PIRIL Campus KVKK Information Notice
Last updated: 2026-11-02 Effective upon publication.
This Information Notice has been prepared to inform data subjects under Turkish Personal Data Protection Law No. 6698 (the “KVKK”) regarding the pirilkampus.com domain and PIRIL Campus products and services (website, mobile applications, support channels and related services, together the “Services”) operated by Ali'nin Tasarım Fabrikası Ltd. Şti. (the “Company”).
1) Data Controller Information
- Company name: Ali'nin Tasarım Fabrikası Ltd. Şti.
- Address: İşçi Blokları Mah. Muhsin Yazıcıoğlu Cad. No:43/1 Çankaya/ANKARA
- MERSİS:
- Email: [email protected]
- Telephone: 0312 285 27 10
2) Methods of Collecting Personal Data and Legal Grounds
Collection Methods:
- The Android and iOS apps and Google/Apple sign-in provide account, profile, preference and learning data.
- Google Play and the App Store provide verified subscription and purchase status; card details are not collected by this website.
- Device and security services provide session, notification and abuse-prevention data needed for the service.
- Support messages and legal requests are provided directly by you through the available support channels.
Legal Grounds (KVKK Articles 5/2 and 6):
- Contract performance: parent account, child profile, learning access and subscription verification.
- Legal obligation: required purchase, accounting and data-rights records.
- Legitimate interests: account security, abuse prevention and technical reliability, subject to the required balancing test.
- Consent or another applicable legal basis: optional notifications and AI-assistant processing where required; consent can be withdrawn.
3) Categories of Personal Data Processed
- Parent account: email, verification, Google/Apple identity links, selected country and language.
- Child profiles: name or nickname, age, optional gender, avatar and parent relationship.
- Use and learning: device/session and security records, scene and game progress, points, saved state and video viewing progress.
- Store and subscription: Google Play or App Store purchase and subscription identifiers, product, validity, renewal and transaction records; the store processes card data.
- Support and preferences: messages provided to support, notification preferences, country/language settings and parental consent records.
- AI assistant, if used: the submitted message is processed to provide an answer; limited consent and safety records may be kept.
Children's data: Processed solely for educational purposes, not used for sales/marketing. Transactions for those under 18 require parent/guardian approval; explicit parental consent is essential for those under 13.
4) Processing Purposes
- Providing the Services and managing membership/subscriptions
- Personalizing the educational experience and tracking progress
- Payments, invoicing and accounting
- Security, fraud/multiple-account detection and prevention of misuse
- Debugging, performance measurement and product development
- Mandatory notifications and customer support
- Marketing/communication activities with explicit consent
5) Recipients of Transfers and Purposes
- Service providers: hosting, identity verification, notification delivery and support, limited to the service they provide.
- Google Play and the App Store: purchase, subscription and refund information needed to verify access and manage transactions.
- Authorized public bodies: only where a legal obligation or valid request applies.
- International transfers: only when a lawful transfer mechanism under KVKK article 9 applies.
6) Retention Periods and Deletion/Destruction/Anonymization
- After account deletion, access is closed. Account, profile and learning data are erased or anonymized according to applicable law and the data retention policy.
- Purchase, accounting, fraud-prevention and audit records required by law are kept only for the applicable legal period, with restricted access.
- Support messages and consent records are kept only as long as needed for their purpose or a legal obligation.
- Backup copies follow the same deletion process; anonymous aggregate statistics no longer identify an account.
At the end of the period, data is securely deleted, destroyed or anonymized.
7) Cookies, SDKs and Device Permissions
- The website uses local browser storage for language preference, without advertising or analytics cookies.
- The app uses essential session and encrypted local progress storage to operate the service.
- Push notification permission is requested by the device and may be changed in device settings.
- Camera, microphone and advertising tracking are not described as required app permissions in this notice.
8) Data Subject Rights and Applications (KVKK Article 11)
Your Rights:
- To learn whether your personal data is processed,
- To request information if your data has been processed,
- To learn the purpose of processing and whether the data is used in accordance with that purpose,
- To know the third parties to whom data is transferred domestically/internationally,
- To request correction if data is processed incompletely/incorrectly,
- To request deletion/destruction pursuant to the KVKK and relevant legislation,
- To request that these actions be notified to third parties to whom the data was transferred,
- To object to an outcome against you resulting from analysis exclusively by automated systems,
- To claim compensation if you suffer damage.
Application: Email: [email protected] Post: İşçi Blokları Mah. Muhsin Yazıcıoğlu Cad. No:43/1 Çankaya/ANKARA Applications are resolved within 30 days at the latest. If the request incurs additional costs, the fee specified in the Board's tariff may be charged.
