Introduction
This Privacy Policy explains how IYN Education and Consultancy ('IYN', 'we') collects, uses and protects your personal data within the scope of the educational services we provide. This document was reviewed on April 27, 2026, takes effect on May 1, 2026, and is reviewed annually.
The policy has been prepared within the framework of Law No. 6698 on the Protection of Personal Data (KVKK) and related secondary legislation. By continuing to use our services you agree to this policy.
Data We Collect
We collect the following categories of personal data so that we can provide our services:
Account information
- First name, last name
- Email address
- Phone number (optional)
- Password (hashed, never stored as plain text)
Academic data
- Exam results (mock and official)
- Mock exam answers and timing data
- Progress data (completed lessons, study durations)
Automatically collected
- IP address
- Browser information (User-Agent)
- Usage analytics (page views, session duration)
Academic data of students under 18 is shared with their legal guardians. Accounts cannot be created without parental consent.
How We Use Data
We process the data we collect only for the following purposes:
- Account creation and verification — sign-in, identity verification, invitation links.
- Provision of educational services — programs, exams, progress reports.
- Personalised recommendations — program and exam suggestions based on academic history.
- Compliance with legal obligations — mandatory records under KVKK and related legislation.
- Improvement of our services — anonymous, aggregated analysis for product improvement (no personally identifiable data is used).
We never sell, share or use your data for marketing purposes with third-party advertisers.
Who We Share With
Your data is shared in the following limited circumstances:
- Our service providers — AWS (server infrastructure), DigitalOcean (storage), Resend (transactional email). Only the minimum data required to provide the service is shared.
- Legal authorities — upon court order or legal obligation, within the framework of KVKK and related legislation.
- Parents (for users under 18) — the student's academic progress is shared with their legal guardian.
We have GDPR- and KVKK-compliant Data Processing Agreements with all our service providers, and your data is held within the borders of the European Union or Turkey.
Cookies and Similar Technologies
The IYN website and application use essential cookies to manage your session and preferences. In addition, preference cookies are used for anonymous usage analytics.
For detailed information about our use of cookies, see our Cookie Policy page.
Retention Period
Your personal data is retained for the following periods:
At the end of the retention period your data is securely deleted or anonymised.
Your Rights (KVKK)
Under article 11 of KVKK you have the following rights:
- To learn whether your data is being processed
- To access your data and request a copy
- To request the correction of incorrect or incomplete data
- To request deletion (the right to be forgotten)
- To request that third parties be notified of corrections or deletions
- To object to processing and to automated decision-making
To exercise your rights, send a written request to [email protected]. We will respond within 30 days at the latest.
Contact
For questions about this policy you can reach our Data Protection Officer:
Changes to our policy are reflected on this page; for material changes we send a notification to your registered email address.