Privacy Policy

Last updated: 1 October 2026

This policy explains what personal data ANADOLOGIC Hardware Academy (https://www.anadologic.com/academy (opens in a new tab)) collects and why. It also covers who can see your data and what rights you have. It is our information notice under Article 10 of Türkiye's Personal Data Protection Law No. 6698 (KVKK). Where the EU General Data Protection Regulation (GDPR) applies to you, it also gives the information that GDPR Articles 13 and 14 require.

Your use of the Academy is also governed by our Terms of Service (https://www.anadologic.com/academy/terms (opens in a new tab)).

This notice is in English, like the rest of the site. If you would like it in Turkish, email info@anadologic.com and we will send you a Turkish translation. If the two differ, the English version applies, unless mandatory law requires otherwise.

1. Who we are

The data controller is the company that decides why and how your data is used:

Company: ANADOLOGIC MÜHENDİSLİK ARGE SANAYİ VE TİCARET ANONİM ŞİRKETİ
Registered address: Ostim OSB, Cevat Dündar Cd. No:1/1 İç Kapı No:67, 06374 Yenimahalle/Ankara
Trade registry number: 513007 (Ankara Chamber of Commerce / Ankara Ticaret Odası)
Representative in the EU (GDPR Article 27): not appointed. This site is not directed at people in the European Economic Area (EEA), Switzerland or the UK, and AI grading may not be used from there (section 3).
Data protection officer (DPO): we have not appointed a data protection officer. Send privacy questions to info@anadologic.com.
Contact for privacy questions: info@anadologic.com

2. What we collect, and when

We collect data in two ways:

from you, through the sign-up form, the answer boxes and, if you use it, the "Dispute this grade" form
automatically, when your browser talks to our website

We do not currently offer sign-in with LinkedIn or any other outside account. If we add it, we will update this policy first (section 10).

