Privacy Policy

This Privacy Policy applies to information processed through:

1. The Yakıt365 mobile application.
2. In-app features such as guest access, authentication, notifications, news, market data, premium features, support, and sharing tools.
3. Related communications that reference this Privacy Policy.

This Privacy Policy does not apply to third-party websites, apps, marketplaces, payment processors, or content providers that we do not own or control, even if the Service links to them.

We collect information in four main ways: information you provide, information collected automatically, information stored locally on your device, and information received from third-party providers or infrastructure.

2.1 Information You Provide

Depending on how you use the Service, you may provide:

1. Account information, such as your full name, email address, Apple account-derived identifier, or other provider information when a sign-in method is enabled and used.
2. Support or feedback content, such as messages you send through support email or issue-report flows.
3. Preferences you choose in the app, such as selected province, selected fuel type, notification fuel categories, language, theme, and similar settings.
4. Sharing actions you initiate through the device share sheet, such as sharing a price card, app link, or news item.

2.2 Information Collected Automatically

When you use the Service, we or our service providers may automatically process:

1. Internal account data, including role, user ID, tokens, subscription status.
2. Network and request metadata, such as IP-address information visible to backend systems, app check tokens, request headers, and server interaction logs.
3. Push-notification information, including device push token, notification permission status, and notification preference selections.
4. Analytics and diagnostics data, such as app events, error events, and similar usage telemetry.
5. Advertising-related data, including advertising identifiers or similar SDK data where supported by the platform and allowed by your settings, permissions, or applicable law.

2.3 Information Stored Locally on Your Device

The Service stores certain information on your device in secure or app-local storage, including:

1. Secure data and cached security keys.
2. Saved preferences such as filters, tracking-transparency status, and notification status.
3. Search history or similar convenience data, where that feature is used.

Some of this information is stored using encrypted or platform-secure storage mechanisms where supported by the app and device.

2.4 Information from Third Parties and External Sources

We may receive information from:

1. Authentication providers, such as Apple, when you choose to sign in through them.
2. Subscription and entitlement infrastructure, such as RevenueCat and the relevant app marketplace.
3. Analytics, messaging, advertising, and infrastructure partners.
4. News, market, commodity, or other content feeds made available through the Service.

Because of the way Yakıt365 is currently implemented, the following project-specific processing is especially relevant:

1. Authentication continuity: the app uses token logic to keep users signed in where available.
2. Fuel preference personalization: the app stores province and fuel selections to personalize price and market screens.
3. Notifications: the app can register a push token and store fuel-price notification preferences to deliver price-change notifications and related updates.
4. Analytics: the app logs core usage events and app-error events.
5. Subscriptions: where premium access is offered, the app may use RevenueCat and the applicable app marketplace to verify entitlements and manage subscription status.
6. Ads: the app includes Google Mobile Ads / AdMob components and may show ad content in non-premium experiences.

We use information for the following purposes:

1. To provide the Service, including loading prices, market data, commodity information, news, and user settings.
2. To authenticate users, maintain sessions, protect accounts, and prevent abuse, fraud, or unauthorized access.
3. To personalize the experience based on your selected settings.
4. To send notifications and manage your notification preferences.
5. To provide premium or subscription features and verify entitlement status.
6. To measure usage, understand performance, diagnose errors, and improve the Service.
7. To display, optimize, and measure advertising where supported.
8. To provide support, process feedback, and communicate with you about technical or operational matters.
9. To comply with legal obligations, enforce our Terms of Use, and protect rights, property, safety, or the integrity of the Service.

Where applicable law requires a legal basis for processing personal data, we rely on one or more of the following:

1. Performance of a contract or steps taken at your request, such as providing the Service you choose to use.
2. Legitimate interests, such as securing the Service, preventing abuse, improving reliability, maintaining analytics, and understanding product performance.
3. Consent, where required, such as for push notifications, tracking-related permissions, or certain advertising and optional device permissions.
4. Compliance with legal obligations, court orders, regulatory requests, tax, accounting, consumer-protection, or law-enforcement requirements.

We do not sell your personal data for money. We may share information in the following circumstances:

6.1 Service Providers and Infrastructure Partners

We may share relevant data with providers that support operation of the Service, such as:

1. Backend, hosting, or API infrastructure.
2. Firebase services for analytics, messaging, and related infrastructure.
3. Google Mobile Ads / AdMob for advertising services.
4. RevenueCat and the relevant app marketplace for subscription and entitlement handling.
5. Mapping, device-service, crash, content-delivery, or similar technical providers where needed.

