TRSign in

← Back to home

Privacy policy and terms of use

Privacy Policy

ezBT built the BanaUlaş app as a Free app. This SERVICE is provided by ezBT at no cost and is intended for use as is.

This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service.

If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which are accessible at BanaUlaş unless otherwise defined in this Privacy Policy.

Information Collection and Use

For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information. The information that we request will be retained by us and used as described in this privacy policy.

The app does use third-party services that may collect information used to identify you.

Link to the privacy policy of third-party service providers used by the app

Card and Account Information

To own a card, you sign in with your phone number; the number is verified with a code sent by SMS and stored in Firebase Authentication. The information you add to your card (name, title, phone, email, address, IBAN, social media links, custom fields, status message, photo or logo, and the emergency information you choose to show) appears on your card's public page; anyone who scans the QR code or knows the card's address can see it. You decide what appears on your card.

  • Emergency information: you choose which of your blood type, allergies, medications and emergency contacts are shown on your card. Information with "Show on card" turned off is not part of the public card; it is kept in a separate record that only you can access, and people who scan your card cannot see it. Newly added allergies and medications are hidden by default.
  • Card image: the photo or logo you may add to your card is stored, cropped square and resized, as one file per card in Firebase Storage (Google Cloud) and is shown to everyone who opens the card. You can change or remove it at any time.
  • Lost mode: when you mark your card as lost, the card page shows a lost notice, the date it was posted and your optional note. This information is deleted when you turn lost mode off. The finder's location or contact details are not collected.
  • Phone number change: when you change your phone number, the number shown on your cards is updated to the new one. If you no longer have access to your old number, we can transfer your card to your new account after verifying your identity.
  • Stored on your device: the app keeps the public information of the card you last opened on your device so that it opens faster, and keeps your appearance preference (light/dark). Hidden emergency information is not stored on your device.

Messages to Card Owners and Notifications

A card owner may choose to let people who view their card send them a message, and to be notified when their card is viewed. For these features, we process the following information:

  • The message a viewer sends: the selected topic and, optionally, a note of up to 200 characters. The message is stored in the card owner's inbox together with the related card. The sender's name, phone number or account details are not added to the message.
  • Card view alerts: the time the card was viewed. Who viewed the card is not recorded.
  • Message status and the owner's reply: so that the sender can see whether their message was read and the card owner's optional one-time short reply, a status record is created under a random identifier. The record contains only the sent, read and reply times and the reply text; it does not contain the identity or phone number of the sender or the card owner, or the message itself. The identifier is kept only on the sender's device; anyone who knows it can read the record. The record is deleted after 24 hours; the owner's reply is also kept with the message in the owner's inbox.
  • Emergency page alerts: if "Card viewed alerts" is on, an entry is added to the owner's inbox and a notification is sent when someone other than the owner opens the card's emergency page. The entry contains no information about who opened the page and is created at most once every 15 minutes per card.
  • The card owner's devices that receive notifications: the device's notification identifier (Firebase Installation ID), its platform (Android, iOS or web) and its language. This information is used only to deliver notifications and is deleted when the owner signs out or the device can no longer receive notifications.
  • To prevent abuse, a one-way, irreversible hash of the sender's network (IP) address. The network address itself is not stored; the hash is used only to enforce sending limits.

Inbox messages, view alerts and emergency page entries are deleted automatically after 30 days, and sending-limit records after about 1 day. The card owner may delete messages sooner. Notifications are delivered through Firebase Cloud Messaging and show the topic and the first 100 characters of the note.

Only the card owner can see their messages. This information is not used for advertising or profiling and is not shared with third parties.

Reporting a Tag

With "Report this tag" on a card page, you can tell us about a suspicious tag or one with false information. A report contains the reported card's identifier, the reason you choose and an optional note of up to 200 characters, and is deleted automatically after 90 days. The sender's identity, account or IP address is not stored with the report; to prevent abuse, an irreversible hash of the IP address is kept in a counter for about 1 day. Reports are not forwarded to the card owner; they are reviewed only by the BanaUlaş team.

Deleting Your Account and Releasing a Card

You can request account deletion from the My account page in the app or at https://banaulasapp.web.app/account. Confirm the request with a new verification code sent to your phone. Your cards are hidden as soon as you confirm. You can cancel the request within 30 days by signing in with the same phone number. After this period, your account, all card details (including hidden emergency information and card images), card notification settings, inbox entries and registered devices are permanently deleted. Your phone number is removed from the authentication system. The next person to scan a tag can add the card to their own account. To remove a single card from your account, choose “Release card”.

Log Data

When an error occurs in the app, an error report is sent to Sentry so that we can find and fix it. The report may include technical details of the error, the app version, device and operating system information, and the time of the error. Before the report is sent, personal data such as card identifiers, email addresses, phone numbers and IBANs are removed from it; the app does not add your IP address or user details to the report.

Usage Statistics

To improve the app and the website, we collect anonymous usage records that show which screens are opened and which features are used (for example, a card being opened or a button being tapped). A record contains only the event name and values from a small fixed set of options (for example the screen, light/dark appearance, language, platform and app version). Your name, phone number, email address, card or account identifier, card content, location or advertising identifier are never added to a record.

