Privacy Policy

Effective: May 2, 2026

Overview

UstaBakim ("we", "our", "the app") respects the privacy of shop owners, their staff, and their customers. This policy explains what data we collect, why we collect it, and how we protect it.

Data We Collect

Account Data

UstaBakim has three account types:

• Owner: signs in with Google. Name, email, and profile photo are received from Google.
• Staff: joins via a 6-character invite code. Stored as an anonymous Firebase identity with a display name set by the shop.
• Customer: added by the shop. Customers sign in anonymously using a 6-character reference code to view their own vehicle history.

Shop Data

To run your shop, we store the following:

• Shop name, address, phone number, logo
• Customers: name, phone number, notes, reference code
• Vehicles: license plate, make, model, year, VIN, photos
• Mileage readings, service records (work performed, parts, cost, photos)
• Reminders and task records

This data belongs to the shop owner; we process it on the owner's behalf and do not claim ownership.

Push Notification Token

If you allow push notifications, we store the device token issued by Firebase Cloud Messaging (FCM) so we can deliver service reminders and shop notifications. You can disable notifications at any time in iOS Settings.

Subscription Data

Subscriptions are processed through the Apple App Store and managed via RevenueCat. We learn your subscription status (active, cancelled, renewing) but never see your payment method, Apple ID, or credit card details.

Technical Data

A small amount of technical data is recorded so the app runs reliably: device type, iOS version, anonymized error/request logs. This is not linked to you personally.

Where Data Is Stored & Service Providers

UstaBakim is built on Google's Firebase platform. The following Firebase and third-party services are actively used by the app:

• Firebase Authentication — Google Sign-In and anonymous sessions.
• Firebase Firestore — shop, customer, vehicle, service, and mileage records.
• Firebase Cloud Storage — vehicle photos, service photos, shop logo.
• Firebase Cloud Messaging (FCM) — push notifications.
• Firebase App Check — protection against unauthorized clients.
• RevenueCat — subscription verification and management.

Data is stored on Google Cloud infrastructure and protected by industry-standard encryption (TLS in transit, Google's at-rest encryption on the server).

Data We Do NOT Collect

• Advertising identifiers (IDFA)
• Location data
• Contacts, calendar, microphone
• Health or financial data

Data Retention

Shop data is kept until the owner deletes it or closes the account. After a deletion request, related data is removed from our live systems within 30 days. Removal from backups can take up to 90 days.

Children's Privacy

UstaBakim is not directed to children under 13 and does not knowingly collect data from children. If a child's data has been collected by mistake, please contact us and we will delete it promptly.

Your Rights

Under GDPR and Türkiye's KVKK you have the right to:

• Access and request a copy of your data
• Correct inaccurate data
• Request deletion of your data
• Receive your data in a portable format (JSON)
• Object to or restrict processing

To exercise these rights, email help.ismaildemirci@gmail.com.

Changes

We may update this policy from time to time. Material changes will be announced inside the app or on this page, and the effective date at the top will be updated.

Contact

Questions? Email help.ismaildemirci@gmail.com