This notice explains how the Wonderwhy app and the wonderwhy.net website process personal data, as required by Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles of the Obligation to Inform. It is a summary of our Privacy Policy in the order the KVKK asks for; the details are there.
Data controller
The data controller is Yiğit Özdemir (Yelkovan.ai). For anything about your data, write to info@yelkovan.ai.
Personal data we process and why
| Category | Data | Purpose |
|---|---|---|
| Identity | Name (optional), account or guest ID | Account and sign-in; counting votes once; usage limits |
| Contact | Email address; emails you send us | Account and sign-in; replying to you |
| Customer transactions | Synced lists and settings, Word list and My questions, listening progress, votes and poll answers, problem reports | Providing the service you ask for and syncing it across your devices |
| Voice recording | Spoken question (up to 15 seconds) and the sentence playing at that moment | Understanding and answering your question; the recording isn’t kept |
| Transaction security | Server logs (IP address, app and device details), daily usage counters; with Google sign-in, the approximate location Google may estimate from your IP address | Security, misuse prevention, usage limits and troubleshooting |
Where each item is stored and for how long is in the table in the Privacy Policy.
Legal bases
- Providing the service you ask for (account, sync, answering questions, votes): performing our contract with you (KVKK Art. 5(2)(c)).
- Security, misuse prevention, usage limits and logs: our legitimate interests (KVKK Art. 5(2)(f)).
- Legal obligations, where they apply (KVKK Art. 5(2)(ç)).
- Microphone and notifications: your permission, which you can withdraw in your phone’s settings. Before your first spoken question, the app tells you that your voice goes to Google’s AI and asks you to agree; nothing is recorded or sent until you do.
How we collect it
Electronically and automatically: what you enter when you create an account or sign in, what you create while using the app (lists, votes, questions) and the logs of requests to our servers. By email, if you write to us.
Who receives it
We don’t sell or share your personal data. To provide the service, these providers process it on our behalf:
- Google (Firebase, Google Cloud, the Gemini API and Google sign-in): hosting, sign-in, sync, questions and audio.
- Apple: Sign in with Apple, DeviceCheck and notifications.
- GitHub: hosts this website.
- Google Workspace: hosts our mailbox.
- OpenAI: writes the news summaries; it receives no personal data.
Our servers are in Belgium. Some of these providers process data outside Türkiye, including in the United States; these transfers rely on the mechanisms in Article 9 of the KVKK. Details: Who processes your data.
How long we keep it
Your account and what it holds stay until you delete the account. Everything else is deleted within 7 days at most. Details: How long we keep data.
Your rights under Article 11 of the KVKK
- to learn whether your personal data is processed;
- to request information about it if it is;
- to learn the purpose of processing and whether it is used for that purpose;
- to know the third parties it is transferred to in Türkiye or abroad;
- to have it corrected if it is incomplete or wrong;
- to have it deleted or destroyed under the conditions in Article 7 of the KVKK;
- to have those third parties told about a correction, deletion or destruction;
- to object to a result against you that comes only from automated analysis;
- to claim compensation if unlawful processing causes you harm.
How to apply
To use these rights, apply to us in writing or write to info@yelkovan.ai from the email address registered to your account. We may ask you to confirm that the request comes from you. We answer within 30 days at the latest, free of charge. If you aren’t satisfied with the answer, or get none in time, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).
You don’t need to apply to delete your account and data: the steps on the Delete your account page are enough.