Privacy Policy

1. Overview & Scope

KİTAP ("we", "our", or "us") provides a modern Turkish language reading and vocabulary learning platform. We are committed to protecting your personal data and complying with the Google Play Developer Policies, General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and Children's Online Privacy Protection Act (COPPA).

2. Information We Collect

We only collect the minimum information required to deliver our educational features and sync your progress:

• Account Information: When you sign in using Google Sign-In or Firebase Authentication, we collect your display name, email address, and unique user identifier (UID) solely to authenticate your identity and restore your personalized reading library and vocabulary.
• Reading & Learning Activity: Your book progress, saved vocabulary, flashcard mastery states, reading streaks, and achievement badges are stored locally and synced securely to your personal cloud profile.
• User-Uploaded Books (EPUB / TXT): Any custom books or texts you import are processed locally on your device and optionally stored in your private cloud storage under your authenticated account so you can access them across your devices. We never read, share, or sell your personal imported files.
• Device & Diagnostics Data: Non-personally identifiable diagnostic logs, crash reports (via Firebase Crashlytics), and app performance metrics to detect bugs and ensure app stability.

3. Third-Party Services & SDKs

We partner with trusted third-party providers that adhere to strict data privacy and security standards:

• Google Sign-In & Firebase Authentication: Used for secure account creation and login management. Google Privacy Policy.
• Google Cloud Firestore: Used to securely store and sync your reading progress and vocabulary between devices. Access is restricted to authenticated account owners via strict security rules.
• Firebase App Check & Google Play Integrity API: Protects our backend services from abuse, tampering, and unauthorized access.
• Google AdMob: For non-paying users, Google AdMob delivers advertisements. AdMob may collect and process device identifiers (such as Android Advertising ID), approximate location, and ad interaction data in accordance with Google's Advertising Policies. You can opt out of personalized ads via your Android device settings.
• Google Play In-App Billing: All financial transactions for KİTAP Pro subscriptions or lifetime licenses are processed exclusively and securely through Google Play. We do not store, access, or handle your credit card or financial information.
• Google ML Kit (On-Device): Natural language translation models run 100% locally on your device. Your translated text is processed offline and is never transmitted to any external server.

4. On-Device Processing & Security Measures

We employ industry-leading security practices to safeguard your data:

• Hardware-Backed Encryption: Sensitive preferences and tokens stored on your device are encrypted using androidx.security.crypto with AES-256 GCM keys managed by the Android Keystore.
• Encrypted Transport: All data transmissions between the application and Google Cloud services are encrypted using TLS 1.3 / HTTPS. Cleartext HTTP traffic is strictly blocked.
• No Sale of Personal Data: We do not sell, rent, monetize, or trade your personal information to third parties or data brokers under any circumstances.

5. Data Retention & Deletion Policy

We retain your data only for as long as your account remains active. In full compliance with Google Play's Account Deletion Requirement, users have full control over their data:

• In-App Deletion: You can delete saved vocabulary or imported books directly within the app at any time.
• Full Account & Cloud Data Deletion: You may request permanent deletion of your account and all associated cloud data (books, vocabulary, streak, and profile) by emailing us at izahran679@gmail.com with the subject line "Request Data Deletion". Your request will be fulfilled within 7 business days.

6. Children's Privacy (COPPA & GDPR-K)

Our application is an educational reading tool designed for general audiences and language learners. We do not knowingly collect personal information from children under the age of 13 (or 16 in the European Union). If we become aware that personal information has been collected from a child without verified parental consent, we take immediate steps to delete that information.

7. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect changes in our services or legal obligations. We will notify you of any material changes by updating the "Effective Date" at the top of this policy and publishing the revised version at this URL.

8. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact the developer directly: