Privacy Policy
This Privacy Policy explains how tasaroof (“we”, “us”) processes personal data collected through the tasaroof mobile app.
If you are in the European Economic Area or the United Kingdom, the GDPR applies to our processing of your personal data, and this policy sets out how we meet it: our lawful bases under Legal Basis, the rights you can exercise under Your Rights, and where your data lives under International Data Transfers — inside the EEA. One thing to be transparent about: we have not appointed a representative in the Union under GDPR Article 27.
If you are in Türkiye, the same practices are described under Law No. 6698 on the Protection of Personal Data (“KVKK”) in our Turkish Gizlilik Politikası and KVKK Aydınlatma Metni. Those Turkish documents are the original versions of this policy; if a translation’s wording ever conflicts with them, the Turkish wording governs. That clause is about discrepancies between translations — it does not limit any right the GDPR gives you.
Data Controller
The data controller is Duhha Yazılım Limited Şirketi (a limited liability company incorporated in Türkiye), operating under the tasaroof brand. You can reach us at destek@tasaroof.com or at tasaroof.com.
We do not publish our registered address on this page. If you need it for a formal written request, email us and we will provide it.
What We Collect
| Data | Purpose |
|---|---|
| Email address | Registration and sign-in (email verification) |
| Name, surname, city | Profile |
| Vehicle data (make, model, plate, year, mileage, fuel, dates) | Vehicle and reminder tracking |
| Child profile data (name, birth date, school, child-linked expense categories) | Child and expense tracking |
| Home data (address, size, home type, room count, ownership, DASK/maintenance/lease-renewal/property-tax dates) | Home and reminder tracking |
| Workplace data (type, address, insurance/lease-renewal/license-renewal/property-tax dates) | Workplace and reminder tracking |
| Land data (location, block/parcel, area, property-tax date) | Land and reminder tracking |
| Pet data (species, birth date, breed, vaccination/vet-checkup/parasite-treatment dates) | Pet and reminder tracking |
| Expense data (amount, category, date, description; linked to an asset or general) | Expense tracking and reporting |
| Budget limit data (category, monthly limit amount) | Budget limit tracking |
| Savings goal data (goal name/amount/date, contribution history) | Savings goal and contribution tracking |
| Income data (amount, source, date) | Income tracking |
| Subscription/recurring expense data (name, amount, frequency, next payment date) | Subscription tracking and payment reminders |
| Notification preferences and history | Reminder service |
| Technical logs | App operation and security (personal data is redacted) |
Reminder notifications are scheduled locally on your device; no separate data is sent to our servers for this scheduling.
How We Use Your Data
To manage your account, track your vehicle/home/other assets and expenses, provide reports and reminders, connect you to insurance partners (only at your own request), and keep the service secure.
Legal Basis
We process your personal data on the following grounds — GDPR Article 6 where the GDPR applies to you, and the corresponding grounds in KVKK Article 5 for users in Türkiye:
- Performance of a contract — providing the service you signed up for.
- Legal obligation — meeting record-keeping and other statutory requirements.
- Legitimate interest — security, fraud/abuse prevention, debugging.
- Consent — transferring your email address to our email delivery provider to deliver a one-time verification code.
Who We Share Your Data With
| Recipient | Purpose |
|---|---|
| Our email delivery provider — Azure Communication Services (part of Microsoft Azure) | Delivering the one-time verification code (email address + code) |
| Microsoft Azure | Cloud hosting for the app and database |
| Insurance partners | Only when you tap “redirect” — you’re taken to their site |
We do not sell your personal data.
International Data Transfers
Our servers run on Microsoft Azure’s West Europe (Netherlands) region — inside the EU/EEA. Email OTP delivery (Azure Communication Services) runs on the same Microsoft Azure platform, in the Europe region. For Turkey-based users, this constitutes a cross-border transfer under KVKK Article 9, consented to when you accept our KVKK notice at registration. For EU-based users, your data is not leaving the EEA by being hosted there.
Data Retention
Membership data is kept for as long as your account is active, plus any statutory retention periods. Email one-time codes are kept briefly and invalidated after use. When you delete your account, your data is deleted or anonymized, subject to any legal retention obligations.
Your Rights
You can find out whether we process your data, request information about it, request correction or deletion, ask that any third party we shared it with be notified of a correction/deletion, object to purely automated processing, and claim compensation if you’re harmed by unlawful processing.
If the GDPR applies to you, you additionally have the right to receive a copy of your data in a portable, machine-readable format, to have processing restricted while a dispute over it is resolved, to object to processing we base on our legitimate interests, and to withdraw consent at any time — withdrawal does not affect processing already carried out. You also have the right to lodge a complaint with the data protection supervisory authority in the country where you live or work.
Contact destek@tasaroof.com to exercise any of these rights — we respond within 30 days (one month, the deadline the GDPR sets).
You can also delete many specific records yourself, at any time, directly in the app — a vehicle, home, or other asset; a reminder date; an expense; a budget limit; a savings goal or its contributions; an income entry — without deleting your whole account. Each deletion is immediate and irreversible.
To delete your account entirely, you can do it in the app under Profile → Delete my account, or see Account and Data Deletion for step-by-step instructions and the list of what is deleted and what we keep.
Notifications
You can turn reminder notifications off from the app’s “Notification Settings” screen or your device settings at any time.
Children’s Privacy
tasaroof is not directed at users under 18, and we do not knowingly collect data from children. The app is not used by children and no account may be opened in a child’s name; under the Child Profile feature, the account holder (18 or older) records limited information about their own child (name, birth date, school) in their capacity as parent/guardian.
Security
Session data is kept in secure on-device storage; all communication is encrypted (HTTPS); server-side access is access-controlled.
Changes to This Policy
We may update this policy; we’ll announce material changes in the app or on this page.
Contact
Email: destek@tasaroof.com · Website: https://www.tasaroof.com