RadarZone Privacy Policy and KVKK Information Notice

Effective date: 29 September 2026

This text is the same as the privacy policy in the app.

This policy explains how the RadarZone Android app and its online service process personal data. It is also the information notice required by Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK). If this English translation differs from the Turkish text, the Turkish text prevails.

1. Data controller

RadarZone
Email: destek@radarzone.net
Web: https://radarzone.net/

2. In short

Speed, road matching, speed limits and alerts are calculated on your phone. Your location trail while driving is not stored on our servers.
You can use the app without an account. An account is needed to buy a subscription and to keep saved places on our server.
Google Play takes the payment. We never see your card or payment details.
To give the free trial once per device, we store a value derived from a device identifier. It is not linked to your account, email, location or feedback.
There are no ads. We do not sell your data or share it for advertising.

3. What we process and why

3.1 Location

Current speed, the road you are on, the speed limit and alerts are calculated on your phone. Online features send the following location data to our servers:

Route start and destination, to calculate the route and show route information; your current position, heading and destination when the route is recalculated after you leave it.
The text you type in destination search, and your current location to rank nearby results first.
Approximate region codes to download road data, your current province for up-to-date information, and the map tile addresses of the area on screen.
Your current location or a point you mark on the map when sending feedback (see 3.6).

Route requests may be stored, without any link to your account or device record, to keep traffic information accurate and up to date.

3.2 Device record and device check (free trial)

The 7-day free trial is given once per device. To do this, prevent abuse and keep the service secure:

The identifier Android creates for this app on your device (Android ID) is sent to our server. The raw value is not stored or logged; only a value derived from it in a way that cannot be reversed is stored.
We ask Google Play whether the app was installed from Google Play and whether the device is an unmodified Android device (Play Integrity). Google performs this check under its own privacy policy; we only receive the result and store a summary.
When the trial has been used, we may also record this in a limited flag that Google Play keeps for the device. The flag contains no identity data and survives a factory reset.
The device record also holds the trial start and end dates, the reason if no trial was given, the platform, app version, first and last seen time and a hash of the session key issued to the device.

The device record contains no name, email, IP address or location. It is not linked to your account, your feedback or traffic update records. When you create an account or sign in, only the trial end date is copied to your account; no lasting link between the device and the account is kept.

Devices that fail the device check do not get a trial; they can still buy a subscription. You may object to this automated decision (see 9).

3.3 Account

An account is optional for using the app and required to buy a subscription.

Email sign-up: email address, optional name and a password hash. The password itself is not stored.
Sign in with Google: the email address, name and Google account identifier that Google sends us. We never see your Google password.
Session records (hashes of session keys). The session key is kept in your device's secure storage.
A randomly generated account reference used to match purchases to your account, and the trial end date copied to the account.

Your email address is used for sign-in and account-related emails. We do not send marketing emails.

3.4 Saved places and history

Without an account, saved places and recent destinations stay only on your device. With an account, saved places (label and coordinates) and your destination history (start, destination, destination label and time) are stored on our server. This is not a continuous driving track. Creating an account does not upload the records already on your device.

3.5 Subscription and payment

Subscriptions are bought through Google Play; Google takes and processes the payment. We never see or store your card or payment details. From Google we receive the purchase token, product and plan (monthly or yearly), subscription state, start and end dates, auto-renewal status and order details. We use them to verify the subscription, apply renewals, cancellations and refunds, and meet our legal record-keeping obligations.

3.6 Feedback

If you send feedback from the app we store: the topic you chose, your text, the location you chose (current location or a point marked on the map), your speed at that moment, the speed limit shown and whether it was estimated, heading, data version, screen name and app version. A location is required when the topic concerns a specific place (for example a wrong speed limit); for other topics you can send feedback without a location.

No device identifier or IP address is written to the feedback record. If you are signed in, it is linked to your account. Feedback is reviewed to fix errors and improve the data. Please do not include personal information in the text.

3.7 Traffic information updates

The app may make network requests to keep traffic information current and accurate. A random installation identifier, request time, technical responses and validation records are processed. This identifier is not an account or hardware identifier and is not linked to the device record or to an account, but it can link records from the same installation. These requests run only under suitable connection and battery conditions and do not include your location trail while driving. This feature is not present in every version of the app.

