Privacy Policy

1. Overview

This policy explains what personal data is processed when you read loadlyapp.com or use the Loadly Android app, why, and what choices you have. Loadly is run by Eren Şimşir as an individual (not a registered company), who is the data controller and can be reached at kvkk@loadlyapp.com. Depending on where you live, we process data on the basis of your consent (analytics and advertising cookies), performance of a contract (account and app features), our legitimate interests (security, preventing fraud and abuse, keeping the service running) and legal obligations.

2. Data We Collect

Depending on how you use Loadly, we may process the following data:

• Website visitors (no account needed): technical data such as IP address, browser type, device information and access times, which our servers receive when a page is requested; and, only if you accept cookies, usage data collected by Google Analytics (pages viewed, approximate location, device and browser).
• Account information (only if you register through the website or the app): full name, email address, phone number, company name (optional) and user role (shipper/driver).
• Content you provide (only if you use those features): listings you create, route, date and location details, and messages sent through the platform together with their conversation history.
• Contact requests: if you email us, we process your email address and the content of your message to reply.
• Advertising data: if you accept cookies, Google AdSense (website) and Google AdMob (app) may collect identifiers and browsing or app-usage data to show and measure ads. See section 4.
• Android app: if you grant location permission, your device location is used on the device (via Android Geocoder) to determine your country and subscribe you to that country's push-notification topic via Firebase Cloud Messaging; raw coordinates are not sent to or stored on Loadly's own servers. The app also holds a Firebase push-notification registration token (needed to deliver notifications) and, if you accept ads, an advertising identifier used by Google AdMob.
• Android app diagnostics: crash reports and device diagnostics (for example device model, Android version and the technical state of the app when it crashed) are sent to Firebase Crashlytics so we can fix bugs.

Loadly does not process payments and does not collect payment card or bank details.

3. How We Use Data

We use the data above only for the following purposes:

• Providing the website and the app, including account creation and sign-in
• Showing freight listings and enabling messaging and contact between users of the app
• Route- and load-type search in the app
• Keeping the service secure and preventing fraud, abuse and spam
• Measuring traffic and improving the website and the app (analytics and crash reports)
• Showing and measuring advertisements, where you have allowed it
• Complying with legal obligations

We do not use your personal data to process payments.

4. Cookies and Similar Technologies

When you first visit the website a banner lets you accept or reject non-essential cookies. Until you accept, analytics and advertising storage stay switched off (Google Consent Mode); if you reject, they stay off. Visitors in the European Economic Area, the United Kingdom and Switzerland may also see a consent message from Google, which applies to Google's advertising cookies. Categories we use:

• Strictly necessary: keeping you signed in and remembering your cookie choice. These do not require consent.
• Analytics (Google Analytics 4): counts visits and shows which pages are read. Only used after you accept cookies.
• Advertising (Google AdSense): shows and measures ads. Only used after you accept cookies.

When you reject, Google may still receive limited signals that do not use cookies, which is how Consent Mode works. You can also block or delete cookies in your browser settings; some features, such as staying signed in, may then stop working.

5. Who Receives Your Data

We share personal data only with the following recipients and only as far as needed:

• Service providers that run the platform on our behalf: Supabase (database and sign-in), Oracle Cloud Infrastructure (hosting), and Google (Analytics, AdSense and AdMob advertising, Firebase Cloud Messaging and Crashlytics).
• Authorized public institutions, where the law or a lawful request requires it.
• Legal advisors, where needed to establish, exercise or defend legal claims.

We do not share your personal data with payment providers (Loadly does not process payments) and we do not use it for marketing by third parties.

6. International Transfers

Our providers may process data in the United States and in other countries outside your own. Where the law requires safeguards for such transfers, we rely on the ones our providers offer, such as standard contractual clauses.

7. How Long We Keep Data

Account data is kept while your account exists. You can delete your account at any time from the Delete Account page, after which we delete or anonymize your personal data, except for what we must keep to comply with the law or to handle legal claims. Server logs, analytics data and crash reports are kept for as long as the respective provider’s retention settings and our security needs require.

Delete your account

8. Data Security

The website is served over HTTPS. Access to personal data is limited to what is needed to run the service, and we depend on the security measures of our hosting and database providers. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

9. Children

Loadly is intended for adults working in freight and logistics and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

10. Your Rights

Under the GDPR, the UK GDPR and Turkey’s KVKK, you have the following rights:

• Access and receive a copy of your personal data
• Have inaccurate or incomplete data corrected
• Have your personal data deleted
• Object to the processing of your data
• Receive your data in a portable format
• Restrict processing, and withdraw consent at any time (withdrawing does not affect processing carried out before)

To exercise these rights, email kvkk@loadlyapp.com. You also have the right to lodge a complaint with your local data protection authority (in Turkey, the Personal Data Protection Board; in the EU or UK, your national supervisory authority).

11. Changes to This Policy

We may update this policy when the law or our services change. The “Last updated” date at the top shows the current version, and we will publish changes on this page. Please check it from time to time.

12. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• The right to know what personal information we collect and how it is used
• The right to request deletion of your personal information
• The right to opt out of the “sale” or “sharing” of your personal information — a term that, under CCPA, can include allowing third-party ad providers like Google AdSense to use identifiers for personalized advertising

To exercise any of these rights, email kvkk@loadlyapp.com with the subject "California Privacy Request". You can also opt out of personalized advertising directly via the Google Ads Settings link above. We do not discriminate against you for exercising these rights.

13. Contact

For questions about this policy or to exercise your rights, contact the data controller (Eren Şimşir, Loadly) through the following channel:

• Email: kvkk@loadlyapp.com
• KVKK Aydınlatma Metni (Türkçe) — Turkish-language data protection notice under Law No. 6698.