Diyar Mobil Privacy and Cookie Policy

1. Collected Data and Collection Methods

Our mobile application does not request identification information such as name, surname, email address, or phone number from its users, and there is no registration or login mechanism. Such information is received only if you voluntarily fill in the contact or business application forms on our website (see 1.d). In the application, the following anonymous or device-specific data is collected so that the features function properly:

a. Location Data

The Application requests real-time access to your GPS/Location data to provide you with location-specific services. This data is not matched with your identity. Your location data is used for the following purposes:

• Road Status (Traffic and Radar) Map: To show your position on the map while the app is open and, when you choose to leave a report, to verify that the report is within 3 km of where you are and inside Diyarbakır city limits. The location sent for this check is used only at that moment and is not stored on our servers. The application does not track your location in the background (while closed).
• Taxi Services: To identify the nearest taxi stands to you and calculate the distance (in meters/kilometers).
• Journey Planner (How to Go?): To create the most suitable public transportation route from point A to point B using the "My Current Location" option.
• Weather: To provide you with real-time meteorological data for your current district.

b. Device and Hardware Identifiers

To ensure system security, prevent spam transactions, and improve service quality, completely anonymous device identifiers and network data are collected in the background:

• IP Address and Request Logs (AI Security): To prevent abuse (spam/bot attacks) and manage daily capacity quotas, your device's IP address and daily usage frequency made to our artificial intelligence assistant (Diya Ai) are securely kept as security logs on our servers.
• Push Notification Token: An anonymous token created to deliver important announcements and notifications to your device is saved in our database.
• Device ID (UUID): To prevent duplicate voting in systems such as the sports match score prediction system, a device-specific anonymous ID is obtained and stored in our secure database.
• Terms Acceptance Record: When you accept the Terms of Use and Privacy Policy on first launch, an anonymous identifier of your device and the time of acceptance are saved in our database as proof of that consent.
• Usage Statistics: Anonymous metrics such as clicked news and content (module and item name), whether a notification was viewed or tapped, or interacted advertisements are kept as "Logs" to improve the user experience. These records contain no identity details such as name or phone number.

c. Website Visitor Data

When you visit our website www.diyarmobilapp.com, standard log records such as your IP address, browser type, and time spent on the site may be processed anonymously for server security, site performance, and visitor analysis.

d. Website Forms (Contact and Business Application)

If you fill in the contact form or business application form on our website, the name (or business and contact person name), email address, phone number (business form), subject, and message you enter are delivered to us by email. This information is used only to respond to and evaluate your request, is not used for advertising, and is not shared with third parties. The email service provider used to deliver the message processes it on its infrastructure. Your data is kept for as long as needed to conclude your request and as legal obligations require, and then deleted or anonymized. Filling in the forms is entirely optional.

e. Device Permissions

• Location: Optional; used only while the app is open and for the purposes described in (a) above.
• Notifications: Optional; used to deliver announcements and notifications.
• Calendar: When you choose "add to calendar" for an event, permission is requested solely to write that event to your device calendar. Your calendar content is not sent to our servers.

2. User-Generated Content

Data you voluntarily share within the Platform is processed as follows:

• Road Status (Radar and Traffic) Reports: Reports you make on the map by choosing one of three predefined types (checkpoint, speed radar, accident / road closed) are added to a shared database and shown to other users. No free text, photos, or identity details such as your name can be entered in this module. When you submit a report, the following is processed:
  • the report type and the report's coordinates,
  • a one-way cryptographic hash (SHA-256) of a randomly generated ID that belongs to your device. The raw ID stays on your device; only this hash appears in the shared table and to other users,
  • your votes (which reports you voted yes/no on) and the anonymous trust score derived from them.

  This data is not linked to your name, phone number, or email address. However, because it contains a device-specific identifier, it may be considered personal data (pseudonymous data) under the KVKK and is protected accordingly. Reports are automatically deleted after 2 hours at the latest, or removed by community vote. You may cancel your own report at any time. By submitting a report you consent to this data being processed for the purposes above and shared with other users; granting location permission is optional, and if you do not grant it you simply cannot leave reports.

  Road Status reports are created and verified by users; they are not affiliated with law enforcement or any public authority and are not official information.

• Diya Ai (Artificial Intelligence): The questions you ask our artificial intelligence assistant and your chat history are kept in your device's local memory. To produce answers, the texts you write are transmitted to our servers and to a third-party artificial intelligence service provider (e.g., OpenAI). To measure and improve service quality, the text of your message and the topic/intent determined by the system are recorded on our servers without identity details; your IP address is kept separately as a daily usage counter to prevent abuse. If you have granted location permission, your location is also sent to our servers to calculate distances for questions such as "near me"; it is not recorded. For this reason Users must strictly avoid sharing their National Identity Number, credit card numbers, passwords, or other sensitive personal data while chatting with the assistant.