3.8 Connection data

Requests to our servers include technical data such as IP address, request time and app version. We use it briefly for security, rate limiting and troubleshooting (see 7).

3.9 What we do not process

No advertising ID, advertising or analytics software, or remote crash reporting service is used. Microphone, contacts, photos, camera and SMS data are not collected. Voice alerts are generated on the phone.

4. Legal bases (KVKK Article 5/2)

Performance of a contract (c): running the app, routing and search, account, saved places and history, trial and subscription.
Legal obligation (ç): keeping subscription and purchase records, lawful requests from authorities.
Establishing, exercising or defending a right (e): refunds, objections and disputes.
Legitimate interest (f): preventing trial abuse, service security, reviewing feedback, accuracy of traffic information.

5. How data is collected

Data is collected electronically through the app. Some of it you enter (account, search, saved places, feedback). Some is created automatically while you use the app (location, device and connection data). Some comes from Google (sign in with Google, purchases and the device check result).

6. Transfers

Hosting: our servers run in a data centre in the European Union (currently Finland). The hosting provider stores data only on our behalf.
Google: Google Play (purchases, subscriptions, device check) and Sign in with Google. Google acts under its own privacy policy and may process data outside Türkiye, including in the United States.
Competent public authorities: only where required by law.

Transfers abroad are made in line with KVKK Article 9. We do not sell your data or share it for advertising.

7. Retention

Account, saved places and history: until you delete your account.
Device trial record: 3 years from the device's last activity, so that the trial is given once per device and abuse is prevented. It is not linked to your account, so account deletion does not affect it.
Subscription and purchase records: for the period required by tax and commercial law (up to 10 years). If you delete your account they are kept detached from it.
Feedback: up to 2 years from submission. Detached from your account if you delete it.
Connection and security logs: up to 30 days.
Backups: up to 30 days. Deleted data leaves the backups at the end of this period.
Traffic and route records not linked to an account or device record: as long as needed for service accuracy. They cannot be matched to you, so they are not removed by account deletion.

When a period ends, the data is deleted, destroyed or anonymised.

8. Account deletion

In the app: Menu → Account → Delete account. After you confirm, the account is deleted from our server immediately. If the request fails an error is shown; signing out alone is not deletion.

Without the app: follow the steps at https://radarzone.net/en/account-deletion/ or email destek@radarzone.net from the address registered to your account with the subject "Account deletion". We complete requests within 30 days.

Deleted: the account (email, name, password hash, Google account identifier, account reference), sessions, saved places and destination history.

Kept, detached from the account: subscription and purchase records (legal obligation) and feedback (up to 2 years; you can ask for it to be deleted too). The device trial record is not linked to the account and is kept for the period in section 7.

Deleting your account or uninstalling the app does not cancel a Google Play subscription. Cancel it in Google Play → Payments & subscriptions → Subscriptions.

Without an account, you can remove saved places and settings on your device by clearing the app's data in Android settings.

9. Your rights under KVKK Article 11

You may ask us to:

tell you whether your personal data is processed,
give you information about that processing,
tell you the purpose and whether data is used accordingly,
tell you the third parties in Türkiye or abroad to whom data is transferred,
correct incomplete or inaccurate data,
delete or destroy data under the conditions of KVKK Article 7,
notify third parties to whom data was transferred of such corrections or deletions,
review a decision made solely by automated systems that is against you (for example, no trial because of the device check),
compensate damage caused by unlawful processing.

Send your request to destek@radarzone.net from the email address registered to your account, by registered electronic mail (KEP), secure electronic or mobile signature, or in writing to destek@radarzone.net. State your name, contact details and request. We may ask for additional information to verify your identity. Requests are answered free of charge within 30 days. If you are not satisfied, you may complain to the Turkish Personal Data Protection Board.

10. Security

Data is encrypted in transit with TLS. Passwords and session keys are stored only as hashes, and the device identifier only as a derived value. Server access is limited to authorised persons. Android app backup is disabled; session and device data are not carried to another device through backups.

11. Children

The app is designed for drivers and is not directed at anyone under 18.

12. Map data

13. Changes

We may update this policy. The current version, with its effective date, is published in the app and at https://radarzone.net/en/privacy/. We will announce important changes in the app.