Privacy Policy
Last updated: 1 November 2026
This Privacy Policy summarises how personal data is handled in the Navigo mobile apps (iOS and Android), the Araç Takip Pro, Araç Takip Red and Mest Araç Takip apps on the same platform, and the app.navigo.com.tr web panel. Full details are in the Personal Data Notice; both texts describe the same rules.
1. Who we are
- Name: Selman EROL – Mest Yazılım ve Bilişim Teknolojileri (sole proprietorship; owner Selman EROL)
- Brand: Navigo Vehicle Tracking
- Address: Hürriyet Mahallesi Atatürk Bulvarı Altan İş Merkezi No:48/9 Altınova / Yalova / Türkiye
- Phone: +90 850 532 6378
- E-mail: info@navigo.com.tr
- Web: www.navigo.com.tr
For location and driver data coming from vehicles, the controller is our customer who owns the vehicle; we process that data on the customer’s behalf.
2. Data we collect
- Account: name, username, e-mail, phone, company; passwords only as one-way hashes.
- Vehicle and location: location, speed, ignition, sensor and alarm data from GPS devices in vehicles.
- Device location: only with your permission, to show your position and find the nearest vehicle. You can turn it off in device settings at any time.
- Notifications: device push token.
- Payments: amount, status, masked card number. Card data is not stored by us; it goes to Paynet.
- Security and activity logs: IP address, approximate city, device/browser data, session and action times.
- Support: your messages and optional screenshots.
We do not collect advertising IDs. The apps have no ads, third-party analytics or session recording. We do not sell your data.
3. How we use it
To provide vehicle tracking, protect your account, send notifications, process payments and invoices, give support and meet our legal obligations. Promotional messages are sent only if you opted in separately.
4. Sharing and transfers abroad
In Türkiye data may be shared with Paynet (payments), NetGSM and Verimor (SMS), your authorised dealer, authorised users of your account and competent authorities. Limited data goes abroad to:
Maps – directly from your device: when you open a map or search for an address in the panel or app, your device connects to the map provider itself. These requests do not pass through our servers; the provider receives your device’s IP address and the visible map area or the searched location.
- Google LLC (USA) – Google Maps tiles.
- OpenStreetMap Foundation (UK) – map tiles and Nominatim address lookup.
- CARTO (CartoDB Inc.), FOSSGIS e.V. (Germany) and OpenFreeMap – alternative map tiles.
Notifications – through notification services: push notifications (e.g. alarms) can only reach phones through the operating system’s notification service; there is no other way. By the nature of these services, a notification travels from our server through these providers to your device. The provider receives the device push token and the notification content (e.g. alarm type, vehicle name or plate).
- Google LLC (USA) – Firebase Cloud Messaging (Android).
- Apple Inc. (USA) – Apple Push Notification Service (iOS).
- 650 Industries, Inc. (USA) – Expo push service.
To limit transfers abroad, fonts and map glyphs on the website and panel are served from our own servers, and the Google map on the contact page loads only after you click “Show map”.
5. Retention
- Vehicle location, history, trip, stop and alarm records: 6 months.
- Account, identity and contact data: for the term of the contract and 2 years after it ends.
- Invoices, payment and accounting records: 10 years under Turkish tax and commercial law.
- Activity and access logs (IP address, time, action, browser/device): 1 year (traffic data under Law No. 5651).
- Device communication logs (technical): 30 days in the live system, up to 2 years in the archive.
- Website forms and quote correspondence: 2 years; kept with contract records if a contract follows.
- Marketing consent: until withdrawn, then 3 years as proof.
- Push token: until you sign out or uninstall the app.
Data is deleted, destroyed or anonymised when its period ends.
6. Account and data deletion
You can request deletion of your account and personal data by writing to info@navigo.com.tr from your registered e-mail address. We complete requests within 30 days. Records we must keep by law (e.g. invoices) are kept only for that period with restricted access. If your account belongs to a company, you can also ask your company administrator.
7. Security
All connections use HTTPS; two-factor authentication, role-based access, activity logging and backups are in place.
8. Your rights
Under Article 11 KVKK you may ask whether your data is processed, request information about it, learn the purpose and whether it is used accordingly, know the third parties it is transferred to in Türkiye or abroad, request correction or deletion, request that third parties be notified of these steps, object to adverse results of purely automated analysis, and claim compensation for damage caused by unlawful processing.
Send your request in writing to the address above, by registered e-mail (KEP), or from the e-mail address registered in our system to info@navigo.com.tr. Requests are answered free of charge within 30 days; if the request involves an extra cost, the fee set by the Personal Data Protection Board may apply. You may file a complaint with the Board if you are not satisfied with our answer.
9. Age limit
The apps are for people aged 18 or over. We delete data of under-18s if we find it.
10. Changes and contact
We publish updated versions on this page with their date and announce material changes separately. Questions: info@navigo.com.tr · +90 850 532 6378
