Privacy Policy
Last updated: 2 October 2026 · Türkçe
The short version. You film your car; we store the video and photos on our servers in Türkiye to build and keep your car’s 3D record. There is no sign-up: no name, no email, no password. Video is recorded without sound, and location data is removed from photos on your phone before upload. We do not sell your data, show ads or track you across apps. You can delete everything from the app.
1. Who we are
CarBump is run by [Owner full name], trading as CarBump (şahıs şirketi), [Registered business address], Türkiye (“CarBump”, “we”). We are the data controller for the personal data described here. Questions and requests: [email protected].
This policy covers the CarBump app and the website carbump.app. Users in Türkiye: our information notice under the Personal Data Protection Law No. 6698 (KVKK) is at carbump.app/kvkk.
2. What we collect
What you give us
- Videos of your car from a scan. Recorded silently: the app does not use the microphone.
- Photos of your car you take or pick later, to compare a panel with the scan. The app removes location (GPS) data from each photo on your phone before it is uploaded. You choose photos with the system picker, so the app never gets access to your photo library.
- Parking photos, only if you turn that feature on.
- A name for each car if you type one (for example “Ford Focus”). We do not ask for the number plate.
- Messages you send from the app’s Help page, with the app version they were sent from.
- Emails you send us, and anything you put in them.
What the app creates
- An app identifier. On first start the app creates an identifier for your phone and keeps it in the phone’s secure storage. It is what ties your cars and scans to you. We store it only as a one-way hash, never in readable form.
- A support code (like
XXXX-XXXX-XXXX), derived from that identifier. It is shown in the app so you can quote it when you contact us. It cannot be turned back into the identifier. - Phone details: platform (iOS or Android) and model (for example “iPhone15,2”), recorded when you first start the app.
- What we build from your recordings: 3D models, coverage maps, where each later photo sits on the model, and the before-and-after comparisons.
- Processing records: when a scan was uploaded and processed, whether it succeeded, and why it failed if it did.
- Acceptance records: which version of our terms and optional features you accepted or turned off, and when.
- Server logs: your IP address, the time and the request, as every web server records them.
What may appear in your recordings by chance
A video or photo of your car can also show other people, other cars and their number plates, or a recognisable place. We do not try to identify any of them, we do not run face recognition, and we use this content only to build and compare your own car’s record. Please avoid filming people.
What we do not collect
No name, email address or password; no contacts; no precise location; no sound; no advertising identifier. The app contains no advertising or tracking SDKs. We do not currently use a third-party crash-reporting or analytics service. If we add one, it will only ever receive your support code, never your recordings, and we will update this policy first.
3. Why we use it
- To provide CarBump: build the 3D model of your car, place later photos on it, compare them with the scan, and keep these records available to you. This is the service you ask for, so the legal basis is performing our contract with you.
- To keep the service working and secure: run the processing queue, find out why a scan failed, prevent abuse, and keep logs. Legal basis: our legitimate interest in a working, secure service.
- To answer you when you write to us.
- To meet legal obligations, such as keeping records the law requires or responding to a lawful request from an authority.
We do not use your videos and photos to train or improve our technology. If we ever want to, we will ask for your separate, optional consent first. Saying no will not change how CarBump works for you.
4. Where it is stored
Your recordings and everything built from them are stored on servers we control. 3D models are built on computers we operate; we do not send your recordings to outside AI or 3D services.
Our servers are in Türkiye. We do not transfer your recordings or the records built from them abroad. If that ever changes, we will update this policy before it happens.
5. Who else receives it
- Our hosting provider in Türkiye, only to store and serve data for us. It may not use the data for anything else.
- Apple and Google distribute the app (App Store, TestFlight, Google Play) and, once there are paid features, take the payments. They handle your account and payment details under their own privacy policies; we never see your card details.
- Authorities, only when the law requires it.
We do not sell your data or share it for advertising. Your 3D models and photos are private to you; we do not publish them. If you share a record with someone yourself, they see what you share.
6. How long we keep it
Your records exist so that you can compare later photos with an earlier scan, sometimes months later. So we keep them until you delete them.
| Data | Kept |
|---|---|
| Videos, photos, 3D models and comparisons | Until you delete them, or delete all of your data |
| Your app account (identifier hash, support code, phone model) | Until you delete all of your data |
| Record of the texts you accepted | As long as your account exists |
| Server logs (IP address, time, request) | 30 days |
| Emails you send us, and messages from the app’s Help page | Until your question is resolved, then up to 2 years (Help-page messages also go when you delete all of your data) |
| Copies in backups | Overwritten within 30 days after deletion |
If paid features are introduced, purchase records are kept for as long as Turkish tax and commercial law requires.
7. Deleting your data
In the app’s settings you can delete a single scan or photo, or delete all of your data. Deleting all of your data removes your cars, scans, photos, 3D models, comparisons and account record from our servers right away; backup copies are overwritten within 30 days. Uninstalling the app alone does not delete anything on our servers.
There is no password, so a support code is not proof that an account is yours. That is why deletion is done from inside the app on your phone. If you have lost the phone, write to us and we will work out with you how to confirm the account is yours.
8. Your rights
You can ask us whether we process your personal data and for a copy of it; to correct it; to delete it; to know whom it was shared with; to object to processing; and to object to a result that is based solely on automated processing and is against you. Under the KVKK you can also claim compensation for damage caused by unlawful processing. The full list of your rights under Turkish law is in our KVKK notice.
Write to [email protected]. We answer within 30 days and free of charge. If you are not satisfied, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu, kvkk.gov.tr), or to the data protection authority where you live.
9. Security
Data travels between the app and our servers over encrypted (HTTPS) connections. The app identifier is kept only as a hash. Access to the servers and to your records is limited to the people who run CarBump. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
10. Children
CarBump is meant for adults who own or are responsible for a car. It is not directed at anyone under 18, and we do not knowingly collect data from children.
11. The website
carbump.app is a static page. It sets no cookies, has no forms and uses no analytics. Our web server logs requests (IP address, time, page) as described above. “Join the beta” opens your own email app; if you send that email, we use it only to invite you and to reply.
12. Changes
When we change this policy, we change the date at the top. If the change matters (for example, a new kind of data or a new recipient), we tell you in the app before it takes effect.