Privacy Policy

1. Data we process

• Account data: full name, email, phone, password (stored only in hashed form), language, account type (shipper / driver / fleet manager).
• Verification documents: driving licence photo for drivers, tax certificate for shippers; optional profile photo.
• Vehicle and fleet data: vehicle type, plate, driver code, the fleet you belong to.
• Shipment and offer data: pickup / delivery addresses, dates, load details, offer and agreed prices, trip status.
• Location: a driver’s location is collected only while a trip is "on the way" or while a fleet driver is "on duty", through a foreground service started while the app is open. Background location permission is not requested.
• Device and session data: push notification token, session tokens, app language.
• Website: the name, phone, email and note you submit in the contact / early-access form; anonymous visit statistics (country, device type, referrer). Your language preference is stored in your browser.

2. Purposes and legal bases

• Creating and managing your account and verifying your email (performance of a contract).
• Verifying driver and shipper applications with documents and preventing fake accounts (legitimate interest; legal obligation).
• Providing listings, offers, agreements and trip tracking, including showing the shipper the live location during a trip (performance of a contract).
• Letting a fleet manager see an on-duty driver’s location: based on the consent the driver gives before the first shift, and stopped by ending the shift (consent).
• Sending notifications (offers, approvals, trip status, account approval).
• Keeping the Service secure, detecting abuse and responding to legal requests (legal obligation, legitimate interest).

3. Sharing

We do not sell your data or use it for advertising. Data are shared only as needed to run the Service:

• Other users: the accepted carrier’s name, phone, vehicle and trip location with the shipper; the shipper’s load and contact details with the agreed carrier; a fleet driver’s trip / duty location and statistics with their fleet manager.
• Service providers: database and file storage (Supabase, EU – Frankfurt), push notifications (Google Firebase), email delivery provider, map and routing services (Google Maps, OpenStreetMap / OSRM), website hosting and anonymous analytics (Vercel), contact form (EmailJS).
• Authorities: where required by law.

4. International transfers

Some of our providers operate servers outside Türkiye (in the EU and the US). These transfers rely on the safeguards required by KVKK Art. 9 and the GDPR (standard contractual clauses and, where required, consent).

5. Retention

• Account data are kept while your account is open.
• Location records are deleted automatically after 90 days.
• When you delete your account, your name, email, phone and documents are anonymised and your sessions, push tokens and location records are deleted. Completed shipment and offer records may be kept without being linked to your identity, for the other party’s history and statutory retention duties (e.g. commercial and tax records).

6. Deleting your account

You can delete your account at any time in the app: Profile → Account details → Delete my account. An ongoing trip must be completed first. If you cannot access the app, write to info@flewise.com from your registered email address.

7. Your rights

Under KVKK Art. 11 and the GDPR you have the right to access, rectify and erase your data, to object to processing, to data portability and to withdraw consent. Send requests to info@flewise.com; we respond within 30 days. You may also complain to the Turkish Personal Data Protection Authority or the data protection authority of your country.

8. Security

All connections are encrypted (HTTPS). Passwords are stored irreversibly, documents are kept in access-restricted storage and opened only through time-limited links. Each user can see only the data they are authorised to see.

9. Partner Program and referral cookie

The Partner Program application form processes your full name, email, phone, city, partner type, company name, profession, the range of companies you can reach, promotion channels and your note. This data is used to evaluate your application, contact you and, if approved, open your partner account. To prevent abuse, an irreversible hash of your IP address is stored; the form may use the Cloudflare Turnstile security check.

If you arrive through a partner's referral link (?ref=), the click is recorded and a first-party cookie named "fw_ref" valid for 90 days is stored in your browser. It contains only the partner code, a click ID and the date, and is used to link your account to the referring partner if you sign up to Flewise within 90 days. You can delete it in your browser settings.

Partners see only the name and status of the companies they refer; your contact and payment details are not shared with them. Partners' tax and bank details are stored encrypted and used only for payouts.

10. Children

The Service is not intended for people under 18 and we do not knowingly collect their data.

11. Changes

We may update this policy. Material changes are announced in the app or by email; the current version is always on this page.