Navigo Sürücü Privacy Policy

Last updated: 5 November 2026

This Privacy Policy covers the Navigo Sürücü mobile app (com.navigo.surucu) and this website. The app is for drivers who work for a transport company: it shows today’s route, trip navigation, the stop board, trip messages and alerts for passengers waiting at a stop.

1. Who is responsible

App account: for sign-in, sessions, notification registration, messages and in-app records, the controller is Selman EROL – Mest Yazılım ve Bilişim Teknolojileri (Navigo).
Company driver record: the record your company keeps about you (full name, phone, role, card number, licence details, vehicle assignment) is the company’s responsibility. Navigo processes it on the company’s behalf and instructions.

2. Information we collect

Mobile number and the one-time code sent by SMS. The code is valid for 5 minutes and can be used once.
Application: first name, last name, plate applied for, chosen company and approval status. Name and an optional email can be updated on the profile.
Account and session: registration date, session ID, session start and end time, selected vehicle and route. The session token is kept in the phone’s secure store (iOS Keychain, Android Keystore).
Notifications: if you allow them, the push token and platform (iOS or Android).
App updates: a random installation ID generated on the phone, the platform and the app version.
Messages: trip message text, sender, target vehicle and time.
Message reports: if you report a message, the reporting driver’s record, the message number, the sender’s name and the text. No email app is opened.
Presence: whether the app is open for the selected vehicle and when you were last seen.
Departure alert: the vehicle, stop template, departure time and the departure stop’s coordinates for an alert you set.
Company record: role, card number and licence details are shown on your profile if the company record has them. The form never asks for them.
Technical logs: IP address, request time and error logs, kept for server security and troubleshooting.

3. Location

If you grant foreground location permission, your phone’s location is used on your phone for trip navigation and, when the vehicle tracker sends no position, for the departure alert. Phone location is not sent to our servers and no location history is kept. Background location is not requested. This location is not sent to OpenAI or Google Places. The map area requested goes to the map provider only as data, without any notice of which driver it belongs to. The vehicle position on the map comes from the company’s tracking device in the vehicle and is part of the company’s fleet tracking service.

4. How we use it

To provide sign-in and a company-approved account, and keep sessions secure.
To show today’s route, trip order, navigation and the stop board.
To deliver trip messages between drivers in the same operation.
To review reported messages and remove unlawful content.
To update the app without waiting for a store release.
To send departure alerts and waiting-passenger alerts.
To prevent abuse (for example code guessing) and fix faults.
To meet legal obligations and respond to lawful requests from authorities.

No ad network, advertising ID or third-party analytics SDK is used. No profiling or automated decision-making takes place. Your mobile number is not used for marketing or advertising, and using the app is never conditional on such permission.

5. Who we share it with

Your company: its authorised staff see your name, phone, plate, approval and access status, and online status for the selected vehicle.
Drivers in the same operation: see trip messages, the sender’s name and last-seen status for the selected vehicle.
SMS provider (Türkiye): only the phone number and the code, to send the verification SMS.
Notification services (abroad, from Navigo’s server): Expo (650 Industries, USA), Apple Push Notification service on iOS and Google Firebase Cloud Messaging on Android. What is sent is the push token and the notification text. The text has no name, phone number or account number, and the recipient is not told which driver the token belongs to.
App updates (abroad, directly from your phone): on launch the app connects to Expo’s update server (EAS Update, 650 Industries, USA). Navigo’s server does not send a name, phone number or account to Expo. What is sent is the platform, app version and installation ID. Navigo does not link this ID to your account and does not tell Expo which driver it belongs to. Because the phone opens the connection, Expo sees the IP address; it receives nothing that ties that IP to a driver account.
Map providers (abroad, directly from your phone): Navigo’s server does not send a name, phone number or account to the map provider. Google Maps on Android. Apple Maps on iOS, or Google Maps if the Google Maps app is installed and you choose Google as your map. The area shown is requested by your phone only as data, without any notice of which driver it belongs to. Because the phone opens the connection, the provider sees the IP address; it receives nothing that ties that IP to a driver account. OpenAI and Google Places are not used.
Hosting: app servers and databases run on servers contracted by Navigo.
Public authorities: only where the law requires it.

