Privacy Policy
Last updated: January 1, 2026
We process your personal data in accordance with Law No. 6698 on the Protection of Personal Data (KVKK) and in compliance with the regulations of the Ministry of National Education.
Collected Data
Account and Identity Info
- Name Surname
- Email Address
- School and class info
- User role (teacher, student, parent)
Learning and Activity Data
- Word mastery levels and progress records
- Game results and score history
- Session durations and activity timestamps
- Learning parameters for FSRS algorithm
Technical Data
- IP address (for security and service quality)
- Device type and browser info
- Session cookies
Parental consent is required for collecting data from children under 13. These consent records are stored in accordance with KVKK.
Data Usage
Education Service
- Personalized word learning plan creation
- FSRS algorithm with smart repeat scheduling
- AI-supported story and content production
- Personalized game experience
Progress Tracking and Reporting
- Student development reports for teachers
- Data processing for parent information panel
- Class-wide analytics and comparative reports
Teacher-Parent Communication
- In-app notifications and messages
- Automatic weekly progress summaries
- Teacher alerts for at-risk students
Platform Improvement
- Anonymous and aggregate usage analytics for UX improvement
- Error detection and security monitoring
- New feature prioritization
Your data is never sold or used for commercial advertising purposes.
Child Privacy
Legal Basis
- Protection of Special Personal Data under Law 6698 Article 6
- Parental Consent for Children's Data
- MEB Distance Education Regulations
Under 13 Protection
- Parental approval form is required for under 13 students
- Approval documents are stored and auditable in encrypted form
- Parent can revoke approval at any time; data is deleted within 30 days
- No sensitive data like profile picture or real name is collected
Child-Friendly Design
- No ads or redirecting content is shown to children
- Social features are class-only and teacher-supervised
- Profiles can be anonymized (play with username only)
WordMatik prioritizes child privacy. For concerns, email [email protected]
Data Security
Encryption and Transfer Security
- AES-256 encryption for data at rest
- TLS 1.3 encryption for all data transfers
- Encrypted backups at database level
- Passwords are hashed with bcrypt; no plain text storage
Access Control
- Role-based access control (RBAC)
- Student data is only open to the relevant teacher and parent
- Internal staff access is limited to the least privilege principle
- All data access is tracked with log records
Security Audits
- Regular penetration tests and security scans
- Independent security audits (at least once a year)
- Vulnerability disclosure program (responsible disclosure policy)
No personal data is shared or sold with third parties. Service subprocessors (such as cloud infrastructure) are bound by a data processing agreement under KVKK.
Your Rights (KVKK Article 11)
Your Rights
- Right to access — Right to learn the data processed about you
- Right to rectification — Request to correct incorrect or incomplete data
- Right to erasure — Request to delete data under the 'right to be forgotten'
- Right to portability — Receive your data in machine-readable format
- Right to object — Object to the processing of your data for certain purposes
- Right to restriction — Request to stop data processing under certain conditions
Rights Exercise Process
- Send an email to [email protected] for your request
- Requests are responded to within 30 days after identity verification
- Response is free; fee may apply for unreasonable repeat requests
You have the right to complain to the Personal Data Protection Authority (KVKK). You can visit kvkk.gov.tr for application.
Cookies
Types of Cookies We Use
- Session cookies — to maintain your login status (required)
- Security cookies — for CSRF protection and session security (required)
- Performance cookies — anonymous error reporting and app performance
- Functional cookies — to remember language preference and interface settings
Cookies We Do Not Use
- Advertising and retargeting cookies ARE NOT USED
- Third-party tracking pixels ARE NOT USED
- Social media cookies ARE NOT USED
- Behavioral profiling cookies ARE NOT USED
Required cookies are necessary for the service to function and cannot be disabled. You can manage other cookies through your browser settings.
Contact
Data Protection Officer
- Email: [email protected]
- Response time: Within 48 hours on weekdays
- Language: Turkish or English
Address
- WordMatik Education Technologies
- Istanbul, Turkey
- Local platform
privacy.sections.contact.note
Compliance Statement
WordMatik is designed to be compatible with the Turkish Ministry of Education's distance education and education technology policies. Student privacy and child protection principles are our top priority. The platform is operated by a company based in Turkey, subject to Turkish law.
Privacy Questions