Privacy Policy

Last updated: October 20, 2026

This policy explains how Nawras ("Nawras", "we") collects, uses and protects your data when you use the Nawras passenger app, the Nawras Driver app or nawrasapp.xyz. The service is operated from Istanbul, Türkiye, by Yasin Halit Karayağız as the data controller.

1Data we collect

Account data: name, phone number, email address, profile photo (optional) and preferred language.
Location data: in the passenger app we use your location while the app is in use to set your pickup point and follow your trip. In the driver app we also collect location in the background, only while the driver is "online", to match requests and share the vehicle's position with the passenger.
Trip data: pickup and drop-off points, route, time, fare, ratings and feedback.
Additional driver data: driving licence, vehicle details and plate, documents legally required for verification, and payout details.
Payment data: payment method and transaction history. We never store full card numbers; card payments (where offered) are processed by a licensed payment provider.
Device and usage data: device model, operating system, push token, crash logs and IP address.
Communications: support messages and in-app text and voice messages between passenger and driver. In-app voice calls are not recorded, and your phone number is not shown to the other side.

2How we use your data

To provide the service: matching passengers with drivers, calculating fares, showing the route and completing trips.
Safety and security: verifying drivers, preventing fraud, and investigating complaints and incidents.
To contact you: trip notifications, support replies and important updates.
To improve the service: aggregated crash and performance analysis.
Legal obligations: keeping records required by law and responding to lawful requests from authorities.

3Who we share your data with

Between passenger and driver: the driver sees the passenger's name, pickup point and destination; the passenger sees the driver's name, photo, rating, vehicle model, plate and live location during the trip.
Service providers: hosting, maps (MapLibre and OpenFreeMap) and navigation, push notifications (Firebase Cloud Messaging), in-app voice calls (Agora) and the AI support assistant (OpenAI), which processes only the questions you send in the support screen — only as far as needed to run the service.
Authorities: where there is a binding legal request or to protect someone's safety.

We do not sell your personal data and we do not use it for third-party targeted advertising.

4Device permissions

Location: required for the service to work. You can turn it off in your device settings, but you will then be unable to request rides or receive requests.
Notifications: to keep you updated on your trip. Optional.
Camera and photos: only for your profile photo or uploading driver documents.

5Data retention

We keep account data for as long as the account is active. Trip and transaction records are kept for the period required by Turkish law (generally up to 10 years for financial records). After that, data is deleted or anonymised.

6Deleting your account

You can delete your account at any time in the app: Menu → Delete account, or by emailing support@nawrasapp.xyz. Your personal data is deleted within 30 days, except what we are legally required to keep.

7Your rights

Under the Turkish Personal Data Protection Law (KVKK No. 6698) and, where applicable, the EU GDPR, you have the right to:

Know whether your data is processed and access it.
Correct inaccurate data.
Request deletion or restriction of processing.
Object to processing and receive a copy of your data.
Lodge a complaint with the Turkish Personal Data Protection Authority (KVKK).

To exercise these rights, email support@nawrasapp.xyz. We reply within 30 days.

8Data security

We use encrypted connections (HTTPS/TLS), limited access permissions and hashed password storage. No system is 100% secure, but we work continuously to protect your data.

9Children

The service is intended for people aged 18 and over. We do not knowingly collect data from children.

10International transfers

Data is stored on servers in Türkiye or the European Union. Some service providers may process data outside Türkiye with appropriate safeguards.

11Changes to this policy

We may update this policy from time to time. The new version will be posted here with its date, and we will notify you in the app about material changes.

12Contact

Yasin Halit Karayağız — Istanbul, Türkiye
Email: support@nawrasapp.xyz