Data	When	Why	Legal basis
Email address, full name, password	When you sign up	To create your account and let you sign in. Your name and email are stored in your sign-in account, your profile and your leaderboard record. If we have no name for you, we use the part of your email address before the @ as your display name. Your password goes straight from your browser to our sign-in provider, Supabase. Supabase stores only a one-way hash of it (bcrypt), and we cannot read it.	Contract
Sign-up confirmation: that you ticked "I am 18 or older, I agree to the Terms of Service and I have read the Privacy Policy", when you ticked it, and which versions of the Terms and of this policy it was	When you sign up	To show that you accepted the Terms and were told about this policy before your account was created. Kept with your sign-in account until the account is deleted.	Contract (accepting the Terms); legal obligation (to show that we informed you)
Email address for service emails	When you ask to reset your password, or when we must send an important notice	To let you reset your password, and to tell you about important changes to your account, the Terms or the Academy	Contract; legal obligation
Account timestamps: account creation, first sign-in, last sign-in	At sign-up and on every sign-in	Account management and admin overview	Contract; legitimate interest in running the service
Sign-in and session records: when you signed in, and your IP address and browser details for each sign-in and session refresh	On every sign-in and while you stay signed in	Keeping your account secure and your session working	Legitimate interest (security) and contract
Your role: member or admin	At sign-up	Controls who can use admin pages	Contract; legitimate interest (protecting admin functions from misuse)
Your answer text (up to 2,000 characters)	Each time you submit an answer for grading	We send it to Google Gemini to grade it (see section 3). We do not save it in our database. If you choose to dispute the grade, the answer is also emailed to our team (see "Grade disputes" in this table).	See "Legal basis for sharing with Google" in section 3
Result of each answer: question ID, track, whether it was a curriculum or an AI practice question, verdict (correct / partially correct / needs revision), score (0, 50 or 100), number of attempts, dates. Not your answer text.	Each time an answer of yours is graded	To give you XP and keep your progress across devices	Contract
Your totals: total XP, XP and completed questions per track, accuracy % (curriculum questions only), last activity time	Updated after each graded answer	Dashboard progress and the members' leaderboard	Dashboard: contract. Leaderboard: see the next row.
Leaderboard entry: your shortened name; an ADMIN label for admin accounts (every entry's role, member or admin, is in the page data); your rank; total XP; XP and completed questions, per track and in total; accuracy %; last activity as a relative time (or when you joined); your internal member ID in the page data (not shown as text)	Created when you sign up, even before you answer a question. Shown to other signed-in members only while you are in the top 10 of a ranking (section 4). Updated after each graded answer.	A ranking among members that motivates learners (section 4)	Legitimate interest. Our interest is to motivate learners through a ranking among members. To protect your interests, we shorten names, never show email addresses and show only learning figures. There is no button yet to leave the leaderboard; section 4 explains what you can do instead.
Review schedule: which curriculum questions you should see again, when, and how many reviews you have passed	When you answer a curriculum question correctly, and each time you answer a review	Spaced-repetition reviews in the app	Contract
Practice question history: the text of the AI practice questions you were shown	Each time you get an AI "Random" practice question	So you do not get the same practice question twice. Also, if you dispute a grade on a practice question, the dispute shows the question you were asked.	Contract
Your practice question history, sent to Google (up to 40 earlier practice questions from the same track, with no name or ID)	Each time you ask for an AI practice question	So Google's AI does not generate a question you have already seen	See "Legal basis for sharing with Google" in section 3
Grade disputes (only if you send one). The email contains: your answer as it was graded; the grade, feedback, model answer and missing concepts you were shown; your comment (10 to 1,000 characters); the question ID, track and question text; whether it was a module, review or practice question; your member ID; the name stored in your account (the full name you gave at sign-up, not the shortened leaderboard form, or the part of your email before the @ if we have no name); our record of your result for that question (best grade, number of graded attempts, when it was last graded); our grading guide for the question; the time you sent it; and a reference code. Not your email address or IP address.	When you press "Send dispute" under a "partially correct" or "needs revision" grade	So a person can check the grade and fix the question, its grading guide or its model answer. Sent as one email from our Gmail account to the same account (section 5). Not saved in our database.	Your consent, given when you press "Send dispute" (GDPR Art. 6(1)(a); explicit consent under KVKK Art. 5(1)). You can withdraw it at any time: email info@anadologic.com with the dispute reference and we will delete the email. Withdrawing does not affect what was done before.
Dispute block list (only if we block you): your member ID, in a server setting	Only if you misuse the dispute form	To stop you sending more disputes	Legitimate interest (preventing abuse)
Usage counters. Stored: your member ID (for grading and grade disputes) or your account ID (for AI practice questions), the day, and a count. For grade disputes, the counter also names the question you disputed. In server memory only: your member ID with a per-minute count for grading, and your account ID with a per-minute count for AI practice questions.	Each answer you submit for grading (it counts even if grading then fails), each AI practice question we try to generate for you, and each grade dispute you try to send (it counts even if sending fails)	Daily and per-minute limits that protect our AI quota and our mailbox	Legitimate interest (preventing abuse)
IP address (in memory only)	Each answer submission from a signed-in account that has no member record. For members, the limit uses the member ID instead. Answers from visitors who are not signed in are refused before this limit.	Per-minute limit on submissions	Legitimate interest (preventing abuse)
IP address (stored, rare case)	Only if you are signed in but your member record could not be created	Daily limit, as above	Legitimate interest (preventing abuse)
Technical request data: IP address, page address, browser headers and, with each answer you submit, your device's clock time	Every visit	Hosting the website and keeping it running. We use the clock time only to measure how long an answer took to reach us.	Legitimate interest (delivering and securing the website)

In this table, "Contract" means our agreement with you under the Terms of Service (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)). "Legitimate interest" means GDPR Art. 6(1)(f) and KVKK Art. 5(2)(f).

On the Academy pages we do not collect data for advertising, and we do not run analytics. We send marketing email only to people who have separately agreed to receive it, and today we do not ask for that. Apart from that, we email your account only with the password-reset link you ask for and, rarely, with important notices about your account, the Terms of Service, this policy or the Academy (for example a change to these documents, a security incident, or the Academy closing). A grade dispute you send goes to our own mailbox. We do not email you about it.

Do you have to give us this data?

No law requires you to give us any data.
To create an account you must give an email address, a name and a password. You must also tick a box to confirm that you are 18 or older, that you agree to the Terms of Service and that you have read this Privacy Policy (section 9). Without these we cannot create an account. You can still read the questions without an account, but your answers cannot be graded and you will not appear on the leaderboard.
To have an answer graded, you must submit the answer text. Without it we cannot grade anything.
Sending a grade dispute is optional. If you do not send one, your grade and XP stay as they are and nothing is emailed.
Your browser sends technical request data, such as your IP address, automatically. We cannot run the website without it.

