Privacy Notice

1. Data controller

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller for personal data processed in the LinguDay service is Levon Aydınçelebi.

Address	Atakent Mah. 221. Sk. Rota Office A Blok No: 3/1 İç Kapı No: 17 Küçükçekmece / İstanbul
Email	levon@levon.com.tr
Phone	0 (212) 934 30 04

2. Data we process

Identity and contact	Name, email address; date of birth and gender (for age rules and the default avatar; never shown to other members); for community features: profile photo or avatar and short bio (only what you enter).
Account and preferences	A one-way hash of your password (the password itself is not stored), native and interface language, languages you learn, time zone, email verification status, consent records.
Learning data	Daily word sets, learned marks, completed lessons, test results, study days and streaks; points calculated from these. Unless you hide your profile, your name (first name and last initial), avatar and points are shown to other members on the leaderboard, and the languages you speak and learn are used for language-partner suggestions. You can turn this off by choosing "Hidden profile" in Account Settings.
Community content	Private messages and images shared in messages, report and block records. Images are re-processed before sending, removing location and device information (EXIF). Messages and images are shown only to the participants of the conversation, but may be reviewed by authorised administrators to prevent advertising, spam, fraud, harassment and other rule violations (also without a report). Administrators' conversation reviews are logged; message content is not used for any other purpose or shared with third parties.
Payment and invoicing	Package, amount, payment date and result, invoicing name, address and (where required) tax/ID number. Your card details are not stored on our servers; payment is taken on the secure page of the licensed payment institution PayTR.
Security	IP address, login and action times, failed login attempts, session cookie, browser information and system logs.

3. Purposes and legal bases

Creating the account, providing the Service, saving progress, running community features	Performance of a contract (KVKK art. 5/2-c)
Selling memberships, payment, invoicing and accounting	Performance of a contract; legal obligation (art. 5/2-ç)
Password reset, email verification, account and membership notices, system announcements	Performance of a contract
Security, preventing abuse and fraud, enforcing community rules (including reviewing messages and images for advertising, spam and harassment), handling reports	Legitimate interest (art. 5/2-f); legal obligation
Keeping access logs and responding to authorities	Legal obligation (Law No. 5651 and related legislation)
Aggregated, non-identifying usage statistics to improve the Service	Legitimate interest
Emails about new features, announcements and offers	Explicit consent / commercial message consent (Law No. 6563). Optional and can be withdrawn any time in Account Settings.

4. Transfers

We do not sell or rent personal data. It may be shared only as needed for the purposes above with: the payment institution (PayTR); the accounting and e-invoice service (Paraşüt); hosting and email delivery providers; our accountant, lawyers and auditors; and public authorities and courts where required by law.

Transfer abroad: the Service's servers are hosted by a provider in Almanya, so your data is stored outside Türkiye. Transfers are made with the safeguards required by KVKK art. 9 (standard contract and appropriate technical and organisational measures). No personal data is sent to the speech service (Microsoft Azure) used to voice lesson texts; only lesson content is sent.

5. Retention

• Account and learning data: while the account is open; deleted or anonymised within 30 days after the account is closed.
• Message and image content: while the account is open; removed content and content of closed accounts is kept for at most 6 months for reports and legal procedures, then deleted.
• Payment and invoice records: 10 years under tax and commercial law.
• Access and security logs: 2 years.
• Consent records: 3 years after the relationship ends, as evidence.

6. Security

Passwords are stored as one-way hashes, connections are encrypted (HTTPS), admin access is restricted and sensitive settings are encrypted. No system is completely risk-free, but we take reasonable technical and organisational measures to protect your data.

7. Children

Children under 13 may not use the Service. Users aged 13–18 may use it with parental consent; private messaging is disabled for them. Accounts found to belong to children under 13 are closed and their data deleted.

8. Your rights (KVKK art. 11)

You may ask whether your data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties it is transferred to in Türkiye or abroad; request correction of incomplete or inaccurate data and deletion or destruction under legal conditions; request that these actions be notified to third parties; object to a result against you arising solely from automated analysis; and claim compensation for damage caused by unlawful processing.

9. How to apply

Send your request with information that lets us verify your identity, from the email address registered to your account, to levon@levon.com.tr, or in writing to the address above. Requests are answered free of charge within 30 days at the latest. If your request is rejected or you find the answer insufficient, you may complain to the Personal Data Protection Board (KVKK).

10. Cookies

The cookies we use are described in the Cookie Policy.

11. Changes

This notice may be updated; the current text is published on this page and you will be informed at your next login of material changes.