3. Third-Party Services and Data Sharing

Our Platform integrates with reliable third-party service providers (or external sources) to strengthen its infrastructure and provide uninterrupted service:

• Cloud Database Services (Supabase): This is the main cloud database of the Platform. News, events, anonymous polls, radar notifications, and usage statistics are hosted on the Supabase infrastructure.
• Location and Notification Services (Expo): Expo services provide the infrastructure for obtaining your device location and delivering instant push notifications to your device.
• Mapping and Venue Sources (Google Maps etc.): In-app map displays and external route directions; address, phone, name, and star/rating information of food-beverage venues, pharmacies, and taxi stands are presented by pulling from your device's map infrastructures and external services like Google Maps.
• External Maps and Links: Some map screens load OpenStreetMap map tiles; your IP address and the area being viewed are then sent to the relevant map server. External links you open from the app (news, map directions, etc.) open in an in-app browser or your device's browser; those sites' own privacy policies apply and we are not responsible for them.
• Email Service: Messages from website forms are delivered to info@diyarmobilapp.com through our email service provider.
• News and Market Sources: Local news and Amedspor news in our application are pulled over the Amida Haber RSS infrastructure. Markets (gold, silver, currency) data is provided from external financial websites.
• Artificial Intelligence Services (OpenAI): The Diya Ai module uses the infrastructure of industry-standard reliable artificial intelligence language models (e.g., OpenAI API) to answer your questions.
• Advertising Services (Google AdMob): Our Platform uses Google AdMob advertising infrastructure to provide free services. In this context, your device's advertising identifier (Advertising ID) and anonymous usage data are shared with Google to display advertisements relevant to your interests. This data is not matched with your personal identity.
• International Data Transfer: Since the servers of service providers such as OpenAI, Google AdMob, Supabase, and Expo used in the infrastructure of our platform are located abroad, the anonymous device data and processed texts mentioned above are transferred abroad in accordance with KVKK due to technical necessities.

4. Cookies and Local Storage (AsyncStorage)

• Website (Cookies): Our website www.diyarmobilapp.com uses essential cookies for basic functions to work properly. You can manage cookies at any time from your browser settings.
• Application (Local Storage): Our Application stores settings such as your favorite places, language preference, application theme setting (dark/light mode), and whether you have completed the "Welcome Tour" directly in your device's memory as unencrypted text (AsyncStorage). Your chat history is also kept on the device in the same way. Such personal preferences are not sent to our servers.

5. Data Security and Your Rights under KVKK

Current technological standards are used to ensure the security of your data. Pursuant to Article 11 of the KVKK No. 6698, users have the right to learn whether their personal data is processed, request information if it has been processed, request correction if it is incomplete/incorrectly processed, and request deletion of the data when legal conditions are met. As a user, you always have the following rights via your device:

• Location Permission Management: You can limit or completely revoke the application's location access at any time from your device's "Settings" menu.
• Notification Management: You can turn off instant notifications from the "Settings & More" tab within the application or from your device settings.
• Reports and Data Requests: If you believe a report in the Road Status module is incorrect, misleading, or unlawful, or you want information about or deletion of data tied to your own device, write to info@diyarmobilapp.com. Requests involving location and report data are answered within a reasonable time, at most 30 days; reports found to be unlawful are removed without delay. Because your device ID is stored only as a one-way hash, we may ask you to describe the approximate time and place of the report so that we can locate your data.
• Local Data Clearance: When you uninstall the application from your device, all your personal preferences and chat history kept in the device memory will be completely deleted from your device.
• Ad Preference Management: You can limit data sharing by turning off personalized ads from your device's settings (e.g., "Limit Ad Tracking" for iOS, "Opt out of Ads Personalization" for Android).
• Rights of Business and Stand Owners: The business, venue, pharmacy, and taxi stand information presented for the benefit of the public in our application is largely compiled from public external sources such as Google Maps and the internet. If the relevant business or stand owners wish to edit their information in our application or have it completely removed from our platform, they can contact us via info@diyarmobilapp.com to get support.

6. Children's Privacy

While our Platform appeals to a general audience, it is not designed for individuals under the age of 13. The application does not knowingly or intentionally collect personal data from children under the age of 13. It is recommended that underage users use the application under the supervision of their parents.

7. Data Controller, Purposes, Legal Grounds, and Retention

• Data Controller: Under the KVKK, the data controller is DELTA ARAŞTIRMA VE YAPAY ZEKA TEKNOLOJİLERİ, the developer and operator of Diyar Mobil. Contact and application details are given at the end of this Policy.
• Purposes: Providing city guide services, running location-based features, securing the Road Status and voting systems, preventing abuse, delivering notifications, improving the service, answering requests and complaints, showing advertising, and meeting legal obligations.
• Legal Grounds: Your data is processed under KVKK Art. 5/2 where necessary to provide the service (performance of a contract), for our legitimate interests such as system security and abuse prevention, and for legal obligations; and, for device permissions such as location, notifications, and calendar and for personalized advertising, within the permission/explicit consent you give. You can withdraw these permissions at any time from your device settings; withdrawing only means the related feature cannot be used.
• Transfers: Your data is shared with the infrastructure, map, artificial intelligence, and advertising providers listed in section 3 to the extent necessary to provide the service; it is not sold. It may be shared with competent public authorities where legally required.
• Retention: Road Status reports are deleted after 2 hours at the latest; the records kept for that module's 30-minute rate limit are deleted within 1 day. Other data is kept for as long as needed for the purpose and for periods required by law, and then deleted or anonymized.
• Your Rights and Applications: You can send your requests under KVKK Art. 11 to info@diyarmobilapp.com; requests are answered within 30 days at the latest, depending on their nature. If you are not satisfied with the response, or no response is given in time, you reserve the right to complain to the Personal Data Protection Board. Except with explicit consent, your data is not used as the basis of a decision made solely by automated systems that produces a result against you; Diya Ai answers and the Road Status trust score serve only the operation of the service.
• Data Breach: If your data is unlawfully obtained by others, the persons concerned and the Board are notified in accordance with the legislation.
• Policy Changes: This Policy may be updated; the current version is published with the "Last Updated" date at the top of the page. For significant changes we will try to inform you within the application.
• Security: Access to data is restricted by authorization; device identifiers in shared tables are stored as hashes rather than in raw form, and database access rules (RLS) are applied.

8. Contact

If you have any questions, opinions, or requests regarding the processing of your personal data under KVKK about this Privacy and Cookie Policy, you can contact us directly via the channel below: