Privacy Policy
This policy explains how personal data is processed on the kiramak.com website and in the Kiramak mobile apps, both operated by KİRAMAK BİLGİ TEKNOLOJİLERİ PAZARLAMA VE TİCARET ANONİM ŞİRKETİ ("Kiramak", "we").
Kiramak is the data controller. Contact: destek@kiramak.com · +90 312 504 22 55 · full company details are on our company details page.
This English text is provided for convenience. In case of any discrepancy, the Turkish version prevails.
Summary
The table below is a plain-language summary of this policy. The full text underneath is what binds.
| Question | Short Answer |
|---|---|
| What do you collect? | Identity and contact details, the documents you upload, rental and messaging records, reviews, usage statistics and — only when you allow it — your location. |
| Do you sell it for advertising? | No. We do not sell your personal data and do not share it with third parties for advertising. |
| Do you store my payment card? | No. Your card details are not stored by Kiramak; payments are processed through authorised payment institutions. |
| Do you track my location in the background? | No. Location is only read while the app is on screen and only to complete an action you started. |
| Do you ask for a criminal record certificate? | No. We stopped collecting criminal record certificates in July 2026, and those uploaded earlier have been destroyed. |
| Does my data leave Turkey? | Some of it may be transferred to service providers abroad in order to deliver the service. Transfers are made under Article 9 of the KVKK. |
| Can I delete my account? | Yes, from inside the app or via the route on our account deletion page. |
| How long is my data kept? | For as long as your account is open; when you close it, everything is deleted except records we are legally required to retain. |
Personal Data We Process
Identity and Contact Data
Full name, Turkish national ID number, date of birth, email address and phone number. The phone number is verified by a one-time SMS code (OTP). The national ID number is processed to ensure each person holds a single account and to meet our legal obligations.
Documents You Upload
Depending on your role: driving licence, operator licence, operator photograph, and machine documents (registration, title, insurance policy).
We do not process special-category personal data. A criminal record certificate was requested for operator verification for a period; that practice ended in July 2026. The document can no longer be uploaded, and those collected until then have been destroyed.
Transaction and Content Data
Rental records (which machine, at what price, over which dates), your in-platform messages, the reviews you give and receive, and the photograph and location captured when a job is started.
Payment and Invoice Data
Transaction and invoice records relating to the rental price. Your card details are not stored by Kiramak; payments are processed through authorised payment institutions.
Usage and Interaction Data
Listing views, unique viewer counts, favourites and contact counts. These are shown to the listing owner as statistics and used to improve the platform.
Location Data
Your location is read only in the foreground — that is, while the app is open and you are selecting an address or creating a job-start record — and only with your device permission. No background location tracking takes place.
Purposes and Legal Grounds
| Purpose | Data | Legal Ground (KVKK) |
|---|---|---|
| Account creation and authentication | Identity, contact | Art. 5(2)(c) — formation and performance of a contract |
| Machine search, listings and matching | Listing, location, usage data | Art. 5(2)(c) — performance of a contract |
| Running and recording the rental process | Transaction, messaging, photograph | Art. 5(2)(c) — performance of a contract |
| Collecting and remitting the rental price | Transaction, invoice | Art. 5(2)(c) — performance of a contract |
| Verifying operator competence | Driving licence, operator licence | Art. 5(2)(c) — performance of a contract |
| Security, abuse and fraud prevention | Identity, transaction, technical logs | Art. 5(2)(f) — legitimate interest |
| Statutory retention and reporting duties | Transaction, invoice, identity | Art. 5(2)(a) and 5(2)(ç) — legal obligation |
| Handling support requests | Contact, transaction | Art. 5(2)(c) and 5(2)(f) |
| Early-access and launch announcements | Explicit consent | |
| Product development and aggregate statistics | Usage data | Art. 5(2)(f) — legitimate interest |
Where processing rests on explicit consent, withdrawing your consent stops that processing immediately.
Recipient Groups We Transfer Data To
We do not sell your personal data and do not share it for advertising. Data is transferred only to the recipient groups below, limited to the purpose stated alongside each:
| Recipient Group | Purpose of Transfer |
|---|---|
| Information technology and cloud infrastructure providers | Hosting, database and file storage, search |
| Authentication service providers | Secure sign-in and session management |
| Electronic communication and notification providers | Verification codes (SMS) and app notifications |
| Mapping and location service providers | Address lookup and distance calculation |
| Payment and financial institutions | Collecting and remitting the rental price |
| Legal, accounting and audit advisers | Meeting legal obligations and handling disputes |
| Public authorities empowered by law | Requests for information and documents under legislation |
In addition, once a rental is agreed, the details each side needs to carry out the work — name, contact details and the work address — are shared with the other party to that rental.
Transfers Abroad
Some of the information technology and notification services we rely on are provided from outside Turkey, and your personal data may therefore be transferred abroad. These transfers are made under Article 9 of the KVKK, on the basis of undertakings signed with the relevant providers and/or your explicit consent. You can stop transfers to notification services by turning off app notifications.
Retention Periods
| Data | Period |
|---|---|
| Account and profile data | While the account is open |
| Rental, payment and invoice records | 10 years under applicable law (Turkish Commercial Code and tax legislation) |
| Uploaded documents (licence, machine documents) | While the verification remains valid; deleted when the account is closed |
| In-platform messages | While the account is open; until resolution in case of a dispute |
| Reviews | Detached from their author and anonymised when the account is closed |
| Early-access email list | Until launch, or until deleted at your request |
| Technical logs | 12 months maximum |
What happens after an account is closed is set out in detail on the account and data deletion page.
Data Security
Your personal data is encrypted in transit and at rest. Access to the documents you upload is limited to authorised staff who need it to do their work, and is logged. You sign in with your Google or Apple account; Kiramak never asks you to create a password and stores none.
Your Rights Under the KVKK
Under Article 11 of the KVKK you have the right to: learn whether your personal data is being processed; request information if it is; learn the purpose of processing and whether the data is used in line with that purpose; know the third parties to whom data is transferred, in Turkey or abroad; request that incomplete or inaccurate data be corrected; request erasure or destruction; request that corrections and erasures be notified to third parties the data was transferred to; object to an adverse outcome produced solely by automated analysis; and claim compensation for damage arising from unlawful processing.
You may send requests to destek@kiramak.com or in writing to the address in our company details. Your request will be answered within 30 days at the latest. To protect your data, we cannot act on requests where we are unable to verify your identity.
Children's Data
The platform is not directed at anyone under 18 and we do not knowingly collect data from under-18s. If we learn that such a record exists, the account and its data are deleted.
Cookies and the Website
kiramak.com uses no advertising or profiling cookies and hosts no third-party trackers. When you submit the early-access form, only your email address, your consent record and the time of submission are stored.
Changes to This Policy
When we update this policy we change the "last updated" date on this page. Material changes that widen the scope of processing are announced separately, in the app or by email, before they take effect.