Kavram AtölyesiPrivacy Policy
Kavram Atölyesi is a mobile app for concept teaching in special education: teachers build activities and assign them to their connected students, and students play them. This policy explains which personal data the app processes, why, and your rights under the Turkish Personal Data Protection Law No. 6698 (KVKK).
In short: no ads, no analytics or tracking tools, and we never sell your data. We process only what the app needs to work. You can delete your account in the app at any time, which removes all of your data and images.
1. Data controller
Controller: [NAME or COMPANY NAME]
Address: [ADDRESS]
Email: [email protected]
2. Data we process
- Account: the email address and account identifier that Google or Apple send when you sign in (with Apple this may be a private relay address). There are no passwords.
- Profile: your role (teacher or student) and the display name you enter. We never copy the name from your Google or Apple account.
- Teacher–student connections: which teacher is connected to which student. Pairing codes are stored only as one-way hashes for a few minutes, and attempts are logged to prevent abuse.
- Teacher content: activities, questions and options, uploaded images and their descriptions. Images are resized on the device and stripped of metadata (such as location) before upload.
- Assignments and answers: a copy of each activity assigned to a student, the student's answers and their times, shown to the assigning teacher.
- Technical logs: our infrastructure provider briefly logs requests (e.g. IP address, time, request type) for security and troubleshooting.
We do not process location, contacts, microphone recordings, advertising IDs or other files on your device. The app does not use the camera; it receives only the image you pick from your gallery. Spoken instructions are produced by your device's own speech engine.
3. Purposes and legal bases
- Creating your account, signing you in, connecting teachers and students, creating, assigning and playing activities, showing progress: performance of the service contract (KVKK Art. 5/2-c).
- Keeping the service secure and preventing abuse: legitimate interest (Art. 5/2-f).
- Responding to lawful requests: legal obligation (Art. 5/2-ç).
4. Who receives data
- Supabase Inc.: database, authentication and image storage, hosted in [SERVER REGION, e.g. EU (Frankfurt)].
- Google and Apple: only for sign-in, when you start it.
Transfers to these providers abroad are carried out under KVKK Art. 9. We never share or sell data for advertising or marketing.
Inside the app, a teacher sees only the display names of actively connected students and the answers to assignments that teacher made; a student sees the display names of connected teachers and their own assignments. Email addresses are never shown to other users. Either side can remove a connection at any time.
5. Children
Student accounts may be used by children. Students under 18 should use the app with the knowledge and consent of a parent or guardian, preferably with a parent-managed Google (Family Link) or Apple (Family Sharing) account. A teacher cannot add a student alone: a connection exists only after the student enters the teacher's code. We collect only the data the app needs; there is no advertising, profiling or tracking. Parents can send requests about their child's data to the address below.
6. Retention and deletion
Data is kept while your account exists. Deleting your account immediately and permanently removes your profile, connections, content, uploaded images, assignments, answers and sign-in record; for Apple accounts the app's Sign in with Apple authorization is also revoked. Copies in system backups expire within [BACKUP PERIOD]. See Account deletion.
7. Security
All connections are encrypted. Server-side access rules let each user reach only their own data and data they are allowed to see. The session is kept in secure storage on your device (Android Keystore, iOS Keychain).
8. Your rights
Under KVKK Art. 11 you may ask whether your data is processed and request information about it, learn the purpose and whether it is used accordingly, know the recipients in Turkey or abroad, request correction or deletion, request that recipients be notified of corrections or deletions, object to a decision against you made solely by automated analysis, and claim compensation for damage caused by unlawful processing. Email [email protected] from the address registered to your account. We reply free of charge within 30 days.
9. Changes
We may update this policy. Significant changes are announced in the app or on this page; the current version is always here.