This is an English courtesy translation. In case of discrepancy, the Turkish text prevails.
Data controller
Your personal data is processed by Leranis Teknoloji (Bursa, Türkiye) in its capacity as data controller, within the scope described below.
This notice applies to people who visit our website, use our mobile apps and contact us. For details specific to our apps, see theApp Privacy Policy page.
Personal data processed
App users
- Identity and contact: name, email address, profile photo
- Customer transaction: in-app progress, quiz results, streaks, habit records, subscription status
- Transaction security: account identifier, session information, device notification token
- Technical: crash logs, device model, operating system version
Website visitors and the request form
- Identity and contact: name, company name, email or phone (only when you provide them)
- Request content: the description you write about your project needs
Our website uses no advertising or analytics cookies and performs no visitor tracking. The request form on the contact page sends no data to our servers; what you write is turned into a message on your own device only, and you choose whether to send it.
Purposes of processing
- Creating accounts, verifying identity and managing accounts
- Providing the app service and preserving progress across devices
- Verifying the validity of a subscription
- Sending notifications where permission has been given
- Detecting errors, maintaining security and improving service quality
- Assessing requests and complaints, and communicating with you
- Carrying out contractual processes and fulfilling legal obligations
Legal basis
Your personal data is processed on the following legal bases set out in Article 5 of KVKK (Turkish Personal Data Protection Law No. 6698):
- md. 5/2-c — Directly related to the establishment or performance of a contract (opening an account, subscriptions)
- md. 5/2-ç — Fulfilment of a legal obligation
- md. 5/2-f — Legitimate interest, provided it does not harm your fundamental rights and freedoms (security, error detection)
- md. 5/1 — Explicit consent (permission-based operations such as sending notifications)
For operations based on explicit consent, you may withdraw your consent at any time.
Method of collection
Your data is collected electronically, by automated or partly automated means, through our mobile apps, our website and the contact you establish with us by email, phone or WhatsApp.
Transfers
Your personal data is not sold and is not shared for marketing purposes. It is shared with the following service providers, to the extent required to deliver the service:
Because these providers' servers may be located outside Türkiye, your data may be transferred abroad within the scope of Article 9 of KVKK. Transfers take place solely to provide the service and within the provider's own data protection commitments. Data may also be transferred to legally authorised public institutions upon request, to the extent required by the legislation.
Retention period
Data is retained for as long as the purpose of processing requires and for the statutory limitation periods provided by the applicable legislation. When you delete your account, your account and progress data are deleted within 30 days. Technical and crash logs are kept for at most 90 days. At the end of the period, data is deleted, destroyed or anonymised.
Your rights (KVKK md. 11)
As a data subject you have the right to:
- Learn whether your personal data is processed
- Request information about it if it has been processed
- Learn the purpose of processing and whether the data is used in line with that purpose
- Know the third parties to whom the data is transferred, in Türkiye or abroad
- Request correction if the data has been processed incompletely or inaccurately
- Request erasure or destruction within the conditions set out in the law
- Request that correction, erasure and destruction be notified to the third parties to whom the data was transferred
- Object to a result adverse to you arising from analysis carried out solely by automated systems
- Claim compensation for damage suffered as a result of unlawful processing
How to apply
You may submit requests concerning your rights, together with information establishing your identity, to [email protected]. Please state your request clearly in your application.
Depending on its nature, your request is concluded free of charge as soon as possible andwithin 30 days at the latest. Where the process entails an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged. If your application is rejected, your right to file a complaint with the Personal Data Protection Board is reserved.
For account and data deletion requests you may also follow the steps on theAccount and Data Deletion page.