Privacy Policy

Last updated: 2026-10-02

1. Data controller

Your personal data is processed by the app's developer ("the developer", "we") as data controller under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"). You can reach the developer at videogke@gmail.com.

2. What this app does

KaportaAI documents a vehicle's exterior in photos. When the same vehicle is scanned again, it shows what changed between the two scans.

3. What we process

• Photos you take. The parts you chose to scan, the front photo used to recognise the vehicle, and — if the mileage step is on — a photo of the dashboard.
• Vehicle details. Plate, make, model, colour, and the mileage read or entered.
• Scan details. Date, and the operator and business names you set in Settings.
• Device and technical data. A random device ID the app creates; the operating system and app version; capture quality measurements (such as sharpness, exposure and how much of the frame the vehicle fills). These measurements contain no photos.
• Crash reports. If the app crashes or hits an unexpected error: a technical record of the error (which line of code it happened on), the phone model, operating system and app version. They contain no photos, screenshots, plates, email addresses or account IDs; plates and email addresses quoted in an error message are removed before it is sent. You can turn them off in Settings.
• If you sign in: the account ID and email address Google or Apple gives us — Apple's relay address if you chose to hide your email.

You don't need an account; the app works without signing in. We don't collect your location, contacts or advertising ID.

4. Why, and on what legal basis

• To provide the service: storing photos, recognising the vehicle, comparing scans, producing reports. Legal basis: performance of a contract (KVKK art. 5/2-c).
• Security and abuse prevention: rate limits, device verification. Legal basis: legitimate interest (KVKK art. 5/2-f).
• Improving capture quality: capture measurements and a cost record of AI calls. Legal basis: legitimate interest (KVKK art. 5/2-f).
• Fixing bugs: crash reports. Legal basis: legitimate interest (KVKK art. 5/2-f).
• Improving damage detection (optional): only if you agree, the training data described in section 7. Legal basis: explicit consent (KVKK art. 5/1).

5. Photos are kept until you delete them

This matters, so we say it plainly: your photos are kept until you delete them.

That is how the product works. "What changed" can only be answered by comparing with the earlier photo; if that photo is deleted, there is nothing to compare against. A dispute can surface months later, so photos have no automatic expiry.

Photos are kept both on your device and on our server. The camera preview is never recorded; only the captured frames are stored.

6. Who we share it with

• Cloudflare (hosting and storage): the server and the photos.
• OpenRouter and Google (the Gemini model): photos, to recognise the vehicle, check captures, read the mileage and assess the differences between two scans.
• Google or Apple: only if you sign in with them, to verify the sign-in.
• Sentry (Functional Software, Inc.; servers in the European Union): crash reports.

These providers' servers may be outside Turkey (mainly in the US). Transfers are made with appropriate safeguards (standard contracts) under KVKK art. 9.

Your photos are never used for advertising and never sold. Photos sent to the AI provider are used only to answer that request.

Businesses and employees. If you join a business with an invite code, you see the business's vehicles, plates and reports, and the scans you take become part of its records. The business's other members see your name and email address in the member list.

7. Data for improving damage detection (optional)

We ask on first launch; it is off by default. If you agree, we keep what would otherwise be discarded: refused captures and the region crops sent to the AI. These samples may show number plates. They are used only to improve damage detection.

You can withdraw consent in Settings at any time. Withdrawing deletes the samples kept so far.

8. How long we keep it

• Photos, vehicles and reports: until you delete them.
• Account and device details: until you delete your account.
• Capture measurements and AI cost records: deleted when you delete your data.
• Training data: until you withdraw consent or delete your data.
• Crash reports: 90 days at most, then deleted automatically.

9. Deleting your data

• Delete vehicle (vehicle page → "…"): deletes that vehicle's scans, photos and reports.
• Delete all my data (Settings): deletes all of the business's records on the server, the database on the device and the photo files. Available to the business owner.
• Delete account (Settings, when signed in): deletes your account and sign-in details.
• By email: if the app is no longer installed, write to videogke@gmail.com from the email address you signed in with. We delete your account and all your data within 30 days at most.

Deletion cannot be undone.

10. Your rights

Under KVKK art. 11 you have the right to:

• learn whether your personal data is processed, and request information if it is;
• learn the purpose of processing and whether data is used accordingly;
• know the third parties it is transferred to, in Turkey or abroad;
• request correction of incomplete or inaccurate data;
• request erasure or destruction;
• request that corrections and erasures be notified to those third parties;
• object to an outcome against you arising solely from automated analysis;
• claim compensation for damage caused by unlawful processing.

Send requests to videogke@gmail.com. We reply within 30 days at the latest.

11. Other people's data

Your photos may contain other people's information, such as number plates. It is your responsibility not to scan someone else's vehicle without their knowledge and consent.

12. Security

Communication with the server is encrypted. The AI provider's key is never in the app; it is kept only on the server. Every request can reach only your own data or that of the business you belong to.

13. Analytics and advertising

We show no ads and use no usage analytics or tracking tools. The technical records we keep are those listed in section 3; crash reports are one of them, and they don't identify you.

14. Changes

This policy may be updated. The current version is always available in the app. We announce significant changes in the app.