Your personal data is not sold and is not shared with anyone for advertising.

6. How long we keep it

App account, session records, notification registration, presence and departure alerts: until your account is deleted. A session is valid for up to 180 days and ends immediately when you sign out or the company closes your access.
Trip messages: messages you send, until your account is deleted; messages other drivers send you, until the sender’s account is deleted.
SMS verification record (number, code, time, attempt count): the code expires after 5 minutes; the record is kept to prevent abuse until your account is deleted.
Technical logs (IP address, request time, error logs): 30 days, then deleted automatically.
Message report record: until the report is resolved and any dispute period has ended.
Application and driver record (name, phone, email if you entered one, plate, role, card, licence, vehicle assignment): until your account is deleted, then deleted immediately.
Records the law requires us to keep: only for that period, with restricted access; then deleted, destroyed or anonymised.

7. Security

All traffic between the app and the server is encrypted with HTTPS (TLS).
The session token is kept in the phone’s secure store; the server records each session and can end it individually.
SMS codes are single-use; resends and daily attempts are limited.
Company staff only see drivers of their own company.
You can lock app launch with Face ID or fingerprint.

No face or fingerprint data is collected. The phone’s operating system performs biometric checks; the app and the server only receive a “verified / not verified” result.

8. Account and data deletion

In the app, open Menu → Legal → Delete my account and data and confirm. Deletion finishes in this step. You do not need to send an email or ask your company.

Your driver record is deleted: name, phone, email if you entered one, plate, role, card number, licence and vehicle assignment. The card link on the vehicle is removed.
Your sessions, push token, trip messages you sent, presence and departure alert records, app permissions and SMS verification records are deleted. The session and biometric setting on your phone are removed, and sign-in is closed.

If you cannot open the app, email info@navigo.com.tr with the subject “Navigo Sürücü account deletion”, your registered mobile number and your company. The same records are deleted. We may contact you on your registered number to confirm the request is yours.

After deletion you can register again with the same number; that is a new application. Messages other drivers sent to you stay as part of the sender’s records.

9. Your rights

You can use your rights under KVKK Article 11 (access, information, rectification, erasure, notification to recipients, objection, compensation). How to apply is set out in the KVKK notice.

10. Driver’s duty

Waiting-passenger and trip information shown in the app is only for running that trip. Do not screenshot or share it, and do not use it outside the app.

11. Reporting and blocking messages

To report an inappropriate or unlawful trip message, press and hold the message and choose Report, or use the menu at the top right of the conversation. The report is stored without opening an email app and is sent to info@navigo.com.tr. The reported message leaves your list immediately. The developer acts within 24 hours: the content is removed and the sender’s account is ejected.

If you choose Block from the same menu, that person’s messages leave your list immediately. The block is kept on your phone and on the server, and it is sent to the developer. You can unblock from the menu at the top right of the conversation. Signing out clears the list on the phone; the server block stays on the same account. Terms of use.

If you cannot open the app, or you want to report content as a rights holder, email info@navigo.com.tr with the subject “Navigo Sürücü message report”, or call 0850 532 6378.

12. This website

surucu.navigo.com.tr does not open accounts, collect forms, set cookies, or use analytics or third-party scripts. All files, including fonts, load from this server; your browser makes no requests to other servers.

13. Children

The app is for adult drivers working for a company. We do not knowingly process personal data of anyone under 18; if we find such data, we delete it.

14. Changes

The current text is always at this address, with the date at the top. A change that widens how data is used is also announced in the app.

15. Contact

Controller: Selman EROL – Mest Yazılım ve Bilişim Teknolojileri
Email: info@navigo.com.tr
Phone: 0850 532 6378
Address: Hürriyet Mah. Atatürk Blv. Altan İş Merkezi No:48/9 Altınova / Yalova, Türkiye

KVKK notice: Navigo Sürücü KVKK Notice.