Updated · May 2026

Privacy Policy

Peramap — Privacy Policy Last updated: July 3, 2026 Effective date: July 3, 2026

This Privacy Policy explains how Peramap ("Peramap", "we", "us", or "our") collects, uses, stores, shares, and protects your information when you use the Peramap mobile application and related services (the "App" or "Service") on Android and iOS. Peramap acts as the "Data Controller" under the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).

Peramap is a location-sharing and family-safety application. This Policy is consistent with the in-app disclosures we present and with the data-safety information we provide on the app stores (Google Play Data Safety and the Apple App Store privacy details).

By creating an account and using the App, you acknowledge that you have read and understood this Policy. Where required by law, we process your personal data based on your explicit consent, which you may withdraw at any time.

1. Who We Are (Data Controller) Peramap PERPA Tic. Mer. B-Blok Kat:2 No:65, 34385 Okmeydanı – Istanbul / TURKEY Email: info@perapole.com For privacy requests, use the subject line "Data Subject Application".

2. Summary of Key Points - The App collects precise and approximate LOCATION data, including in the background (while the App is closed or not in use), to provide its core features. Background collection is used only for features that are central to the App and that directly benefit you. - Before we start collecting background location, we show an in-app disclosure and ask for your consent. You can decline or withdraw it at any time. - Your location is shared only with members of the communities/groups you choose to join, and only at the level you select (Exact, Approximate, or Off). - We also collect account data, physical-activity and device-sensor data, device and diagnostic data, and (if you provide it) a profile photo and phone number. We do NOT read your device's contact list. - We do NOT sell your personal data, we do NOT show ads, and we do NOT collect an advertising identifier. - You can delete your account — and its associated data — at any time, from inside the App or from our website.

3. Information We Collect

3.1. Location Data (core feature) - Precise location: GPS-based latitude/longitude coordinates from your device. - Approximate location: derived from network, Wi-Fi, or IP address. - Background location: when you enable sharing, the App accesses your location while running in the background — including when the App is closed or not actively in use — to provide continuous real-time location sharing to your communities, trigger zone (geofence) entry/exit alerts, deliver emergency (SOS) alerts with your position, and record your location history and movement trails. We request the narrowest scope needed for the feature you use, and we do not use location for advertising or analytics. - Derived location details: approximate addresses/place names (via reverse geocoding) and altitude.

3.2. Account and Profile Data - Name and/or display name, email address, and — if you provide it — a phone number you enter manually. We do NOT access or upload your device's contact list. - An encrypted (hashed) password, or, if you sign in with Google or Apple, the basic account information (such as name and email) those providers share with us. - Profile photo (optional) and your communities/groups, your role in each (admin or member), and your per-community sharing status (Exact / Approximate / Off).

3.3. Physical Activity and Sensor Data - Step count and physical-activity data (used for movement insights and activity features). - Device sensor data such as barometric pressure used to estimate altitude. - Device battery level, which may be shown to your community members so they know your device status (e.g., low battery).

3.4. Photos and Camera - If you choose to set a profile picture, we access your camera or a single photo you select through the system photo picker. We only access the specific image you pick; we do NOT access your full photo library.

3.5. User-Generated Content - Community names, zone/place names and boundaries you define, notes, invitations you send, and any other content you submit within the App.

3.6. Device and Technical Data - Device model, operating system and version, app version, device language, Wi-Fi/network information, unique device/installation identifiers, and push-notification tokens. - Log and diagnostic data (e.g., IP address, timestamps, crash reports, and error logs) used for security, troubleshooting, and reliability. - Note: The App does NOT collect an advertising ID and does not use your data for advertising.

3.7. Subscription and Purchase Data - Subscription tier and status, purchase and renewal events, and transaction identifiers processed through the app stores and our subscription provider. We do NOT store your full payment card details.

3.8. Usage and Analytics Data - Aggregated, event-level information about how you use the App (features used, screens viewed, interactions), used to improve the Service and subject to your consent where required.

4. How We Use Your Information We process your personal data to: - Provide the App's core location-sharing features, including real-time location display to your communities. - Provide zone/geofencing alerts (entry/exit notifications for places you define). - Provide emergency (SOS) features, including sharing your location with your community members when you trigger an alert. - Record and display your location history, trails, and movement/activity insights. - Generate AI-powered insights and summaries (see Section 8). - Create and manage your account, communities, memberships, and invitations. - Send you notifications (alerts, invitations, and service messages). - Process and manage subscriptions and purchases. - Maintain security, prevent fraud and abuse, and diagnose technical issues. - Comply with legal obligations and establish, exercise, or defend legal claims. - Improve, personalize, and develop the Service.

We use personal and sensitive data only for the purposes disclosed above and reasonably expected by you. If we ever want to use it for a new purpose, we will ask for your consent first.

5. Legal Grounds for Processing (GDPR Art. 6 / KVKK Art. 5) Depending on the activity, we rely on one or more of the following: - Your explicit consent (in particular for background location, physical-activity/sensor data, and, where applicable, analytics). You may withdraw consent anytime. - Performance of a contract with you (to provide the Service you requested). - Our legitimate interests (e.g., securing the Service and preventing abuse), balanced against your rights and freedoms. - Compliance with a legal obligation. - Protection of the vital interests of you or another person (e.g., SOS/emergency).

