamirhane.ai is not intended for users under 18 years of age, and we do not knowingly collect data from anyone under 18. If we become aware of such an account, it is deleted.
10. International Transfers
Our infrastructure providers host servers in Turkey and the European Union. Some third-party providers (Google, AWS) may process data in the EU or the United States. Such transfers take place under KVKK Art. 9 with your explicit consent or equivalent safeguards.
11. Changes to This Policy
We may update this policy from time to time. Changes are published on this page, and material changes are announced in-app. The last update date is shown at the top of the page.
12. Contact
For privacy or data processing questions:
Email: [email protected]
Web: https://tamirhane.ai
