Privacy Policy

We collect the following information when you use Carberk:

• Phone number — used to create or sign in to your account with a code sent by SMS.
• Email address — collected when you choose to sign in by email, or when you add or change an email address on your account.
• Listing contact phone — the +993 number you choose to show on a listing. It is always a number confirmed by an SMS code.
• Name and profile photo — if you choose to add them to your profile.
• Location — the region and city you select for your listings or search preferences. We do not track your real-time GPS location.
• Listings — vehicle details, photos, price, and description of cars you post.
• Messages — text content of contact-thread conversations between buyers and sellers.
• Device information — device model, operating system, and app version, collected for debugging purposes.
• IP address — used for rate limiting and security.
• Push notification token — if you allow notifications, the token your device's push service gives the app, used to tell you about new messages.
• Photo uploads — images you attach to listings.
• VIN — if you voluntarily enter it.

Future collections (if features ship): video uploads, garage vehicle data, blog content, inspection report data.

• We do not track your GPS location in the MLP beta.
• We do not store raw GPS coordinates.
• We do not use third-party advertising SDKs.
• We do not add open tracking, tracking pixels, or tracked links to the emails we send you.
• We do not sell your data to anyone.

We use your data to: create and maintain your account, display listings, enable search functionality, facilitate communication between users, prevent fraud, and comply with app store policies.

• Public: your display name and avatar (if shown), active listings, public listing photos, the city/region of listings, and the contact phone you chose for a listing.
• Private: the phone number and email address you use to sign in (unless you also choose that phone number as the contact phone of a listing), contact-thread message content (except for admin moderation), and exact location pin (if a future phase adds map features).

In the MLP beta, Carberk runs its own sign-in service on servers rented from Railway, a cloud hosting provider, which stores the app's data for us. Sign-in codes sent by email are delivered by an email delivery provider located in the United States: it receives your email address and the message containing the code, and keeps them for 30 days. Push notifications are delivered through Firebase Cloud Messaging (Google), which receives your device token and the notification content. We do not share data with advertisers, data brokers, or other third parties.

Your data is retained while your account is active. Records of sign-in codes (the phone number or email address, and the IP address of the request) are deleted after 30 days.

Your profile photo is public, and other users can report it. When you replace or remove your profile photo, or a moderator removes it, it stops being shown at once. Its files are then deleted from our storage by a background job that keeps retrying until they are gone, so if our storage is unavailable the deletion finishes later. We cannot delete copies that other people saved or that are held outside our servers.

If you are signed in, you can delete your account in the app: open Cabinet, tap your profile, then tap Delete account at the bottom of the Profile screen. On the public account deletion page on our website, enter a phone number or email address on the account and confirm the request with a code sent to it.

• When you request account deletion:
• Your account enters a 30-day grace period.
• During this period, your listings are archived, all sessions are revoked, and your phone number and email address remain reserved to you.
• You may recover your account at any time during the grace period by signing in again with either your phone number or your email address. Recovery reactivates your account and republishes archived listings.
• After 30 days, your personal information is removed: your phone number and email address are freed, your display name is cleared, your profile photo is removed and its files are deleted from our storage in the same way, the contact phone is removed from your listings, and records of the sign-in codes sent to you are deleted.
• Your listings, messages, and conversation history are retained with "Deleted user" attribution to preserve counterparties' records and audit trails.
• Moderation reports and audit logs remain intact.

You have the right to: access your data, delete your account (in the app or on our website, with the 30-day grace period described above), correct your profile and listing information, and opt out of marketing notifications if we ever introduce them.

Carberk is not intended for users under 18 years of age (consistent with vehicle purchase being an adult activity). We do not knowingly collect data from minors.

The web admin interface at apps/admin uses HTTP-only session cookies for login. The API accepts bearer token authentication. No analytics cookies are used in the MLP beta.

We use HTTPS for all data in transit. Refresh tokens are hashed with bcrypt. Data is stored on encrypted disks. Until the move to Turkmenistan, servers are hosted by a cloud provider (Railway); they move to Turkmenistan before the app opens to the public. Admin actions are audit-logged.

We may update this Privacy Policy. Material changes will be communicated via the app or through our documented beta support channel. The effective date is displayed at the top of this document.

For privacy inquiries, contact us at: bagtyyarkowusow.dev@gmail.com

This Privacy Policy is governed by the laws of Turkmenistan.