Privacy Policy

1. Introduction

Tilki Öğretmen ("We", "Our", "Platform") is a management platform developed for private tutoring teachers. This Privacy Policy provides information about how personal data is collected, used, stored, and protected within the scope of services we provide through tilki.app and related subdomains.

By accepting this policy, you consent to the processing of your data within the scope of this policy. We also recommend reviewing our Terms of Service.

2. Information Collected

2.1. Directly Collected Information

• Contact Information: First name, last name, email address, phone number
• Account Information: Google account authentication information (via Firebase Authentication)
• Student Information: Student name, grade level, course information, lesson fees (solely for service provision)
• Parent/Guardian Information: Parent/guardian name, phone number, notification preferences (for WhatsApp notifications)
• Lesson and Schedule Information: Lesson calendar, routine schedules, lesson statuses, teacher notes
• Payment Information: Payment history, balance information (for financial transactions). Credit card information is processed by Paddle and is not stored in our systems
• Communication Content: Communications you make with us (emails, messages)

2.2. Automatically Collected Information

• Device Information: IP address, browser type, operating system, device information
• Usage Data: Platform usage statistics, page views, click data
• Product Analytics (PostHog): User interactions, feature usage statistics, session data, performance metrics (detailed below)
• Cookies: Session management, user preferences, analytics data
• Meta Pixel Data: Data collected for Facebook/Meta advertising platform (detailed below)

3. Purpose of Data Usage

Your collected personal data is used for the following purposes:

• Providing and managing platform services
• Performing student and lesson management operations
• Processing and tracking payment transactions
• Providing customer support and communication services
• Platform improvements and development of new features
• Implementing security measures and preventing fraud
• Fulfilling legal obligations
• Marketing and advertising activities (detailed below)

4. Meta Pixel and Facebook/Meta Data Usage

Our platform is integrated with the Facebook/Meta advertising platform. In this context:

4.1. Meta Pixel Usage

Meta Pixel (Facebook Pixel) is used on our website. This technology enables us to deliver more effective advertisements through the Facebook/Meta advertising platform and measure advertising performance.

4.2. Meta Pixel Data Collected

• PageView: Which pages you visit
• ButtonClick: Which buttons you click
• ScrollDepth: Page scroll depth (25%, 50%, 75%, 100%)
• ViewContent: Which content you view
• Lead: Demo bookings and form submissions
• Device Information: IP address, browser type, operating system

4.3. Use of Meta Pixel Data

Data collected through Meta Pixel is:

• Used to measure and optimize advertising performance
• Used to show you personalized advertisements (retargeting)
• Used to track advertising conversions
• Shared with the Facebook/Meta advertising platform

4.4. Facebook/Meta Data Policy

Meta Pixel data is subject to Facebook/Meta's data policy. For more information about Facebook/Meta's data usage: Facebook Data Policy

4.5. Opting Out of Meta Pixel

If you wish to opt out of Meta Pixel usage:

• From your Facebook account: Facebook Ad Settings
• You can disable browser cookies (however, this may affect platform functionality)

5. PostHog Product Analytics

Our platform uses the PostHog analytics platform for product development and improving user experience.

5.1. PostHog Data Collected

• Usage Events: Page views, feature usage, button clicks
• Session Data: Session duration, usage frequency, active user metrics
• Performance Data: Page load times, error rates
• Device Information: Browser type, operating system, screen resolution

5.2. Use of PostHog Data

Data collected through PostHog is used for:

• Analyzing platform feature usage
• Improving user experience and identifying errors
• Supporting new feature development decisions
• Monitoring general usage statistics and trends

PostHog data is not used for advertising or marketing purposes. Data is processed solely for product development and user experience improvement.

5.3. PostHog Data Policy

PostHog data is subject to PostHog's data policy. For more information: PostHog Privacy Policy

6. Cookies

Our platform uses cookies to improve service quality and enhance user experience.

6.1. Types of Cookies Used

• Essential Cookies: Required for platform functionality (session management, security)
• Analytics Cookies: For usage statistics and platform improvements
• Marketing Cookies: For Meta Pixel and advertising platforms
• Preference Cookies: To remember user preferences

6.2. Cookie Management

You can manage or disable cookies through your browser settings. However, since some cookies are required for platform functionality, disabling cookies may affect your use of the platform.