6. How We Share Your Information

6.1. With other users (communities/groups) Your location and profile are shared with members of the communities you join, according to the level you set for each community: - Exact: members see your precise location. - Approximate: members see only a generalized location. - Off: your location is not shared with that community. Related information such as battery level and activity status may also be visible to your community members. You can change these settings at any time.

6.2. With service providers (data processors) We share data with trusted providers who process it on our behalf under contractual confidentiality and data-protection obligations, only as needed to run the Service (see Section 7). We require them to protect your data at a level consistent with this Policy and not to sell it.

6.3. For legal reasons We may disclose data where required by law, court order, or a lawful request by a public authority, to protect the rights, safety, and property of Peramap, our users, or the public, or in connection with a merger or acquisition (with appropriate notice to you).

6.4. We do not sell your data We do NOT sell your personal or sensitive data. "Sale" means transferring or sharing your data with third parties in exchange for money or other valuable consideration. A transfer you initiate yourself — for example, when you export or share your own location data with someone using an App feature — is not a "sale". We also do NOT share your location with third parties for their own advertising or marketing.

7. Third-Party Services We Use The App relies on the following third-party services, each with its own privacy policy: - Google Firebase (Authentication, Cloud Messaging for push notifications, and Analytics) — Google LLC. - Google Sign-In and Apple Sign In — for optional social login. - Google Gemini API (generative AI) — Google LLC, used to generate insights (see Section 8). - RevenueCat and the Apple App Store / Google Play — for subscription and purchase management. - OpenStreetMap — for map tiles and mapping. - Cloud hosting infrastructure — to store and process your account and data.

We recommend reviewing the privacy policies of these providers to understand how they process data.

8. AI-Powered Insights To provide movement and activity insights and summaries, the App may send relevant data (such as aggregated location, place, and activity information) to Google's Gemini AI service. This data is used to generate the insight you requested and is not used to show you advertising. You can avoid this processing by not using the insights features.

9. International Data Transfers Your data may be stored and processed in Türkiye and/or other countries where we or our service providers operate. Where data is transferred internationally, we apply the safeguards required by GDPR and KVKK (such as adequacy decisions or standard contractual clauses).

10. Data Retention We keep your personal data only as long as necessary for the purposes in this Policy or as required by law: - Account and profile data: while your account is active. - Location data, history, trails, and activity data: retained while your account is active and according to your in-app settings; older data may be automatically deleted or anonymized. - Transaction/financial records: as required by applicable law. - Log and security data: for a limited period (e.g., up to 2 years).

11. Account Deletion and Data Deletion You can delete your Peramap account at any time: - In the App: open Settings, and under "Account" tap "Delete Account", then confirm. - From the web or by request: visit https://peramap.com/delete-account, or email bilgi@peramap.com with the subject line "Account Deletion".

When you delete your account, we permanently delete the personal data associated with it — including your profile, location data, history and trails, activity data, and the communities you own. Temporarily deactivating or "freezing" an account is not the same as deletion.

We may retain a limited amount of data for a limited period where necessary to comply with legal obligations, resolve disputes, prevent fraud and abuse, or enforce our agreements. Any such data is kept only as long as required and is then deleted or anonymized.

12. Your Rights Under GDPR and KVKK, you have the right to access, correct, erase ("right to be forgotten"), restrict, or object to the processing of your personal data; to data portability; to withdraw consent at any time (without affecting prior lawful processing); to not be subject to solely automated decisions with legal or similarly significant effects; and to lodge a complaint with a supervisory authority (e.g., the Turkish Personal Data Protection Board or your local EU data protection authority).

Within the App you can also manage your data directly by changing your sharing level, disabling permissions in your device settings, exporting your location history, and deleting your account.

13. How to Control Location and Permissions Location is required for the App's core functionality, but you remain in control: - Set your sharing level per community to Exact, Approximate, or Off. - Revoke foreground and/or background location permission anytime in your device's operating-system settings. - Disable background location, which limits continuous sharing and alerts. - Manage other permissions (activity recognition, notifications, camera) in your device settings. - Delete your account to stop all processing (see Section 11).

If you deny a non-critical permission, we will make reasonable efforts to keep the App usable, but disabling location or core permissions may prevent some or all features from working.

14. Children's Privacy The App is not directed to children below the age of majority in their jurisdiction without appropriate parental or guardian consent. If a community includes a minor, the account holder/administrator confirms they have the authority and consent to share that person's location and data. If you believe a child's data was provided without proper consent, contact bilgi@peramap.com and we will take appropriate action.

15. Connected Devices (Apple Watch) If you use the Peramap companion app on a paired smartwatch (e.g., Apple Watch), relevant information such as location and community status may be shared with that paired device to display it there.

16. Data Security We handle all personal and sensitive data securely, including transmission over modern encryption (e.g., HTTPS). We implement appropriate technical and organizational measures such as secure credential storage, access controls and authorization management, activity logging, regular backups, and monitoring. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard safeguards.

17. Changes to This Policy We may update this Policy from time to time. Material changes take effect upon publication within the App or on our website, and we will update the "Last updated" date above. Continued use of the App after changes become effective constitutes acceptance of the updated Policy.

18. Contact Us For questions or to exercise your rights: Peramap PERPA Tic. Mer. B-Blok Kat:2 No:65, 34385 Okmeydanı – Istanbul / TURKEY General support: info@perapole.com Privacy & data-protection requests: info@perapole.com Subject line for privacy requests: "Data Subject Application"