6.2 Third-Party Content and External Links

When the Service displays or links to third-party news, publisher pages, store pages, or other external destinations, those third parties may collect data directly from you once you interact with them.

6.3 Legal, Safety, and Compliance

We may disclose information if we reasonably believe disclosure is necessary to:

1. Comply with applicable law, regulation, legal process, or enforceable governmental request.
2. Detect, investigate, or prevent fraud, abuse, security incidents, or unlawful activity.
3. Protect the rights, safety, property, users, or operations of Yakıt365, our providers, or the public.

6.4 Business Changes

If the Service or its operator is involved in a merger, acquisition, restructuring, financing, asset sale, or similar transaction, information may be disclosed as part of that process subject to appropriate confidentiality and legal safeguards.

Some service providers may process information in countries other than the country in which you are located. By using the Service, you understand that data may be transferred to and processed in multiple jurisdictions, subject to applicable legal safeguards where required.

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain records, resolve disputes, enforce agreements, meet legal obligations, and protect the Service.

Examples include:

1. Account and profile data: retained while your account or app-based access remains active, and for a reasonable period afterward as necessary for legal, operational, or security purposes.
2. Security data: retained as needed for authentication, fraud prevention, and incident response, then deleted or rotated according to operational needs.
3. Push-token and notification preference data: retained until disabled, revoked, replaced, or no longer needed for notification delivery.
4. Local device data: retained on your device until you remove it, clear app storage, log out, or uninstall the app, subject to the underlying platform behavior.
5. Support records: retained as needed to address your request, maintain internal records, and protect legal rights.

We use reasonable technical and organizational measures designed to protect information processed through the Service. The current implementation includes, among other things:

1. Secure local storage for certain tokens.
2. Device-based identifiers.
3. Service-side authentication controls.

No security measure is perfect. We cannot guarantee absolute security of any system, network, or transmission.

You can make a number of choices about how the Service handles your information:

1. Account choices: you may use guest access where available instead of a named sign-in method.
2. Notification choices: you may enable or disable notifications through your device settings and, where available, through in-app preference controls.
3. Subscription choices: you can manage subscriptions through the relevant app marketplace account settings.
4. Tracking and advertising choices: on supported iOS devices, you can manage app tracking permissions through system settings; ad behavior may also depend on marketplace, platform, or provider settings.
5. Local storage choices: you can clear local data by changing settings, clearing app storage, logging out, or uninstalling the app, though some provider-side records may remain.
6. Support and deletion requests: you can contact us to request help, access, correction, or deletion, subject to verification and applicable legal exceptions.

Depending on where you live and the law that applies to you, you may have rights such as:

1. The right to know whether we process your personal data.
2. The right to request access to data we hold about you.
3. The right to request correction of inaccurate or incomplete data.
4. The right to request deletion, anonymization, or restriction of certain data.
5. The right to object to certain processing based on legitimate interests.
6. The right to withdraw consent where processing depends on consent.
7. The right to data portability where applicable.
8. The right to lodge a complaint with a competent data-protection authority.

If you want to exercise a privacy right, contact us at info.yakit365@gmail.com. We may ask for reasonable information to verify your identity and protect the privacy and security of users.

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13 without appropriate authorization where required by law. If you believe a child has provided us personal data inappropriately, contact us and we will review the matter.

Some versions of the Service may request device permissions such as:

1. Notifications, to send app or fuel-price alerts.
2. Tracking-transparency permission, where required by iOS for certain advertising or tracking-related processing.
3. Photo-library or media permissions, where a feature requires user-initiated sharing or media access.
4. Location permission, if location-based map or nearby-station functionality is enabled in your version of the app.

If location features are enabled, location access is intended to support nearby or map-based functionality. You can generally continue using core price-tracking functionality through manually selected province and fuel preferences even if you deny optional permissions.

The current codebase indicates use of, or integration points for, third-party services such as:

1. Apple services for app distribution, authentication, and marketplace billing.
2. Firebase.
3. Google Mobile Ads / AdMob.
4. RevenueCat.
5. External news and content sources, including Google News RSS queries and backend-provided market or news content.

Those providers process data under their own terms and privacy policies. We encourage you to review the relevant third-party privacy notices before relying on those services.

We may update this Privacy Policy from time to time. If we make material changes, we may revise the Effective Date above and provide additional notice through the app or other reasonable means where required by law.

Your continued use of the Service after an updated Privacy Policy becomes effective means that you acknowledge the revised policy.

If you have questions, requests, or complaints about this Privacy Policy or privacy practices related to the Service, contact:

Yakıt365 Support
Email: info.yakit365@gmail.com