3. What happens to your answers (AI grading)

You must be signed in to have an answer graded. Visitors who are not signed in can read questions but cannot submit answers for grading.

What we send to Google. When you submit an answer, our server sends Google's Gemini AI service these things:

the question ID
the question text
our grading guide for that question
your answer (up to 2,000 characters)

Google sends back a verdict, written feedback, a list of missing concepts and a model answer.

What we do not send to Google. We do not send your name, email, account ID or member ID. We do not send your IP address. The request comes from our server, so Google sees our server's address, not yours.

AI practice questions. When you ask for an AI practice question, we send Google the track, the module, the topic and the difficulty level you chose. We also send the list of practice questions you have already seen on that track (up to 40), so the new question is different. This list carries no name or ID, but it does come from your own history.

What we keep. We do not save your answer text in our database, and our server does not write it to its logs. We save only the result (verdict and score, see section 2). Your own browser keeps a copy of your answers and feedback (see section 6). The one exception is a grade dispute you choose to send. It is emailed to our team (see "If you think a grade is wrong" below).

Google's terms. We use Google's free (Unpaid) Services. This matters, because Google treats the two tiers differently (Gemini API Additional Terms: https://ai.google.dev/gemini-api/terms (opens in a new tab)):

Free (Unpaid) Services:
- Google says it uses the content sent to it, and its answers, to provide, improve and develop Google products.
- Human reviewers at Google may read, label and process that content.
- Google says it separates the content from our Google account and API key before a human reviews it.
- Google asks users not to send sensitive, confidential or personal information to the free service.
Paid Services:
- Google says it does not use prompts or answers to improve its products.
- It keeps logs for a limited time to detect abuse.

Users in the EEA, Switzerland and the UK. Google's terms do not allow the free tier to be used for apps offered to people in the European Economic Area, Switzerland or the United Kingdom. So if you are in one of these places, you may not use AI grading or AI practice questions.

Legal basis for sharing with Google. You press Submit because you want your answer graded, and grading is the service we provide. Our legal basis for sending your answer, and the practice-question history, to Google for grading is therefore contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)). Because we use the free tier, Google also uses this content for its own purposes, as a separate controller, not only on our behalf. We do not ask for your separate consent to that use today. What we do instead: we send Google no name, email, account ID, member ID or IP address, and we ask you not to write personal information in your answers (below). Google's own privacy policy applies to its use: https://policies.google.com/privacy (opens in a new tab)

Please do not write personal information in your answers. That includes your name, your contact details, your employer's confidential information, and anything about another person. Write about the engineering question only. Google asks for this on the free tier, and we pass the request on to you.

Google decides how long it keeps this data. Google's usage policies say it keeps data for 55 days to detect misuse (https://ai.google.dev/gemini-api/docs/usage-policies (opens in a new tab)). For the free tier, Google's terms set no time limit for content it uses to improve its products (https://ai.google.dev/gemini-api/terms (opens in a new tab)). We cannot delete data after it reaches Google.

Automated grading and profiling. An AI grades your answer, and no person checks the grade first. This is how it works:

The AI receives only the question ID, the question, our grading guide for that question, and your answer. It does not receive your name, your earlier grades or anything else about you.
It compares your answer with the grading guide and returns one of three verdicts: correct (100 points), partially correct (50) or needs revision (0).
XP and accuracy:
- For each question we keep your best verdict.
- Your XP, per track and in total, comes from these points on curriculum questions. Each track counts at most 40 questions and 4,000 XP.
- AI practice answers are graded and recorded, but they earn no XP and do not count toward accuracy.
- Your accuracy % is the share of your curriculum questions whose best verdict is correct or partially correct.
- Until you have a graded curriculum answer, the stored figure is 100%. The leaderboard shows "—" while your XP and your completed count are both 0, but the figure is still in the page data.
The leaderboard ranks members by total XP, and on each track by that track's XP. Ties go to the member with more completed questions.
A correct verdict on a curriculum question also schedules it for a later review. Your progress also decides when you move on to the next question set.

