Privacy Policy
Last updated: 26 October 2026
What this notice covers
Lektiv (the "app") is a mobile app in which private tutors keep their lesson schedule, lesson records, communication with parents and their own payment ledger. This notice explains which personal data we process, for what purpose and on what legal basis, who we share it with and how you can use your rights. It is the information notice required by Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK).
Data controller
Gökçe Kantarcı (individual developer)
2091, Adliyeciler Sitesi, Ankara 06000, Türkiye
What data we process
| Who | Data | Why |
|---|---|---|
| Teacher | Name, the email address of the Google or Apple account used to sign in, subject, time zone, country and language; lesson schedule and working hours; online lesson link; logo (optional); status of the Pro subscription | To create the account and run the app |
| Teacher | Students' lesson fees, the payment ledger, the cancellation rule, private notes after a lesson and the 1–5 rating | Only for the teacher's own use; never shown to parents or students |
| Student | Name, level/grade and goal (optional); for a student without a parent (an adult), phone number and the email address of the Google or Apple account used to sign in; lesson records, topics covered, homework and the files and links attached to it, placement result | So the teacher can follow lessons and send the parent a lesson summary |
| Parent | Name, the phone number saved by the teacher, the email address of the Google or Apple account used to sign in, the link to their child, the device token for notifications; "I've paid" reports (amount and optional note) | Lesson reminders, lesson summaries, cancellation and open-slot notifications |
| Website visitor (early registration) | Email address, optional subject, version of the consent text | To let you know when the app is released |
Phone numbers and early-registration email addresses are stored encrypted in the database. Your sign-in email is kept by Supabase's sign-in service; we use no passwords or SMS codes. When a parent opens an invite, we ask only for the last 4 digits of the phone number to check that the invite reached the right person; these digits are not stored. We do not ask for national ID numbers, addresses or dates of birth. Lesson notes are not sent to any AI service.
Legal bases (KVKK Article 5)
- Entering into and performing the contract: the account, lesson schedule, reminders and lesson summaries.
- Legitimate interest: the security of the service (preventing misuse, error logs, usage statistics without personal data).
- Explicit consent: early registration on the website; the parent's consent to processing the data of a student under 18 (given when joining through the invite link).
- Legal obligation: keeping consent records and deletion records.
Who we share data with
We do not sell your data and do not use it for advertising. We use these service providers to run the service:
| Service | What for | Where |
|---|---|---|
| Supabase | Database and sign-in | European Union (Frankfurt, Germany) |
| Cloudflare | Server (API), logo and homework files, website | Global network |
| PostHog | Usage statistics without personal data (no cookies, IP not stored) | European Union (Frankfurt, Germany) |
| Sentry | Error and crash reports (phone numbers, emails and session keys removed; no user identity sent) | European Union (Frankfurt, Germany) |
| Google, Apple | Signing in with your account (Continue with Google or Apple) | USA |
| RevenueCat | Status of the Pro subscription (store purchase record; no card details) | USA |
| Expo, Google Firebase, Apple | Notifications (push) | USA |
WhatsApp reminders: on the Pro plan, the app prepares the message for a parent who does not use the app; the teacher sends it from their own phone with their own WhatsApp. We do not send this message and do not transfer any data to WhatsApp.
Transfers abroad: some of the providers above are outside Türkiye (Germany, USA). The app asks for your explicit consent to this transfer after sign-in, separately from accepting the terms. Because the app cannot work without these providers, if you want to withdraw your consent you can delete your account (see Account deletion).
How long we keep data
- App data is kept while the account is open.
- 30 days after an account deletion request, the account and related data are permanently deleted (see the Account deletion page). When a parent's or student's account is deleted, the name and phone number the teacher entered in their own records stay there; the link to the account, the consents and "I've paid" reports are deleted. A family that wants to be removed completely can ask the teacher: deleting the student also deletes their lessons, homework, reports, parent details and files.
- Records of sent notifications are deleted after 90 days.
- An early-registration email is deleted within 6 months after we announce the app's release, or when you withdraw your consent.
- Consent and deletion records are kept for the legally required period; deletion records contain no personal data.
Cookies
Our website uses no non-essential cookies. Visit and usage statistics (PostHog) run in cookieless mode; no name, phone number, email or IP address is sent.
Children
Students under 18 are added to the app only with their parent's consent and have no account of their own; the teacher enters their data and the parent sees it. A student without a parent is an adult and sees only their own lessons with their own account.
Your rights (KVKK Article 11)
You have the right to learn whether your personal data is processed, to request information about it, to learn whether it is used for its purpose, to know the third parties it is transferred to, to ask for incomplete or wrong data to be corrected, deleted or destroyed, to object, and to claim compensation for damage. You can send your request in writing to the address below; we reply within 30 days at the latest.
Contact for requests: support@lektiv.app
Early registration notice
The email address and the optional subject you enter in the early-registration form on the website are processed on the basis of your explicit consent, only to let you know when the app is released. Your email address is stored encrypted, is not shared with anyone and is not used for any other purpose. You can withdraw your consent at any time by writing to the address above.
Changes
If this notice changes, the version date is updated and the app asks for your consent again.
This is a translation of the Turkish text; if the two differ, the Turkish text applies.