Data Controller
The data controller under Turkish Law No. 6698 is Yunus Emre Erkesikbaş at Yunus Emre Erkesikbaş, Mustafa Sabri Küçükaşçı Avenue No: 28/B, Karatay/Konya, Türkiye, [email protected]. This notice explains personal-data processing in the PuhuKoç web application. The Turkish version is binding.
Data We Process
PuhuKoç may process account and contact data, membership and security records, exam goals, study plans and sessions, mock-exam results, mood check-ins, uploaded media, notebook and vision-board content, AI-coach conversations, community activity, human-coaching links and progress signals, subscription and payment references, and device or technical logs. Card details are processed by iyzico and are not stored by PuhuKoç. No date of birth is collected; signup records only a self-declaration that the user is at least 13.
Purposes and Legal Grounds
Data is used to create and secure accounts, perform the service contract, provide study and coaching features, process subscriptions and support, prevent abuse, comply with legal duties, and establish or defend rights. Optional analytics, AI memory, or another consent-based feature uses a separate choice; this notice is not consent.
Providers and International Transfers
Necessary data may be shared, in a purpose-limited way, with Render (application hosting), Neon, Cloudflare, Resend, iyzico, Sentry, Google, OpenAI, and Gemini. AI requests use data-minimised summaries where possible and intentionally exclude payment and direct identity details. International-transfer requirements under applicable Turkish law are followed when a provider operates abroad.
Retention, Security and Your Rights
Eligible anonymous and Free visitors in Turkey may automatically see one non-personalized Google ad at the end of a blog article. Premium and STAFF stay ad-free. Analytics choices do not change ad delivery; Google Analytics loads only after separate acceptance. Personalized ads and behavioral targeting are disabled. Google may use IP addresses for delivery and, when programmatic limited ads are enabled, cookies and local storage for invalid traffic and abuse detection, with processing abroad. See Google's data-use explanation. The stricter child/teen protection of the profile and article is applied; profiles, exam results and AI conversations are not sent to the ad provider. Analytics choices can be changed in cookie preferences; rejecting analytics does not remove ads.
Data is retained only for the service, security, legal duty, or dispute period that requires it. Account deletion removes or anonymises profile data and behavioural free text, while limited payment, security, dispute, and append-only ledger records may remain where legally necessary. You may exercise the rights listed in Article 11 of Law No. 6698 by writing to [email protected] or the postal address above.
Waitlist
We use the email address you enter on the waitlist only to let you know when PuhuKoç opens and your invitation is ready. This record is deleted when you sign up. If you do not sign up, it is deleted automatically 6 months after the date you joined the list, or 6 months after the date you were invited if you were invited.