Building XP, accuracy and rank this way is an evaluation of your learning performance (profiling). AI grading can make mistakes.

The grade affects only your XP, progress, review schedule and leaderboard rank on this site. We do not use grades, XP or rank to make decisions about you outside the site, for example for hiring, jobs or certificates, and we do not share them with employers. If we ever offer something that uses your results outside the site, such as job opportunities, we will ask for your separate consent first. So the grading has no legal effect on you and no similarly significant effect. Grades are for learning only: they are not an official assessment, certificate or professional qualification.

If you think a grade is wrong

How to send a dispute:
- Under a "partially correct" or "needs revision" grade, press Dispute this grade.
- Write what you think the grader got wrong (10 to 1,000 characters), then press Send dispute.
Who can send one: you must be signed in. The grade must have been given in this browser, to the account you are signed in with.
Limits:
- You can send up to 2 disputes per question per day, and 5 in total per day.
- There is also a daily limit for the whole site. When it is reached, the site asks you to try again the next day or to email us.
- If the form is misused, we can block a member ID from sending disputes. A blocked member can still email info@anadologic.com.
What is sent: the text above the Send button and the "Preview what will be sent" section give a summary. Section 2 lists everything the email contains.
How it is sent:
- Our server sends the dispute as one email, from our Gmail account anadologic.academy@gmail.com to the same account (section 5).
- It is not saved in our database. Our server log records only its reference code, or an error code if sending fails.
- The site does not send your dispute to Google Gemini or any other AI service. When we review a dispute, we do not send your answer, comment, name or member ID to any AI service.
Your comment: please do not put personal information in it.
What happens next:
- Our team reviews disputes. If we find that the question, its grading guide or its model answer is wrong, we fix it. We decide whether a change is needed; a dispute does not oblige us to change a grade.
- For a module question, you can then answer again. The new answer is graded against the corrected guide, and your best result counts.
- Answers to review questions do not change your XP, and AI practice questions earn no XP. For those, a dispute helps us fix the question or the grader.
What a dispute does not do: it does not change your XP by itself. We do not reply to disputes by email, and we do not announce fixes.
Asking for your result itself to be reviewed: email info@anadologic.com with the question ID and, if you have it, the dispute reference. A person will look at the grade. If it was wrong, we correct your recorded result by hand. We answer as soon as possible, and at the latest within 30 days.
How long we keep disputes: see section 7.

4. Who can see your data

Other members (the leaderboard)

Only signed-in members can see the rankings on /leaderboard. Visitors who are not signed in see the page without any names or figures. We ask search engines not to index it.

Every account gets a leaderboard entry automatically when it is created, even before you answer a question. The page lists only the top 10 members of each ranking (overall and each track) who have earned XP in it. When you are signed in, you also see your own entry and your rank. Administrators see the full list. For each listed member it shows:

a shortened name: the first two letters of each part of your name, then *** (for example "Al*** Ri***"). A name part of two letters or fewer is shown in full.
rank, total XP, XP per track, number of completed questions (in total and per track), and accuracy %
an ADMIN label, for admin accounts
last activity, as a relative time (for example "3 hours ago"). If you have no activity yet, it is based on when you joined.

Every page of the site loads this list in the background, including each listed member's internal member ID. So any signed-in member who visits any page receives these IDs. The site uses them to highlight your own row. They are not shown as text.

Your full email address is never shown on the leaderboard. If we have no name for you, a shortened form of the part of your email address before the @ is shown as your name (see section 2).

If you do not want to be shown. There is no button yet to leave the leaderboard. Today you can:

delete your account (section 7). This removes your leaderboard entry.
or email info@anadologic.com and ask us to hide your name. We then replace the name on your entry with "Hidden member" by hand, as soon as possible and at the latest within 30 days, without asking for a reason. Your figures stay listed under that name. The site also uses this name for you elsewhere, for example in your own panel.

You

When you are signed in, you can see:

your name, email, sign-in method, first and last sign-in, and progress on /dashboard
your full name, and the shortened name the leaderboard shows for you, in your own panel on /leaderboard

Other members cannot see your email or your detailed records.

Our admins

Admins can see:

the full list of accounts: full name, email, account ID, role, first and last sign-in
full, unshortened names on the leaderboard

The ANADOLOGIC engineers who run the site have access to our database and hosting dashboards. They can technically see all stored data and logs.

