meloktaNotice on the processing of personal data
1. Data controller
Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), the data controller is [To be completed: name of the data controller]. Address: [To be completed: postal address]. Email: [To be completed: contact email]. Registered e-mail (KEP): [To be completed: registered e-mail (KEP), if any].
2. Personal data processed and how
Melokta has no accounts, forms or sign-up, and collects no name, email, phone number, date of birth, school or location. No personal data is sent to Melokta’s own server. The data that may be processed is:
| Data | Where is it kept? | Who can access it? | For how long? |
|---|---|---|---|
| Technical access logs (IP address, date and time, address requested, browser details) | The hosting service’s servers | Hosting provider: [To be completed: hosting provider] | [To be completed: server log retention period] |
| Lesson and game progress (completed lessons, stars, points, dates) | Only this browser (IndexedDB / localStorage) | The person using the device; Melokta cannot access it | Until the user deletes it |
| Teacher activities and worksheets (title, description, tasks) | Only the teacher’s browser | The teacher; Melokta cannot access it | Until the user deletes it |
| Student results and the optional student code | The student’s browser; downloaded JSON / PDF file | The student; the teacher they send the file to | Until the user deletes it |
| Student results, codes and class group names in the teacher panel | Only the teacher’s browser | The teacher / school; Melokta cannot access it | Until the user deletes it |
| Appearance, language and instrument preferences | Only this browser | The person using the device | Until the user deletes it |
| Spoken instruction text (no personal data) | The device; the browser maker’s speech service if an online voice is used | Browser maker (online voice only) | Not kept by Melokta |
3. Purposes and legal grounds
- Technical access logs (IP address, date and time, address requested, browser details): to serve the website and keep it secure, through the hosting service, by automated means. The legal ground under consideration is KVKK Art. 5/2-f (the controller’s legitimate interest) and, where applicable, Art. 5/2-ç (legal obligation); a lawyer should confirm the exact ground.
- Records on the device (lesson progress, activities, results, optional student code): only on the user’s device, so that the learning and teacher tools the user asks for can work. These records are not transferred to Melokta and Melokta cannot access them.
4. Transfers
Technical access logs are processed by [To be completed: hosting provider], which hosts the site. Country of the servers: [To be completed: server country]. If the servers are outside Turkey, this may count as a cross-border transfer under KVKK Art. 9; the controller must decide the transfer mechanism (adequacy decision, standard contract, etc.). Apart from this, no personal data is transferred to third parties; no advertising, analytics or social media services are used.
5. Retention
Technical access logs: [To be completed: server log retention period]. Records on the device: they stay on the user’s device until the user deletes them or clears browser data.
6. Your rights under KVKK Art. 11
- to learn whether your personal data is processed and, if so, to request information about it,
- to learn the purpose of processing and whether it is used for that purpose,
- to know the third parties in Turkey or abroad to whom it is transferred,
- to ask for correction if it is incomplete or inaccurate, and for deletion or destruction under the conditions of Art. 7, and for these steps to be notified to the third parties it was transferred to,
- to object to a result against you arising solely from automated analysis,
- to claim compensation for damage caused by unlawful processing.
7. How to apply
Send your request to [To be completed: contact email], in writing to [To be completed: postal address], or to the KEP address [To be completed: registered e-mail (KEP), if any]. Requests are answered within thirty days at the latest under the Communiqué on the Procedures and Principles of Applications to the Data Controller. Because Melokta cannot access the records on your device, you can view and delete them yourself on the My data page.
Note
This text is a draft and should be reviewed by a lawyer before publication. Last updated: 2026-10-29.