Privacy Policy & KVKK Information Notice

Last updated: November 2026

This notice explains which personal data Turkish with Buse collects, why, and what your rights are. It is also our information notice (aydınlatma metni) under the Turkish Personal Data Protection Law No. 6698 (KVKK) and is written with the EU GDPR in mind.

1. Data controller

Buse Çelik (individual seller, trading as Turkish with Buse), Salihli, Manisa, Türkiye — privacy contact: turkishwithbuse1@gmail.com.

2. What we collect

• Account: your name, email address, sign-in method (email/password or Google), and the username and avatar colour you choose in your profile.
• Learning data: your level and placement-test result, lesson progress, scores, streaks, saved words, settings and, if you use the Kids area while signed in, the Kids game progress (stars and finished worlds). This is saved in your browser and copied to your account so it works on your other devices.
• Teacher's class (only if you join one): if you enter a teacher's class code in Settings → My teacher, that teacher can see your name, email address and learning data, and can give you homework. You can leave the class at any time; the teacher then no longer sees your data.
• AI features: the text you write and the voice you speak while you use the AI coach, AI Tutor, writing or speaking feedback and voice calls (including the Kids voice call). Text and recordings for feedback are sent to Google to create the reply. In voice calls your speech is turned into text by your browser's own speech service (Google in Chrome and Edge, Apple in Safari), and only that text is sent to the AI. We do not save your recordings or voice; the corrections and scores you see may be kept in your learning data.
• Payments: handled by Paddle. We receive your plan, its status, renewal dates and an order/subscription number, never your card details.
• Technical data: security signals from Firebase App Check / reCAPTCHA, and the data your browser stores locally (see section 6).

3. Why we use it (purposes and legal grounds)

To create and run your account and lessons (performance of the contract / KVKK art. 5(2)(c)); to provide the AI feedback you ask for (performance of the contract); to send a welcome email and three short tips during your first week, which you can unsubscribe from with one click (legitimate interest), and service messages (contract); to keep the Service secure and prevent abuse (legitimate interest, KVKK art. 5(2)(f)); and to meet legal obligations such as tax records kept by Paddle (legal obligation).

4. Who processes your data

• Google Firebase — sign-in (Authentication), database (Cloud Firestore, Europe region) and App Check with reCAPTCHA.
• Google Gemini via Firebase AI Logic — creates AI replies and corrections, and translates the site's learning texts. Google processes this data under its own terms and may keep it for a limited time.
• Google Gemini API (paid service) — turns the site's Turkish texts and Buse's replies into the natural voice you hear. Only the text to be read is sent (never your name, email or voice). On this paid service Google does not use the data to improve its products.
• Google Fonts — delivers the site's fonts; your browser connects to Google to load them.
• Paddle — payments and invoices, as Merchant of Record.
• EmailJS — sends the welcome email and the first-week tips (your first name, email address and, to make the tips fit you, how many lessons you have finished and your study streak).
• Netlify — hosts the website and runs the small server functions that confirm payments and create the voice. Voice recordings of the site's texts are stored there so they play quickly; they contain no personal data.

Some of these providers process data outside Türkiye and the EU (for example in the USA). We rely on the safeguards these providers offer (such as standard contractual clauses) and, where the law requires it, your explicit consent. If you have questions about a specific transfer, write to us.

5. How long we keep it and deleting your account

Account and learning data: while your account exists. When you delete your account (Settings → Delete my account) we first cancel an active subscription, then delete your saved progress, free your username, delete your sign-in account and clear this browser's stored progress. Copies held by our providers (for example temporary backups or logs at Google, and the welcome email at EmailJS) are removed according to their own retention periods. Payment and invoice records are kept by Paddle as the law requires.

6. Cookies and local storage

We do not use advertising or analytics cookies. Your browser stores your progress, language, settings and saved translations locally (localStorage and IndexedDB) so the site works quickly and offline; Google sign-in, reCAPTCHA and Paddle checkout may set their own technical cookies that are needed for security and payment.

7. Children

Accounts are for people aged 13 and over. The Kids area is meant to be used by a child together with a parent through the parent's account. It asks only for an optional nickname (no surname) so Buse can greet the child, and never for the child's email. Kids game progress is saved on the device and, when the parent is signed in, in the parent's account. The Kids voice call opens only after a parent or guardian agrees once on that device. The child's speech is turned into text by the browser's speech service (Google in Chrome and Edge, Apple in Safari), that text is sent to Google Gemini to create Buse's replies, and nothing is recorded or saved by us. Buse does not ask for personal details. Please use it together with your child.

8. Your rights

Under KVKK article 11 and, where it applies, the GDPR, you can ask whether we process your data, get a copy, have it corrected or deleted, object to processing, and complain to the supervisory authority (in Türkiye: KVKK Kurumu; in the EU: your local data protection authority). Write to turkishwithbuse1@gmail.com. We aim to answer within 30 days, as KVKK requires; some requests may be limited where the law requires us to keep data.

Also see: Terms of Service · Refund Policy