Only the ANADOLOGIC staff who review grade disputes can open the anadologic.academy@gmail.com mailbox. They can read the grade disputes in it, and the password-reset emails in its Sent folder.

Service providers and others

See section 5.

How we protect your data

We use reasonable technical and organisational measures to protect your data: encrypted connections (HTTPS), passwords stored by Supabase only as one-way hashes, database access rules, and dashboard access limited to the engineers who run the site. No system is completely secure, so we cannot guarantee that data will never be lost or accessed without permission. If a data breach affects you, we will inform you and the authorities as the law requires.

5. Service providers and international transfers

We use these companies to run the site. Others receive data only in the limited cases in the last row.

Provider	What they do	What data they receive	Location
Supabase (Supabase Pte. Ltd., Singapore)	Database and sign-in	All the stored account and learning data in section 2. Supabase does not receive your answer text or your grade disputes, which we do not save in our database; for disputes, it holds only the daily counters. Your browser also connects to Supabase directly for sign-in, so Supabase receives your IP address and browser details. Supabase's database logs can also contain your account ID when a sign-up step fails.	Dublin, Ireland (AWS eu-west-1)
Netlify (Netlify, Inc., USA)	Website hosting and our server code	Every request to the site, including your IP address, and what you send (answers, grade disputes) while it is processed. The address of a request can include its query string, which can hold the one-time code in a password-reset link, your chosen practice difficulty and your question set. Also our server logs, which contain what our code records: question IDs, timings, dispute reference codes and error messages. Error messages, and the record of an admin resetting the leaderboard, can contain an account ID. The logs do not contain your answer, your dispute comment, your name or your email.	United States (Ohio, Netlify's default region for server code: https://docs.netlify.com/build/functions/optional-configuration/ (opens in a new tab)). Requests first reach Netlify's global network at a location near you. The sign-in check runs at that nearby location.
Google (Gemini API)	AI grading and practice questions. On the paid tier, Google is our processor. On the free tier, which we use, Google also uses the content for its own purposes as a separate controller (see section 3).	See section 3	Any country where Google or its agents have facilities (Gemini API terms)
Google (Gmail), account anadologic.academy@gmail.com	Sends every account email (password reset and any important notice). Also carries any grade dispute you choose to send, from this account to the same account. Gmail keeps a copy in the Sent folder, and in the Inbox for disputes. For consumer Gmail, Google says it is not our processor, so it handles these emails under its own terms (https://support.google.com/policies/answer/9581826 (opens in a new tab)).	Account emails: your email address and the email content, including the one-time link. Disputes: the content listed in section 2 (not your email address).	USA (Google LLC) and other Google locations
Public authorities, courts and legal advisers	Authorities and courts receive data only when the law requires it. Legal advisers receive it only when we need advice to establish, exercise or defend legal claims. Legal basis: legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)), and establishing, exercising or defending legal claims (GDPR Art. 6(1)(f); KVKK Art. 5(2)(e)).	Only the data needed for that request or claim	Türkiye, or the country of the requesting authority

The Academy pages (addresses that start with https://www.anadologic.com/academy (opens in a new tab)) do not load third-party scripts, analytics, advertising tools or social media widgets. Their fonts are stored on our own server, so Google Fonts does not receive your IP address. The rest of www.anadologic.com is our company website. This policy does not cover it, and that website may use its own cookies and third-party services. The LinkedIn, YouTube and anadologic.com links on the site are plain links. Those sites receive data only if you click them.

Transfers outside Türkiye and the EEA. Some of these providers process data outside Türkiye and outside the European Economic Area. Most of our server code runs in the USA (Netlify, Ohio); the sign-in check runs on Netlify's network at a location near you. Our database is in Ireland, which is also outside Türkiye. Google may process data in any country where it has facilities.

