Personal Data Notice

Last updated: October 28, 2026 · Version 6

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), we inform you about the personal data processed when you use the Otovar app.

1. Data Controller

Kovak Yazılım ve Medya Ticaret Limited Şirketi
Email: bilgi@kovakyazilim.com

For the information mechanics record or import about their own customers, the mechanic is the data controller and Otovar is the data processor acting on the mechanic's instructions.

2. Personal Data Processed

• Identity and contact: name / business name, email, phone, address, profile photo, tax office and number (for mechanics). When signing in with Google, the name, email and profile photo of your Google account.
• Vehicle details: plate, make, model, year, VIN, fuel type, mileage, inspection/insurance/comprehensive insurance expiry dates, vehicle photos.
• Service details: service records, appointments, quote requests, work performed, parts, amounts, service photos.
• Fault report details: fault codes read with an OBD2 adapter, check-engine light status, battery voltage, engine temperature, mileage and VIN.
• Expense details: fuel and other vehicle expenses (visible only to you).
• Reviews: the rating and comment you give a mechanic; shown publicly with your abbreviated name ("Ahmet Y.") and vehicle make/model.
• Location: for mechanics, the business map location (on the public profile); the location of a quote request (mechanics see only the province/district and distance); the location and direction of road reports (the reporter's identity is not shown). Vehicle owners' live location is not stored on the server; it is used only on the device in the "Mechanics Near Me" search and while driving.
• Customer transaction details: support requests and messages, subscription details, app language.
• Transaction security: session data, IP address, access logs, last use time, app version, device platform and app error logs (error logs are kept for 30 days).

3. Purposes of Processing

• Creating your account and managing your session,
• Keeping your vehicle's service history and sharing it with the mechanic you are paired with,
• Handling appointments, quote requests and fault reports,
• Providing maintenance, inspection and insurance reminders and statistics,
• Showing nearby mechanics and publishing business profiles and customer reviews,
• Sharing navigation and road reports with other drivers,
• Providing the app in your chosen language and answering your support requests,
• Handling subscriptions and payments,
• Ensuring information security and meeting legal obligations.

4. Legal Grounds

Your data is processed under KVKK Art. 5/2 on the grounds of the formation and performance of a contract, the data controller's legal obligations and legitimate interests; processing such as ad personalisation relies on your explicit consent.

5. Transfers

Service records are shared with the mechanic you pair your vehicle with and their staff; fault reports only with the mechanic you share them with. If you create a share link for a vehicle history report, the report can be seen by people who have the link. Your data is stored and backed up on our servers in the European Union (Lithuania). Payments are made through Google Play; ads are shown by Google AdMob (personalised ads only with your consent). For route calculation and address search, the location and searched address are passed to OpenStreetMap-based services (OSRM, Nominatim) without identity information. Phone notifications are delivered via OneSignal and Google Firebase Cloud Messaging (notification token, account ID and notification content). When you sign in with Google, authentication is performed by Google. As our servers and these providers' servers are located abroad, transfers are made in accordance with the conditions of KVKK Art. 9.

6. Retention Period

Your data is kept while your account is open. Road reports are deleted within 2 days after they expire and app error logs after 30 days; vehicle history report links close at the end of the chosen period. When you delete your account your personal data is deleted; service records that mechanics must keep for legal reasons may be retained with the link to you removed.

7. Your Rights (KVKK Art. 11)

You have the right to learn whether your data is processed, request information, learn the purpose of processing and whether it is used accordingly, know the third parties in Turkey or abroad to whom it was transferred, request correction if it is incomplete or inaccurate and request its deletion or destruction, object to a result against you arising from analysis by automated systems, and claim compensation for damages. You can send your requests from your registered email address to bilgi@kovakyazilim.com; requests are concluded free of charge within 30 days at the latest. You can delete your account in the app or on this page.