Privacy Policy

Data we collect

• Account: full name, email, phone (optional), an irreversible hash of your password.
• Course: which lesson you watched and for how long, your submitted practice photos and the instructor's notes.
• Order: package, amount, installments, the payment provider's transaction number. Your card number never reaches us.
• Technical: for security, IP address and login time (at most 90 days).

Why

To deliver the course, store your progress, give feedback, issue certificates, invoice and protect your account. Your data is not sold to third parties for marketing.

Who we share with

Only with the infrastructure providers that run the service, under contract: Supabase (database, authentication and video hosting, EU-Frankfurt), iyzico (payment), Vercel (hosting), Resend (email). With the competent authorities where legally required.

Retention

Account data for as long as your account exists; order records for 10 years under the Turkish Tax Procedure Law; practice photos are deleted 1 year after the course ends.

Your rights

Under Article 11 of the KVKK you can exercise your rights to access, correct, delete and object to processing of your data by writing to bilgi@kartalakademi.com. Requests are answered within 30 days at the latest. When you close your account from the dashboard, your data — except what must be retained by law — is deleted within 30 days.