  • To count records from the same session together, the app uses a random session identifier that is kept only in the app's memory and is never written to your device; it is renewed when the app is closed or stays in the background for 30 minutes. The website does not use cookies or browser storage for this.
  • Your IP address is not stored with the records; only a one-way hash of it is kept briefly in memory to limit excessive sending.
  • Records are stored on Google Cloud (Cloud Logging and BigQuery, EU region) for at most 14 months and are used only for aggregate statistics; they are not used for advertising or profiling and are not sold.

Partners

Some card pages may show, at the bottom, the name, logo and link of a partner that sells the tag or has an agreement with BanaUlaş. The card owner can hide this section on their card. No personal information about the card owner or the person viewing the card is passed to partners. A partner only receives aggregate counts, such as the daily views and taps of its own section and the number of cards linked to it; these reports contain no card identifier and no information about the card owner or viewers. When you tap a partner's link you go to the partner's site, and the "Links to Other Sites" section applies.

Intro Video

The video on the intro screen of the app and the website is shown with the YouTube player. When the player loads and the video is played, Google (YouTube) may process information under its own privacy policy. This information is not passed to us.

Cookies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory.

This Service does not use these “cookies” explicitly. However, the app may use third-party code and libraries that use “cookies” to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

Service Providers

We may employ third-party companies and individuals due to the following reasons:

  • To facilitate our Service;
  • To provide the Service on our behalf;
  • To perform Service-related services; or
  • To assist us in analyzing how our Service is used.

We want to inform users of this Service that these third parties have access to their Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13 years of age. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do the necessary actions.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page.

This policy is effective as of 2026-11-07

Terms & Conditions

By downloading or using the app, these terms will automatically apply to you – you should make sure therefore that you read them carefully before using the app. You’re not allowed to copy or modify the app, any part of the app, or our trademarks in any way. You’re not allowed to attempt to extract the source code of the app, and you also shouldn’t try to translate the app into other languages or make derivative versions. The app itself, and all the trademarks, copyright, database rights, and other intellectual property rights related to it, still belong to ezBT.

ezBT is committed to ensuring that the app is as useful and efficient as possible. For that reason, we reserve the right to make changes to the app or to charge for its services, at any time and for any reason. We will never charge you for the app or its services without making it very clear to you exactly what you’re paying for.

The BanaUlaş app stores and processes personal data that you have provided to us, to provide our Service. It’s your responsibility to keep your phone and access to the app secure. We therefore recommend that you do not jailbreak or root your phone, which is the process of removing software restrictions and limitations imposed by the official operating system of your device. It could make your phone vulnerable to malware/viruses/malicious programs, compromise your phone’s security features and it could mean that the BanaUlaş app won’t work properly or at all.

The app does use third-party services that declare their Terms and Conditions.

Link to Terms and Conditions of third-party service providers used by the app

You should be aware that there are certain things that ezBT will not take responsibility for. Certain functions of the app will require the app to have an active internet connection. The connection can be Wi-Fi or provided by your mobile network provider, but ezBT cannot take responsibility for the app not working at full functionality if you don’t have access to Wi-Fi, and you don’t have any of your data allowance left.

If you’re using the app outside of an area with Wi-Fi, you should remember that the terms of the agreement with your mobile network provider will still apply. As a result, you may be charged by your mobile provider for the cost of data for the duration of the connection while accessing the app, or other third-party charges. In using the app, you’re accepting responsibility for any such charges, including roaming data charges if you use the app outside of your home territory (i.e. region or country) without turning off data roaming. If you are not the bill payer for the device on which you’re using the app, please be aware that we assume that you have received permission from the bill payer for using the app.

Along the same lines, ezBT cannot always take responsibility for the way you use the app i.e. You need to make sure that your device stays charged – if it runs out of battery and you can’t turn it on to avail the Service, ezBT cannot accept responsibility.

With respect to ezBT’s responsibility for your use of the app, when you’re using the app, it’s important to bear in mind that although we endeavor to ensure that it is updated and correct at all times, we do rely on third parties to provide information to us so that we can make it available to you. ezBT accepts no liability for any loss, direct or indirect, you experience as a result of relying wholly on this functionality of the app.

At some point, we may wish to update the app. The app is currently available on Android, iOS and the web – the requirements for the system(and for any additional systems we decide to extend the availability of the app to) may change, and you’ll need to download the updates if you want to keep using the app. ezBT does not promise that it will always update the app so that it is relevant to you and/or works with the Android or iOS version that you have installed on your device. However, you promise to always accept updates to the application when offered to you, We may also wish to stop providing the app, and may terminate use of it at any time without giving notice of termination to you. Unless we tell you otherwise, upon any termination, (a) the rights and licenses granted to you in these terms will end; (b) you must stop using the app, and (if needed) delete it from your device.

You are responsible for the information and images you add to your card; card images are not reviewed. Placing a tag over someone else's tag, using a fake tag, or asking for payment or sign-in details through a card page is not allowed. We may review tags that are reported to us.

Changes to This Terms and Conditions

We may update our Terms and Conditions from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Terms and Conditions on this page.

These terms and conditions are effective as of 2030-01-03

Contact Us

If you have any questions or suggestions about our Terms and Conditions, do not hesitate to contact us at info@banaulas.co.