7. Data Sharing

Your personal data may be shared with third parties in the following circumstances:

• Paddle (Payment Processing): Payment information is shared with Paddle for subscription management, payment processing, and billing
• WhatsApp Business API (Meta): Parent/guardian phone numbers are shared with WhatsApp API to send notifications
• PostHog (Product Analytics): Usage data and interaction metrics are shared with PostHog
• Meta/Facebook (Advertising): Meta Pixel data is shared with the advertising platform
• Google (Calendar and Meetings): Lesson calendar data is synchronized with Google Calendar and Google Meet
• Zoom: Integration is provided with Zoom API to create online lesson links
• OpenRouter (AI Processing): Lesson data and teacher messages are processed through third-party language models via OpenRouter for AI assistant features on the platform
• Firebase/Google Cloud: For platform infrastructure and database services
• Legal Requirements: To fulfill legal obligations
• Security: To prevent security threats and detect fraud
• Business Transfers: In the event of business mergers, acquisitions, or asset transfers

8. Data Security

We implement industry-standard security measures to ensure the security of your personal data:

• SSL/TLS encryption for data transmission
• Secure database storage and access controls (Firebase/Google Cloud infrastructure)
• Regular application of security updates
• Unauthorized access prevention systems
• Google OAuth authentication - no passwords are stored on our platform
• Secure storage of third-party integration tokens (Google Calendar, Zoom)

However, no method of Internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security, but we take reasonable commercial precautions.

9. Data Retention Period

Your personal data is retained for the following periods:

• Active Account: As long as your account is active
• Account Closure: 30 days after account closure (for legal obligations)
• Legal Requirements: Longer periods when required by legal retention periods
• Meta Pixel Data: Subject to Facebook/Meta's data retention policy

10. Your Rights (KVKK/GDPR)

Under the Personal Data Protection Law (KVKK) and General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Object: Object to data processing
• Data Portability: Request transfer of your data to another platform
• Restriction of Processing: Request restriction of data processing

To exercise these rights, you can send an email to: mehmet@tilki.app

11. Children's Privacy

Our platform does not knowingly collect personal data from children under 18 years of age. If we discover that we have collected personal data from a child under 18, we will delete such data immediately. If you are a parent or guardian and believe that your child's data has been collected, please contact us.

12. Third-Party Links

Our platform may contain links to third-party websites or services. The privacy practices of these third-party sites are beyond our control. When you visit these sites, we recommend reviewing their own privacy policies.

13. Privacy Policy Changes

This Privacy Policy may be updated from time to time. When significant changes are made, we will notify you via email or through the platform. Your continued use of the platform after changes take effect means you accept the updated policy.

14. Data Deletion and Access Instructions

14.1. Data Access Request

To request access to your personal data:

1. Send an email: Send an email with the subject "Data Access Request" to mehmet@tilki.app
2. Identity verification: Send from the email address associated with your account
3. Response time: Your request will be responded to within 30 days
4. Data format: Your data will be provided in machine-readable format (JSON/CSV)

14.2. Data Deletion Request

To request deletion of your personal data:

1. Send an email: Send an email with the subject "Data Deletion Request" to mehmet@tilki.app
2. Identity verification: Send from the email address associated with your account
3. Deletion process: Your data will be permanently deleted within 30 days
4. Legal exceptions: Some data may continue to be retained when required by legal retention obligations
5. Confirmation: You will be notified via email when the deletion process is completed

14.3. Deletion of Meta Pixel Data

To delete data collected through Meta Pixel:

• Follow the data deletion request process above
• Meta Pixel data is stored on the Facebook/Meta platform; you may need to follow Facebook's data deletion process for these data as well
• From your Facebook account: Facebook Data Settings

15. Contact

If you have questions, concerns about our privacy policy, or wish to exercise your rights, please contact us:

16. Effective Date

This Privacy Policy was updated on February 17, 2026. By using the platform, you confirm that you have read and accept this policy and our Terms of Service.