What each provider says:
- Netlify. Its privacy policy says Netlify, Inc. complies with the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, and uses the Standard Contractual Clauses (https://www.netlify.com/privacy/ (opens in a new tab)). Its data processing agreement (DPA) forms part of its Self-Serve Subscription Agreement, which covers our use. The DPA bases transfers on the EU-U.S. Data Privacy Framework (https://www.netlify.com/pdf/netlify-dpa.pdf (opens in a new tab), clause 14).
- Supabase. Its terms, which we accepted when we opened our account, include its DPA (https://supabase.com/terms (opens in a new tab)). The DPA says that accepting the terms has the same effect as signing the Standard Contractual Clauses (https://supabase.com/legal/customer-resources/data-processing-addendum (opens in a new tab)). Its privacy policy relies on Standard Contractual Clauses (https://supabase.com/privacy (opens in a new tab)). We found no statement that limits the DPA to paid plans.
- Google, Gemini API (free tier). Google describes its data processing addendum only for the paid tier. No DPA applies to our free-tier use (https://ai.google.dev/gemini-api/terms (opens in a new tab)).
- Google, Gmail. Google does not offer a DPA for consumer Gmail, and says it is not a processor for it (https://support.google.com/policies/answer/9581826 (opens in a new tab)). Google LLC says it uses the Data Privacy Framework and Standard Contractual Clauses (https://policies.google.com/privacy/frameworks (opens in a new tab)).
Under KVKK Article 9. We transfer personal data abroad only to the providers listed above, and only for the purposes described in this policy. For more information about these transfers, email info@anadologic.com. There is no KVKK adequacy decision for these countries. The protection there may differ from Türkiye's; for example, authorities there may be able to access the data under their own laws.
Under GDPR Chapter V (if GDPR applies to your data). For Supabase, we rely on the Standard Contractual Clauses in its DPA. For Netlify, we rely on its DPA, which uses the EU-U.S. Data Privacy Framework. Google LLC says it takes part in the EU-U.S. Data Privacy Framework.
Getting a copy: you can ask for copies of the provider documents named in this section by emailing info@anadologic.com.

6. What is stored in your browser

Cookies. We use only cookies and browser storage that are strictly necessary to provide what you ask for: keeping you signed in and saving your work on your device. We do not use analytics, advertising or tracking cookies. That is why we do not show a cookie banner.

Name	Purpose	How long
Sign-in cookie (its name starts with `sb-` and ends with `-auth-token`; it may be split into parts ending `.0`, `.1`, …)	Keeps you signed in. Holds your session tokens and basic account details (ID, email, name, and when you accepted the Terms and this policy, and which versions).	Up to 400 days, renewed while you use the site. Deleted when you sign out.
Security-code cookie (its name starts with `sb-` and ends with `code-verifier`)	A one-time security code, created when you sign up and when you ask for a password reset	Removed when you sign out. Otherwise it can stay up to 400 days.

Local storage and session storage. Local storage and session storage are small data stores inside your browser. We use them to keep your work on your device. This data stays in your browser, with a few exceptions:

When a track page loads, your browser sends us the question set you are on.
With each practice request, it sends your chosen difficulty.
A grade dispute sends the stored copy of your graded answer and the feedback you saw.

Key	What it holds
`anadologic_academy_trackNN_answers`	The answers you type, except answers to review questions. Saved as you type, even when you are not signed in.
`anadologic_academy_trackNN_evaluations`	For each graded answer (except review questions): the AI feedback, model answer and missing concepts; a copy of the answer exactly as it was graded; when it was graded; the member ID of the account that was signed in; and, if you disputed it, when you did and the dispute reference
`anadologic_academy_trackNN_progress`	Lessons you completed
`anadologic_guest_progress`	Scores saved on this device when the site could not confirm you were signed in as a grade arrived
`anadologic_academy_track_N_local_cycle`	Which question set you are on
`anadologic_academy_track_N_random_changes_left`, `…_random_reset_time`, `…_random_solved_count`	Practice question counters (5 changes, refilled 4 hours after the first change)
`anadologic_academy_random_level`	Your chosen practice difficulty
`anadologic_academy_bench_session` (session storage)	Your current study session: your member ID, the start and end time, the question IDs, tracks, verdicts and times of the answers in it, and your XP at the start. It is ignored after 90 minutes without activity, and deleted when you sign out or close the tab.

Some things are kept only in the open page's memory and are cleared by a reload:

Hints you open and dispute comments you have not sent. These are not sent to us.
Your answers and grades for review questions. The answer is still sent to us for grading.

When this data is deleted.

