Privacy Policy
EVO Education Technologies Inc. ("we," "us," or "our") operates the YDSEvo mobile application (the "App").
1. Introduction
YDSEvo is an exam preparation tool for the YDS, YÖKDİL and YDT foreign language exams. We respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines our data practices in compliance with the Turkish Personal Data Protection Law (KVKK), GDPR, and App Store/Play Store requirements.
By accessing or using the App, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
We collect data to provide, secure, and improve our services. We limit collection to what is strictly necessary.
A. Account Data (Provided by You)
When you register, we collect the following to create your unique user identity:
| Data Point | Necessity | Purpose | Legal Basis |
|---|---|---|---|
| Email Address | Required | Account recovery, login, and unique identification. | Contract Performance |
| User ID | Automatic | Internal database indexing. | Legitimate Interest |
| Authentication Data | Required | Verifying identity via Email, Apple, or Google. | Security / Contract |
| Name / Profile | Optional | Personalizing the user interface (if provided via social login). | Consent |
B. Learning & Activity Data (Generated by Use)
To function as a study aid, the App automatically generates and stores:
- Progress Data: Quiz scores, correct/incorrect answers, and topic mastery levels.
- Session Logs: Time spent on modules, study streaks, and completion rates.
- Preferences: Target scores, study goals, and notification settings.
C. Device & Technical Data (Automated)
We collect specific device metadata to ensure app stability and push notification delivery:
- Device Identifiers: Device model, OS version, and Platform (iOS/Android).
- Push Token: A unique key to send study reminders (only if permissions are granted).
- Crash Logs: Anonymized stack traces used solely for debugging crashes.
D. Subscription Data (Payment Processors)
We do not process or store credit card numbers.
All payments are handled by Apple (App Store) or Google (Play Store). We receive only a receipt token containing:
- Subscription status (Active/Expired)
- Expiration date
- Product ID (e.g., "Pro Monthly")
3. How We Use Your Data
We process your data for specific purposes under defined legal bases:
| Purpose | Description | Legal Basis |
|---|---|---|
| Service Provision | Creating accounts, saving progress, and syncing data across devices. | Contract Performance |
| Analytics | Analyzing usage trends to improve features (e.g., identifying difficult questions). | Legitimate Interest |
| Communication | Sending password resets, support replies, or policy updates. | Contract / Legal Obligation |
| Security | Preventing fraud, multiple logins, and unauthorized access. | Legitimate Interest |
| Marketing | Sending promotional offers or non-essential study tips (Opt-out available). | Explicit Consent |
4. Third-Party Data Sharing
We do not sell your data. We share data only with infrastructure providers necessary to run the App.
Infrastructure & Processors
| Category | Provider Examples | Data Shared | Purpose |
|---|---|---|---|
| Cloud Database | Supabase, AWS | Encrypted User Data | Hosting and storage |
| Authentication | Apple, Google, Supabase Auth | Email, Auth Tokens | Secure login verification |
| Analytics | PostHog, Google Analytics | Anonymized Usage Events | Improving app experience |
| Error Logging | Sentry, Crashlytics | Crash Reports | Fixing bugs |
Legal Disclosures
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
5. Data Retention & Deletion
We retain personal data only as long as your account is active or as needed to fulfill legal obligations.
Account Deletion (Right to be Forgotten)
You may delete your account at any time directly within the App:
- Navigate to Settings > Profile.
- Select Delete Account.
Upon confirmation:
- Your account is immediately deactivated.
- Your personal data (email, name) and learning history are permanently deleted from our active databases.
- Subscription auto-renewals must be cancelled by you via the App Store/Play Store settings, as we do not control billing.
6. Security
We use enterprise-grade security to protect your data:
- Encryption: Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
- Access Control: Strict Row-Level Security (RLS) ensures users can only access their own data.
- Isolation: Payment data is never routed through our servers.
7. Your Rights (GDPR & KVKK)
If you are a user in Turkey or the EEA, you have specific rights regarding your data.
Compliance with Turkish KVKK (Law No. 6698)
As the Data Controller, EVO Education Technologies Inc. ensures your rights under Article 11 of the KVKK:
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request deletion of your data ("Right to be Forgotten").
- Right to Object: Object to automated processing results that affect you negatively.
To exercise these rights, contact us at info@ydsevo.com with the subject line "KVKK Request." We will respond within 30 days as required by law.
8. International Data Transfers
Your data is processed on secure servers which may be located outside of your country of residence (e.g., EU or US regions of our cloud providers). We ensure these transfers comply with applicable laws through standard contractual clauses or adequacy decisions.
9. Children's Privacy
The App is not intended for children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect data from children. If we discover such data has been collected, we will delete it immediately.
10. Contact Us
For any privacy-related questions or complaints, please contact our Data Protection Officer:
EVO Education Technologies Inc. — Email: info@ydsevo.com