KVKK Privacy Notice

1. Data Controller

Derslio is the data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK). This notice explains which personal data is processed while you use the app, why it is processed and what rights you have over it.

2. Data Processed

Account data: your email address, your username and — if you signed in with Google or Apple — the account identifier that provider passes to us. Derslio never sees your password; authentication is performed through Firebase Authentication.

Study data: the tasks, routines, subjects, topic tracking and timer sessions you create, with their date and duration information; the entries, notes and question photos you add to your mistake notebook; the YouTube playlists you add as camps and your watching progress.

Mock exam data: the number of correct, wrong and blank answers per subject read from the report you upload, together with the exam name, date and type. Your first and last name, so that your own row can be found in group reports.

Device data: Derslio does not collect information that identifies your device, and it does not collect location, advertising identifiers or contacts. The camera is used only when you take a photo. The device records kept for the trial in earlier versions are no longer used and are deleted.

Social data: your invite code, your friendship connections, — only while the timer is running — which subject you are currently studying, and lobbies. When you create or join a lobby, the lobby's name, its members' names and photos, the task and subject they have selected, the timer status and their connection status (whether the app is open or in the background) are visible to the other users in the lobby; if "Friends can join" is on, the lobby also appears in your friends' lists. Social information outside lobbies is not shown to users who are not your friends. When you leave a lobby, or your connection is lost for a long time, your lobby membership is deleted; the record of a closed lobby is deleted completely within two days at the latest.

Website visit data: on derslio.app, only with your explicit consent (cookie consent), the pages visited, the source of the visit, the browser and device type and approximate location (country, city) via Google Analytics. If you do not consent, no cookie is written and only a cookieless, anonymous count is processed. You can withdraw your consent at any time from "Cookie preferences" in the site footer.

3. Purposes of Processing

Data is processed only to perform the app's functions: syncing your plan across your devices, analysing mock exam results and turning them into statistics, sharing your study status with your friends and keeping your account secure.

Usage counts (e.g. the number of PDF study plans created) are processed only to apply the limits of the free version, and subscription information only to verify subscription status.

Your data is not used for advertising and is not sold to third parties.

4. Your Report Files

The report file you upload is kept on the server while it is being analysed. As soon as you save the results or leave the preview, the raw file is DELETED from the server; all that remains with you is the numbers.

Group (institution) reports may contain rows for more than one student. In that case only the row matching your name is processed; if the match is not certain, you are asked which row belongs to you.

5. Transfer and Storage

Data is stored on Google Firebase (authentication, database, file storage), on Derslio servers running on Google Cloud Run and in the Supabase database used by these servers. The servers are located in the European region.

Visit measurement on the derslio.app website is carried out through Google Analytics (Google LLC) based on your explicit consent; this data is processed on Google's servers abroad.

Data is kept for as long as your account remains open. When you delete your account, your study and mock exam data, mistake notebook and question photos, and camps are deleted as well.

6. My Rights

Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, to request information if it has been processed, to request its correction or deletion, and to object to the consequences of processing.

Two of these rights can be used directly within the app: with "Export all data" on the page that opens when you tap your name on the Profile page you can get a copy of your data, and with "Delete all data" you can clear your content. To close your account completely, you can use the "Delete Account" step on the same page.

7. How to Apply

Under Article 13 of the KVKK, you can submit requests regarding your rights in writing. Your application must state your first and last name, the email address registered to your account and the subject of your request.

Applications are concluded within thirty days at the latest. No fee is charged unless the request requires an additional cost.

You can write to us with any questions about this text.