Your answers, AI feedback and completed lessons for a track are removed when you reset that track or finish its question set.
When you sign out, with any Sign out button, all the items above except the practice difficulty are removed from that browser. The study session is also removed if your session ends on its own.
When you delete your account, the site clears everything it stored in that browser (section 7).
Apart from the study session and the practice-counter reset time (4 hours), these items have no expiry date.

On a shared computer, clear this site's data in your browser settings after use.

7. How long we keep data

Data	How long
Account, profile, scores, progress, review schedule, practice history	Until you delete your account (see "Deleting your account" below), or until an administrator resets the whole leaderboard. A reset deletes every member record: name, email, scores, progress, review schedules and practice history. It does not delete the sign-in accounts, the profiles or the daily usage counters. The next time you open the site while signed in, a new record with your name and email and no scores is created. We do not delete inactive accounts automatically.
Daily usage counters (member ID, account ID, or IP address in the rare case; for grade disputes, also the question ID)	About 8 days while the site is in use. Rows older than 7 days are deleted the next time any counter is used successfully. If nobody uses the site, they stay until then.
Dispute block list (member IDs in a server setting)	Until we lift the block. We remove the ID when that account is deleted.
IP address, member ID or account ID in server memory	Used for a 1-minute limit window. After that, it can stay in the server's memory until the server instance shuts down, which Netlify controls.
Your answer text	Not stored in our database. It stays in your browser until cleared (section 6). Google's copy follows Google's terms (section 3). A copy inside a grade dispute you send is kept as described for grade disputes below.
Hosting logs (Netlify)	Netlify keeps our server logs for at least 24 hours, and up to 7 days on some plans (https://docs.netlify.com/build/functions/logs/ (opens in a new tab)).
Sign-in logs and records (Supabase)	Supabase platform logs on the Supabase Free plan: API and database logs for 1 day, and sign-in (Auth audit) logs for 1 hour (https://supabase.com/pricing (opens in a new tab)). Sign-in audit logs are not written to our database. Sign-in session records (browser details, IP address and times) stay in our database until you sign out (signing out ends your sessions on all your devices) or delete your account; our plan has no automatic session time limit.
Database backups	The database plan in use (Supabase Free) has no automatic backups (https://supabase.com/docs/guides/platform/backups (opens in a new tab)). Manual exports are deleted within 30 days.
Grade-dispute emails (Inbox and Sent folder of anadologic.academy@gmail.com)	Deleted from both folders within 90 days of sending. Today we do this by hand; there is no automatic cleanup yet. Deleting your account does not remove them. To have yours deleted sooner, email info@anadologic.com with the dispute reference.
Account emails in the Sent folder of anadologic.academy@gmail.com (password reset)	Deleted within 90 days. Today we do this by hand.

We may keep some data for longer where the law requires it, or where we need it to establish, exercise or defend legal claims (KVKK Art. 5(2)(e); GDPR Art. 17(3)(e)).

Deleting your account. You can delete your account yourself:

Open My Work (https://www.anadologic.com/academy/dashboard (opens in a new tab)) and scroll to the Account section.
Choose Delete my account.
Type DELETE to confirm.

This happens straight away, not after a waiting period.

What we delete: first, in one step, your scores, review schedule, practice history, usage counters, leaderboard record (name, email, totals) and profile. Then your sign-in account.
If something fails: the site tells you, and you can email info@anadologic.com to finish it.
Admin accounts cannot be deleted this way. They are removed on request.
Backups: there are no automatic database backups. If a manual export holds your data, it is deleted within the period stated in the table above.
Google: we cannot delete what Google already received (section 3).
Grade disputes: these are emails, not database records, so deleting your account does not remove them. They are deleted as stated in the table above. To have them deleted sooner, email info@anadologic.com with the dispute reference before you delete your account.
Account emails: emails we sent you, such as a password-reset link, stay in our Sent folder for the period in the table above.
Your browser: the site also clears everything it stored in the browser you used. On any other device, clear it yourself (section 6).

8. Your rights

Your right to object. Where we use your data based on our legitimate interests (see the "Legal basis" column in section 2), you can object at any time for reasons related to your situation. Email info@anadologic.com. We will stop, unless we have compelling legitimate grounds that override your interests, or we need the data to establish, exercise or defend legal claims. If you object to being shown on the leaderboard: there is no button for this yet. You can delete your account, or ask us to replace your name on the leaderboard with "Hidden member" (section 4).

