Privacy Policy

This policy describes the Volnavi mobile applications for iOS and Android.

Controller

Fikir Yazılım Teknoloji Anonim Şirketi is the controller for Volnavi. Privacy requests may be sent to info@fikiryazilim.com.

Data stored on your device

Language, appearance, favorites, field reports, an approximate cached location when permitted, and a short-lived verified purchase entitlement are stored in the app's private device storage. Volnavi does not require an account.

Data categories and purposes

Location, maps, place search, and routes

Location is requested only when you choose current location or a nearby-station feature. You may continue by entering a place manually. On iOS, user-initiated place searches and route requests can be processed by Apple MapKit. On Android, map display and place search can be processed by Google Maps Platform, and a route request can be sent through an authenticated Fikir Yazılım service to Google Routes. These requests may contain the selected or current coordinates and typed place query needed to provide the requested feature. Volnavi does not operate a server for continuous location history, and the route service is designed not to log raw coordinates or request bodies.

Tracking and advertising

Volnavi does not display third-party advertising, use advertising identifiers, or perform cross-app advertising tracking. The iOS app does not request App Tracking Transparency permission.

In-app purchase

Volnavi Pro Lifetime purchases and restores are processed by Apple through StoreKit on iOS and Google Play Billing on Android. On Android, the purchase token is transmitted through an authenticated Fikir Yazılım verification service to Google Play so ownership, purchase state, and acknowledgement can be checked. A verified entitlement may be cached securely on the device for up to seven days. Fikir Yazılım does not receive payment-card details.

Android app integrity

The Android app uses Google Play Integrity to protect route and purchase-verification requests. Google and the verification service may process the app package, version, signing-certificate digest, Play licensing verdict, device-integrity verdict, request time, and a cryptographic hash of the request. Integrity tokens are used for security and abuse prevention, not advertising.

Station data

Volnavi downloads a versioned public-station catalog from Fikir Yazılım hosting and stores it on the device for offline use. This download does not include the user's location, favorites, reports, or an account identifier. The catalog does not provide live station or connector availability. A free, openly licensed OpenStreetMap fallback remains bundled under ODbL 1.0 with the required attribution.

Field reports

The current apps store reports locally. If a moderated community service is enabled later, this policy and the applicable store privacy disclosure will be updated before collection begins.

Recipients and retention

Local favorites and field reports are not sent to Fikir Yazılım servers. User-initiated map, place, route, integrity, and purchase-verification requests may be processed by Apple, Google, and the narrowly scoped Fikir Yazılım verification service as described above. The service applies a short-lived, pseudonymized network-address rate limit and does not intentionally retain raw route or purchase request content. Support email may be processed by the email provider and disclosed where legally required. Local records remain until the user deletes them or removes the app. Support correspondence is normally retained for up to two years after closure unless a longer legal period applies.

Your choices and rights

You may deny location, use manual entry, delete local reports and favorites, or remove the app. For access, correction, deletion, objection, or other applicable data-protection requests, email info@fikiryazilim.com. Identity verification may be required to protect the requester.

Changes

This policy and the applicable App Store or Google Play disclosure will be updated before accounts, analytics, notifications, public community sync, or partner transactions collect additional data.