Legal

PDPL Information Notice

Last updated: 11 October 2026

This notice is given under Article 10 of Türkiye's Personal Data Protection Law No. 6698 ("PDPL" / "KVKK") to explain how personal data is processed in the WordReader app. More detail is in our Privacy Policy.

1. Data controller

Ulaş Sancak, publisher of WordReader. Email: admin.wordreader@roxyapps.net

2. Personal data processed

• Identity and contact: email address; name and profile picture if you sign in with Apple or Google.
• Customer transaction: followed and added sources, saved articles, subscription status and purchase history.
• Transaction security: account and device identifiers, sign-in records, IP address.
• Usage and device: screens viewed, in-app actions and search terms, device model, operating system, app version, crash reports, push token.
• Marketing: advertising identifier and ad interactions, only for users without Pro and within the consent rules below.

3. Purposes

• Creating and running your account and syncing your sources and saved articles;
• Providing WordReader Pro and restoring purchases;
• Sending notifications you have allowed;
• Analyzing usage, fixing errors and improving the app;
• Showing ads in the free version;
• Answering requests and meeting legal obligations.

4. Method of collection and legal grounds

Data is collected electronically, through the app and the services it uses (Supabase, Firebase, AdMob, RevenueCat, Apple and Google sign-in), partly automatically. The legal grounds under Article 5 of the PDPL are:

• it is necessary for the establishment or performance of a contract (Article 5/2-c): account, sources, saved articles, Pro;
• it is necessary to comply with a legal obligation (Article 5/2-ç): records required by law;
• it is necessary for our legitimate interests, provided your fundamental rights are not harmed (Article 5/2-f): usage analysis, crash reports, security;
• your explicit consent (Article 5/1): notifications, personalized ads and tracking. You can withdraw consent at any time in your device settings or the app's privacy choices.

5. Transfers

Personal data is transferred to the service providers that run the app: Supabase (database and sign-in), Google (Firebase Analytics, Crashlytics, Cloud Messaging, AdMob, Google Sign-In), Apple (Sign in with Apple, App Store), RevenueCat (subscriptions), and to authorities when the law requires it. These providers' servers are outside Türkiye, including in the European Union and the United States. Transfers abroad are made under Article 9 of the PDPL, on the basis of standard contracts or, where these are not available, your explicit consent.

6. Retention

Account data is kept while your account exists and is deleted within 30 days after you delete your account, except records that the law requires us to keep longer.

7. Your rights under Article 11

You have the right to:

• learn whether your personal data is processed;
• request information about the processing;
• learn the purpose of processing and whether data is used for that purpose;
• know the third parties in Türkiye or abroad to whom data is transferred;
• request correction of incomplete or inaccurate data;
• request deletion or destruction of data under Article 7;
• request that corrections and deletions are notified to third parties to whom data was transferred;
• object to a result against you arising from analysis solely by automated systems;
• claim compensation for damage caused by unlawful processing.

Send requests to admin.wordreader@roxyapps.net from the email address on your account, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. We answer free of charge within 30 days at the latest. You can delete your account at any time in Settings → Delete account.