Your rights come from KVKK Article 11 and GDPR Articles 7(3), 15 to 22 and 82. The label after each right shows which law gives it:

To know whether we process your data, and to get information about it. (KVKK, GDPR)
To access: get a copy of your data. (GDPR)
To know the purpose, and whether we use your data only for that purpose. (KVKK, GDPR)
To know who receives your data, in Türkiye or abroad. (KVKK, GDPR)
To correct wrong or incomplete data. (KVKK, GDPR)
To delete your data (erasure). (KVKK, GDPR)
To restrict how we use your data in some cases. (GDPR)
To have recipients told about a correction or deletion. (KVKK, GDPR)
To data portability: receive your data in a common machine-readable format. (GDPR)
To object to processing that is based on our legitimate interest (see the box above). (GDPR)
To object to a result produced only by automated analysis that is against you, and to ask for a person to look at it (see "Automated grading and profiling" and "If you think a grade is wrong" in section 3). (KVKK; see also GDPR Art. 22)
To withdraw consent at any time, where we rely on consent. This does not affect processing done before. (GDPR)
To claim compensation if unlawful processing causes you damage. (KVKK; GDPR Art. 82)

Rights marked (GDPR) only apply where GDPR applies to you.

How to use your rights. Most of these rights work by email today. On the site you can:

view your account details and progress
set a new password with the "Forgot password?" link, which emails you a reset link
dispute a grade (section 3)
clear your saved answers for a track on your device, with the track's Clear answers button (Reset if you are not signed in)
delete your account yourself (section 7)

There is no button yet to download your data or to change your name or email. Ask for those by email. To leave the leaderboard, see section 4.

Email info@anadologic.com.
If you can, send the email from the address you use for your account.
We may ask for more information to confirm your identity.
We answer as soon as possible, and at the latest within 30 days, as the law requires. Answers are free of charge, unless the law allows a fee for the cost of the request. Under GDPR, if a request is complex, we may extend this by up to two more months. If we do, we will tell you why within the first 30 days.

Other ways to apply under KVKK. The KVKK Authority's rules also let you apply in these ways:

in writing, by post to the address in section 1
with a secure electronic signature or a mobile signature
from the email address registered in our system (the one you use for your account)

A written application must include:

your name, surname and signature
your Turkish ID number (foreigners: your nationality and passport or ID number)
your address
your email, phone or fax number, if you have one
what you are asking for

Source: Communiqué on the Principles and Procedures for the Request to Data Controller, Art. 5 (https://www.kvkk.gov.tr/Icerik/6638/Comminuque-On-The-Principles-And-Procedures-For-The-Request-To-Data-Controller (opens in a new tab)).

Complaints.

Under KVKK: you must first apply to us. You can then complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu, https://www.kvkk.gov.tr (opens in a new tab)) if:
- we reject your request, or
- we do not answer within 30 days, or
- you are not happy with the answer.
You must complain within 30 days of learning of our answer, and in any case within 60 days of your application.
Under GDPR: you can complain to the data protection authority in the EU country where you live, where you work, or where you believe the breach happened.

9. Children

This site is not for people under 18. Google's Gemini API, which grades the answers, may only be used by people aged 18 or older. It may not be used in services likely to be used by people under 18 (https://ai.google.dev/gemini-api/terms (opens in a new tab)).

When you sign up, you must tick a box to confirm that you are 18 or older, that you agree to the Terms of Service and that you have read this Privacy Policy. You cannot create an account without ticking it. We do not ask for your date of birth, and we do not check your age. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, email info@anadologic.com and we will delete it.

10. Changes to this policy

We may update this policy when the site or the law changes. When we do, the "Last updated" date at the top will change.

For important changes, we will let members know on the site or by email. The version published on this page is the one in effect.

11. Contact

For privacy questions or to use your rights:

Email: info@anadologic.com
Post: ANADOLOGIC MÜHENDİSLİK ARGE SANAYİ VE TİCARET ANONİM ŞİRKETİ, Ostim OSB, Cevat Dündar Cd. No:1/1 İç Kapı No:67, 06374 Yenimahalle/Ankara