Privacy notice (KVKK)

1. Data controllers

Schools. A school is the data controller for the student, guardian and staff data it enters in Petek. Onore processes that data on the school's behalf, on its instructions and under its contract with the school (Law Art. 3(1)(ğ)). Onore's authorised staff may access a school's account only for support and operations and for a limited time; that access and every action during it is written to the school's audit log, which the school can see.

Onore. Onore, the developer of Petek, is the data controller for: what you send through the demo, quote, sales and contact forms on petek.school; the site chat assistant's records; the sign-in and security data of Petek user accounts (sessions, two-step verification, security logs); support requests; and ad measurement in the iPhone and iPad app.

Onore is the trade name of Kaan YILDIZKAN's sole proprietorship. Onore's details:

2. What personal data we process

3. Purposes

• Answering demo and quote requests and contacting you.
• Providing the service, managing accounts and secure sign-in.
• Processing school data on schools' behalf (for the purposes the school sets).
• Information security; preventing and detecting misuse.
• Measuring which ad brought someone to the app.
• Meeting legal obligations and protecting rights in a dispute.

4. Legal grounds

• Forms: directly related to concluding a contract (Art. 5(2)(c)) and legitimate interest (Art. 5(2)(f)).
• Account and sign-in: performance of a contract (Art. 5(2)(c)).
• Security logs: legitimate interest (Art. 5(2)(f)) and legal obligation (Art. 5(2)(ç)).
• School data: the grounds the school itself sets; the school takes explicit consent where needed.
• Ad measurement: explicit consent (Art. 5(1)); on iOS the App Tracking Transparency permission and the setting in the app.

5. Recipients

Personal data may be transferred, as far as needed to provide the service, to the providers below and to authorities where the law requires. The payment institution, e-invoice integrator, SMS and phone-system provider and WhatsApp Business connection a school chooses are used on the school's decision and behalf.

5.1 AI assistant

Petek's AI assistant and receipt reading send the question, any attached photo or receipt and only the school data within the asking person's permissions to the AI provider chosen in the school's settings. If the school entered its own API key the request goes through the school's account, otherwise through Petek's.

Requests that read school data, carry a photo or file, or contain a phone number, e-mail or Turkish ID number count as personal data and by default go only to Anthropic, OpenAI and Google. Personal data goes to Alibaba Qwen or DeepSeek only if the school owner turns on that provider under Assistant settings › Personal data (KVKK); only the owner can change it and every change is recorded. If no suitable provider is left, nothing is sent; if the school turned on masking, the text is sent with names and contact details masked, and photos and files are then not sent.

The iPhone and iPad app shows what goes where and asks before the assistant or receipt reading is first used; without permission nothing is sent, and the permission can be withdrawn at any time. The chat assistant on this site never reaches any school's data; if your message contains a name, phone, e-mail or Turkish ID number it is not sent to the AI.

As data controller, the school decides whether to use the assistant, which provider and whether to allow personal data. Because the providers' servers are abroad, this is a regular transfer abroad: the provider's own data processing agreement alone is not enough, and the standard contract announced by the Board is required under Art. 9(4)(c) (see 5.3). Onore does not use or sell this data for advertising; retention on the provider's side follows the provider's policy.

5.2 Ad measurement in the iPhone and iPad app

Petek's iPhone and iPad app (the staff app) contains the Meta Platforms Ireland Ltd. SDK and Google Ireland Ltd.'s Google Analytics for Firebase. The purpose is ad measurement: knowing which ad brought someone to the app. The app shows no ads. The data sent is listed in the table in section 2; the advertising identifier is sent only if you allow App Tracking Transparency on iOS. Your name, e-mail, phone and any student or guardian data are never sent to Meta or Google.

The legal ground for this processing is explicit consent. The transfer abroad, however, relies on the standard contract under Art. 9(4)(c), not on consent (see 5.3); since the 2024 amendment consent supports only occasional transfers. You can turn measurement off in the app under Menu › Profile › Privacy › Ad measurement and on the iPhone under Settings › Privacy & Security › Tracking. Petek Aile (the parents' app) contains neither kit.

5.3 Transfers abroad

Some of the providers above have servers outside Türkiye. These transfers follow Article 9 of the Law: for regular transfers to countries without an adequacy decision, the standard contract announced by the Personal Data Protection Board is signed and notified to the Authority within five business days of signature (Art. 9(4)(c) and 9(5)).

Status of the standard contracts: ⟨being updated⟩

6. Retention

Data whose period has ended is deleted, destroyed or anonymised.

7. Your rights (Law Art. 11)

• learn whether your personal data is processed,
• request information about it,
• learn the purpose of processing and whether it is used accordingly,
• know the third parties in Türkiye or abroad it is transferred to,
• have incomplete or inaccurate data corrected,
• have it erased or destroyed under Art. 7,
• have corrections and erasures notified to the third parties it was transferred to,
• object to an adverse result arising solely from automated analysis,
• claim compensation for damage caused by unlawful processing.

8. How to apply

For data a school entered in Petek, apply to that school; if your request reaches Onore we forward it to the school and tell you. Under Article 5 of the Communiqué on Applications to the Data Controller you can apply to Onore:

• by signed letter to Antalya OSB Teknopark, Antalya, Türkiye
• by registered e-mail (KEP) to kaan.yildizkan@hs01.kep.tr
• by e-mail signed with a secure electronic signature or mobile signature to kaan@yildizkan.com
• by e-mail from the address registered in Petek to kaan@yildizkan.com
• through the form on the contact page.

Include your name (and signature for a letter), your Turkish ID number (for foreign nationals, nationality and passport or ID number), your address for notices, your e-mail and phone if any, and your request. We answer free of charge within thirty days (Law Art. 13). If your application is rejected, the answer is insufficient or no answer is given in time, you may complain to the Personal Data Protection Board (Law Art. 14).

9. Cookies

petek.school uses no analytics or advertising cookies. It uses only your language choice (NEXT_LOCALE, when you change the language, 1 year) and, when you sign in to the Petek app, strictly necessary cookies that keep you signed in and remember your menu layout.

10. Changes

When we update this notice we publish it on the site and change its date.