Privacy Policy

PRIVACY POLICY

Effective date: July 18, 2026

1. Data Controller
The data controller is Buvigo (a registered trademark in Türkiye).
Email: info@buvigo.com
Address: Cumhuriyet Mah. Ataturk Bulvari Ilyas KARADAG IS Merkezi 31/15, Altınova/Yalova, Türkiye

2. Scope
This policy explains how we process personal data when you use the Buvigo mobile app ("App"), the buvigo.com website, share links (/id/... and live location links), and related services.

3. Personal Data We Process
• Identity and contact: phone number (E.164), username, first name, last name, display name, gender preference
• Location and Buvigo ID: coordinates linked to a Buvigo ID, address text, location detail, primary Buvigo ID flag, location accuracy, privacy/access settings (public, private, PIN protection)
• Live location: temporary share code, session duration, real-time position updates
• Usage: Buvigo IDs you create or search, favorites, daily search quota, access requests
• Web visitors: IP address (for quota and abuse prevention on anonymous lookups)
• Technical: session tokens (JWT/refresh), push notification token (if you gave explicit consent), device platform (iOS/Android), error and security logs
• Legal consent: timestamps of accepted documents, document version, location/push consent records

Buvigo does not collect email registration, in-app messaging, ad profiling, in-app purchases, or payment card data.

Location data is entered by users or obtained from device location services. Buvigo does not guarantee the accuracy of user-provided locations.

Location visibility (public, private, PIN, or approval mode) and the duration and scope of live location sharing are entirely under your control. Buvigo does not apply a visibility or sharing mode you did not choose, and does not disclose your location to any third party without your explicit sharing action.

4. Purposes
• Phone-based authentication (SMS OTP) and account management
• Creating, searching, sharing Buvigo IDs and favorites
• Live location sharing
• Managing private/PIN-protected location access requests
• Service quotas and abuse prevention (including IP-based web lookup limits)
• Content moderation filter may apply to labels and location details; this does not mean all content is reviewed or guaranteed lawful. You remain responsible for content you share.
• Push notifications (with explicit consent and device permission)
• Legal compliance and information security

5. Legal Bases
• Contract performance (KVKK Art. 5/2-c): registration, OTP, account management, service delivery
• Legal obligation (KVKK Art. 5/2-ç): statutory retention and official requests
• Establishment/use/protection of rights (KVKK Art. 5/2-e): dispute and security records
• Legitimate interest (KVKK Art. 5/2-f): abuse prevention and service security (without overriding your fundamental rights)
• Explicit consent (KVKK Art. 5/1): location processing, live location sharing, optional push notifications

6. Collection Methods
Data is collected via the App UI, GraphQL API, SMS verification, location services, share links, and server logs.

7. Transfers and Cross-Border Transfers
General principle: Buvigo does not share your personal data with third parties for advertising, marketing, profiling, or data sales.

We may share data only as needed to operate the service with:
• SMS/OTP provider (Türkiye; Twilio Verify for international numbers)
• Hosting/infrastructure providers
• Apple and Google map/location services (on-device maps, geocoding, directions)
• Expo push notification infrastructure (if you consented; servers may be in the USA)
• Map CDN on share pages (unpkg)
• Legally authorized public authorities (only upon lawful, written, and reasoned official requests)

Buvigo does not transfer your location data to Google, Apple, or other third parties for advertising or analytics; map and navigation actions occur through the relevant app or service on your device.

Disclosure to authorities occurs only upon lawful, written, and reasoned official requests. Buvigo does not respond to informal or unlawful requests.

Cross-border transfers rely on KVKK Art. 9 and service necessity and/or your explicit consent.

8. Retention
• Account data: while your membership is active; deleted or anonymized within 30 days after account deletion (unless legally required).
• Live location: limited to share session TTL; technical logs up to 30 days after session ends.
• OTP codes: stored briefly (about 5 minutes).
• Web IP quota records: up to 90 days for abuse prevention.
• Legal records: retained as required by applicable law.

9. Cookies and Local Storage (Website)
The buvigo.com marketing site does not use advertising cookies. Your language preference may be stored in browser localStorage. Share pages may load third-party CDN resources for maps.

10. Your Rights (KVKK Art. 11)
Your rights under KVKK Art. 11 (access, correction, deletion, objection, etc.) are evaluated when you submit a lawful request. Buvigo does not process personal data for ad profiling or automated decisions against you.

Contact info@buvigo.com. We may need to verify your identity. Lawful requests are answered within 30 days.

Limitation of liability: You choose location visibility, sharing mode, share links/codes, PIN/approval access, and live location sessions. You are primarily responsible for outcomes from these choices and the accuracy of content you share. Buvigo does not pay compensation or accept liability for damages from sharing you initiate voluntarily, from sharing PINs/codes with third parties, or from recipients' use of that information. For third-party claims against Buvigo arising from your sharing or content, you bear primary responsibility. The Terms of Use liability limits apply.

11. Security
Buvigo applies reasonable technical and organizational measures against unauthorized access. Absolute security or absence of data breaches is not guaranteed; you are responsible for account, PIN, and share code confidentiality.

12. Age Limit
The App is intended for users aged 18 and over. Accounts of users under 18 may be deleted.

13. Changes
Buvigo may update this policy. Material changes are published in the App and on the website; re-consent may be required when necessary.

14. Contact
info@buvigo.com
Cumhuriyet Mah. Ataturk Bulvari Ilyas KARADAG IS Merkezi 31/15, Altınova/Yalova, Türkiye