1. Data Controller
İsar Group
Address: İskenderpaşa Mahallesi Ahmediye Caddesi No:4 Fatih / İSTANBUL, Turkey
Email: info@silago.com.tr
Phone: +90 212 524 3240
This Privacy Policy explains how SılaGo mobile application collects, uses, stores, and shares your personal data in accordance with the EU General Data Protection Regulation (GDPR). For users in Turkey, a separate Turkish version covering Turkey's KVKK is available.
2. Personal Data We Collect
Identity & Contact Data
First name, last name, email, phone number, username, profile photo.
Location Data
Real-time GPS location (latitude/longitude), last known location, convoy tracking shared location.
Vehicle Data
License plate number, vehicle brand, model, color, and type.
Document Data
Driver's license, vehicle registration, insurance, passport, and document metadata.
Communication Content
Chat messages, voice messages, media files, read/delivery receipts.
Device Contacts
Phone numbers from your contacts are processed to match you with other app users. Numbers are hashed on your device using SHA-256 and only these hash values are sent to our servers; raw phone numbers and contact names are never transmitted or stored.
Device & Technical Data
Device ID, platform (iOS/Android), FCM token, app and OS version.
Usage Data
Help requests, ratings, reviews, online/offline status.
Social Login Data
Google/Apple account information (email, name, profile photo, identity token).
Special Category Data
Help request type related to health (medical emergency, accident).
3. Purposes and Legal Bases
- Account creation and authentication: Contract performance
- Location-based help matching: Legitimate interest
- Continuous location tracking: Consent
- Convoy tracking: Consent
- Messaging service: Contract performance
- Document storage (local on device only): Consent
- Contacts synchronization: Consent
- Emergency help request: Vital interest
- Crash reports (Crashlytics): Legitimate interest
- Push notifications: Contract performance
- OCR and translation: Consent
4. Third-Party Data Sharing
Your data is shared with:
- Google LLC (USA): Firebase Crashlytics, FCM, Google Maps, Cloud Vision OCR, Google Sign-In
- Apple Inc. (USA): Apple Sign-In
The voice communication infrastructure (LiveKit) is self-hosted on our own servers; voice room audio data is not transferred to any third party abroad.
International transfers are carried out under GDPR Standard Contractual Clauses (SCCs) and/or adequacy decisions.
5. Data Retention
- Account data: Until account deletion
- Location data: Only last known location stored
- Chat messages: Until account deletion (anonymized upon deletion)
- Documents: Until deleted by user (local)
- Crash reports: 90 days
- Audit logs: 1 year
6. Local Storage
- Encrypted storage: Access/refresh tokens, user ID, email
- Preferences: Theme, language, session state, last location, device ID
- Local database: Chat history, pending messages
- File system: Uploaded documents, cached images
7. Your Rights
Under GDPR Articles 15-22:
- Right of access and information
- Right to rectification and erasure
- Right to restriction of processing
- Right to data portability
- Right to object
Contact: Settings > Privacy > Data Request or info@silago.com.tr
8. Data Security
- HTTPS/TLS encryption
- JWT authentication (access: 30 min, refresh: 90 days)
- BCrypt password hashing
- SHA-256 hashing for contact matching (raw numbers never sent to server)
- iOS Keychain / Android KeyStore encrypted storage
- API rate limiting
- Role-based access control
9. Children's Privacy
Our App is open to users of all ages. Minors are expected to use the App with the consent of a parent or legal guardian. If you become aware that your child has provided us with personal data and you wish to have it removed, please contact us at info@silago.com.tr; we will take steps to delete it.
10. Policy Changes
Changes will be communicated through the App. Significant changes will be notified via push notification.
11. Contact
Email: info@silago.com.tr
Address: İskenderpaşa Mahallesi Ahmediye Caddesi No:4 Fatih / İSTANBUL, Turkey
Phone: +90 212 524 3240
GDPR complaints: Your local Data Protection Authority in the EU/EEA