Privacy Policy

Last updated: 11 October 2026

On this page
  1. 1. Controller and contact
  2. 2. Data we process
  3. 3. Legal bases
  4. 4. Service providers
  5. 5. Retention
  6. 6. Deleting your account and data
  7. 7. Your rights
  8. 8. Security
  9. 9. Children
  10. 10. Changes

This policy explains how your personal data is processed when you use Dil Defteri (listed on the App Store as “Word Notebook”) on Android and iOS. It covers the information required under Turkey’s Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR). If the Turkish and English versions differ, the Turkish version prevails.

In short: we don’t sell your data. We only process what we need to run your account, store your notebooks and progress across devices, keep the app stable and — unless you have Pro — show ads. You can delete your account from inside the app at any time.

1. Controller and contact

The controller is Premium Yazılım, the developer and publisher of Dil Defteri. For any question or request about this policy or your data: destek@dildefteri.com

2. Data we process

DataExamplesPurpose
Account dataName, email address, user ID; if you sign in with Google, your Google account name and email; if you sign in with Apple, the name and email Apple shares (or Apple’s relay address if you choose to hide your email). Your password is never stored by us — Firebase Authentication keeps only a hash.Sign-up, sign-in, password reset
Your contentNotebooks, words, meanings, example sentences, practice results and history, course progress, native and app language preferencesThe service itself: storing and syncing your content across devices
Usage dataIn-app events such as screens opened and sessions completed; device model, OS version, app version, approximate countryImproving the app (Firebase Analytics)
Crash and diagnostics dataCrash reports, device state at the time of an errorFinding and fixing bugs (Firebase Crashlytics)
Advertising dataAdvertising ID, IP address, device information, ad interactionsShowing ads to non-Pro users and preventing ad fraud (Google AdMob)
Purchase dataPro purchase status, store transaction ID, your user IDLinking Pro to your account and restoring it (RevenueCat). We never see your card details; payments are handled by Google Play or the App Store.

Reminder notifications are scheduled locally on your device. Words are read aloud by your device’s text-to-speech engine. We do not access your location, contacts, camera, microphone or photos.

3. Legal bases

  • Performance of a contract (KVKK Art. 5/2-c, GDPR Art. 6(1)(b)): account data, your content and purchase data.
  • Legitimate interests (KVKK Art. 5/2-f, GDPR Art. 6(1)(f)): app security, crash and diagnostics data, basic usage statistics.
  • Consent (KVKK Art. 5/1, GDPR Art. 6(1)(a)): personalised ads. In the EEA, UK and Switzerland a consent dialog is shown on first launch; if you decline, only non-personalised ads are shown. You can withdraw consent at any time.
  • Legal obligation (KVKK Art. 5/2-ç): records we are legally required to keep.

4. Service providers

Your data is shared only with the providers we use to run the service, under their own privacy commitments:

  • Google (Firebase Authentication, Cloud Firestore, Analytics, Crashlytics, Remote Config, AdMob) — your content is stored in Google Cloud data centres in Europe (multi-region “eur3”). Google Privacy Policy
  • RevenueCat — purchase validation. RevenueCat Privacy Policy
  • Apple (Sign in with Apple) — authentication if you sign in with Apple on iPhone. When you delete your account, the link between your Apple ID and our app is also revoked. Apple Privacy Policy
  • Google Play and the Apple App Store — payments and distribution, under their own policies.
  • Cloudflare Web Analytics (dildefteri.com only) — aggregate visit statistics for the website: pages viewed, referring site, country, browser and device type, page speed. No cookies or browser storage are used, visitors are not tracked individually and no profiles are built. Cloudflare Privacy Policy

These providers may process data outside Turkey, for example in the EU and the US. International transfers rely on the safeguards required by KVKK Art. 9 and the GDPR (such as standard contractual clauses). We never sell your data to third parties.

5. Retention

  • Account and content: for as long as your account exists. When you delete your account, your data is removed from the live database (completed within 30 days at the latest) and drops out of backups, which are kept for at most 14 days.
  • Usage data (Analytics): up to 14 months.
  • Crash data (Crashlytics): up to 90 days.
  • Store links on the website: when someone taps a dildefteri.com/indir/… or /go/… link, our server records only the link, the time, the store it redirects to and a coarse device type (iPhone, Android, computer or automated crawler/bot); no IP address, browser details or cookies are stored. These records are used to count which channel brings downloads and are deleted after 30 days.
  • Purchase records: kept by the stores and RevenueCat for as long as tax and other laws require.

6. Deleting your account and data

In the app, go to Profile → Delete Account and confirm with your password to permanently delete your account and all your content. If you can’t access the app, follow the steps on the account deletion page.

7. Your rights

Under KVKK Art. 11 and the GDPR you have the right to know whether your data is processed, to access and obtain a copy, to rectification, erasure, restriction, objection and portability, and to withdraw consent. Send requests to destek@dildefteri.com; we reply within 30 days. You may also lodge a complaint with the Turkish Personal Data Protection Authority or the data protection authority in your country.

8. Security

Data is encrypted in transit with TLS. Database access is restricted by security rules so that each user can only read and write their own data. No system is perfect; if a breach occurs we will notify you and the relevant authorities as required by law.

9. Children

Dil Defteri is not directed at children under 13 and we do not knowingly collect data from them. If you believe your child has given us data, contact us and we will delete it.

10. Changes

We may update this policy. Significant changes will be announced in the app or on this page; the date at the top shows the latest revision.