Privacy Policy
This Privacy Policy describes how Individual Entrepreneur Kharkov Tymur Valeriyovych (hereinafter — "ShynOk", "we") collects, uses, and protects personal data of users of the ShynOk mobile application and related services (the "Service").
1. Data we collect
1.1. Data you provide
- Name and email — obtained automatically when signing in via Google or Apple.
- Phone number — entered the first time a contact-required action is performed.
- Vehicle data — make, color, and license plate (entered when adding a car).
- SOS call data — geolocation, issue photos, wheel count and radius. See section 3.
- Payment data — card details are entered on WayForPay's secure page. See section 4.
1.2. Data collected automatically
- Push token (used for visit and payment notifications).
- Our server's technical logs — records of requests and errors, used for troubleshooting and abuse prevention.
We do not collect your device model, operating system version, or app version. The app contains no analytics, advertising, or crash-reporting software (Google Analytics, Firebase, Sentry, Crashlytics, advertising SDKs, and the like), and we do not build advertising profiles of users.
2. How we use your data
- Delivering tire service according to the chosen subscription plan.
- Booking and confirming appointments.
- Processing payments and issuing receipts.
- Push notifications about appointments, subscription status, and SOS call status.
- Forwarding your geolocation and issue photos to a service employee so they can arrive at your SOS call.
- QR code identification during a tire service visit.
- User support and responding to inquiries.
- Security: fraud detection and protection from unauthorized access.
3. Geolocation, camera, and SOS call data
3.1. Geolocation
The app requests precise geolocation (GPS) only at the moment you submit an emergency (SOS) call — so that the mobile tire service employee can find you on the road. Coordinates are read once, when you tap the call button. The app does not track your location in the background and does not collect a movement history.
3.2. Camera and photos
- When submitting an SOS call you attach between 1 and 5 photos of the issue — from the camera or gallery. Photos are compressed directly on your device before upload.
- The camera is also used by service employees to scan a customer's QR code. Camera frames captured during scanning are not stored — only the decoded code is processed.
- Issue photos are accessible only to authorized service personnel — administrators and tire service employees. Other customers have no access to them.
3.3. SOS call data retention
Coordinates and photos are stored temporarily — from call creation until completion. As soon as the call status changes to "Completed" or "Cancelled", the coordinates are automatically deleted from the database and the photo files are removed from our server, with no delay.
The call record itself (car make, status, work performed) remains in your service history — it no longer contains either geolocation or photos.
4. Payment data
We do not receive and do not store your full card number, expiry date, or CVV. You enter card details directly on the secure WayForPay payment page — the app contains no card entry fields.
From WayForPay we receive and store:
- the masked card number exactly as WayForPay provides it — leading and trailing digits, the rest hidden (for example, 41****1234);
- the card type, amount, currency, transaction status, and transaction identifier;
- a reference to the payment token used for monthly subscription renewals — this token cannot be used to reconstruct your card number.
5. Data sharing with third parties
We do not sell your personal data. Sharing is limited to cases necessary for delivering the Service:
- WayForPay — payment processing and recurring subscription charges.
- Google / Apple — OAuth authentication.
- Expo / Google FCM / Apple APNs — push notification delivery.
- Railway — hosting of the server, database, and uploaded photos.
- By Ukrainian law — upon official request from authorized authorities.
We do not share data with advertising networks, data brokers, or analytics services — no such integrations exist in the app.
6. Storage and security
Data is stored on servers in secure data centers and transmitted exclusively over HTTPS/TLS. Passwords are not stored — authentication is handled by Google and Apple. Access to data is restricted to staff who need it to perform their duties.
We retain your data for as long as your account exists. When an account is deleted, personal data is anonymized immediately — see section 8. Financial records are retained in anonymized form for the period required by Ukrainian law.
A separate retention rule applies to SOS call data: geolocation and photos are deleted as soon as the call is completed or cancelled, regardless of whether your account still exists (section 3.3).
7. Your rights
Under Ukrainian Law "On Personal Data Protection" you have the right to:
- Access your data and obtain a processing copy.
- Correct inaccurate data.
- Delete your account (section 8).
- Restrict processing or object to it.
- Withdraw consent (this will make further use of the Service impossible).
8. Account deletion
You can delete your account yourself inside the app, without contacting support: Profile → Delete account. The action must be confirmed in a dialog. Deletion takes effect immediately, with no waiting period, and cannot be undone.
What happens on deletion:
- all active, paused, and pending subscriptions are cancelled and recurring card charges stop — we instruct WayForPay to remove the payment token;
- your personal data is anonymized: your name is replaced with "Deleted account", and your email, phone number, Google and Apple sign-in identifiers, profile picture URL, and push token are erased;
- your vehicles, notifications, registered push devices, and all sign-in sessions are deleted outright.
What is retained. This is anonymization, not complete erasure. Records of payments, subscriptions, and services rendered are retained in anonymized form — they no longer contain your contact details, but we need them for accounting and tax purposes under Ukrainian law.
A deleted account can no longer be signed into: its Google and Apple identifiers have been detached from it. If you later sign in again with Google or Apple, a new empty account is created with no access to your previous history.
If you cannot use the app, send a request to kharkov.timur@gmail.com.
9. Children
The Service is not intended for users under 18. We do not knowingly collect data from minors. If you discover that your child has provided data without your consent — contact us for deletion.
10. Policy updates
We may update this Policy. Significant changes will be communicated via push notification or email. The latest revision date is always shown at the top of the page.
11. Contact
Questions about personal data processing should be sent to:
- Email: kharkov.timur@gmail.com
- Data controller: Individual Entrepreneur Kharkov Tymur Valeriyovych
- EDRPOU/IPN: 3219401496