Your Privacy, Our Priority

This privacy policy explains what personal data Sanat Kursu Pro collects, how we use it, who we share it with, and your rights under applicable law including KVKK (Turkish Personal Data Protection Law No. 6698).

Start 14-Day Free Trial

Student & Teacher Data

We collect names, contact details, lesson schedules, attendance, and payment records necessary to operate your art course studio.

Secure Infrastructure

Your data is stored on Supabase with encryption at rest and in transit, role-based access controls, and regular security monitoring.

Your Rights Under KVKK

You have the right to access, correct, delete, and port your personal data. Contact us anytime to exercise these rights.

1. Information We Collect

When you use Sanat Kursu Pro, we collect the following categories of personal data:

Account Data: Name, email address, phone number, password (hashed), and role assignment (owner, admin, teacher, or student)
Operational Data: Lesson schedules, student records, teacher records, group information, attendance data, package details, trial lesson requests, and payment records
Technical Data: Device type, operating system, IP address, browser information, app version, and usage logs for maintaining platform reliability
Communication Data: In-app support chat messages, push notification preferences, and WhatsApp message templates

2. How We Use Your Information

We use your personal data to provide, maintain, and improve Sanat Kursu Pro. Specifically, we process your data for the following purposes:

Operate the platform — manage lessons, students, teachers, payments, packages, groups, and scheduling workflows
Authenticate users and manage access controls across different user roles (owner, admin, teacher)
Process subscription payments and manage your billing cycle through Apple App Store and Google Play Store
Send push notifications about lesson requests, trial requests, student sign-ups, teacher sign-ups, and other operational events
Provide live support through our in-app chat system
Monitor platform health, identify bugs, and improve product reliability based on usage patterns
Enforce subscription limits and manage free/trial/paid plan transitions

3. Third-Party Service Providers

We use trusted third-party services to operate Sanat Kursu Pro. These providers process data on our behalf under strict contractual obligations:

Supabase — Database hosting, user authentication, file storage, and real-time features. Your data is stored in Supabase-managed PostgreSQL databases with encryption at rest
RevenueCat — Subscription management and in-app purchase processing. RevenueCat receives anonymized user identifiers to manage billing state
OneSignal — Push notification delivery. OneSignal receives device tokens and notification preferences to deliver alerts
Apple App Store & Google Play Store — In-app purchase processing and subscription billing
Vercel — Web application hosting and serverless function execution
Resend — Transactional email delivery for account-related communications

These providers are contractually bound to process data only as instructed by us and to implement appropriate security measures.

4. Data Sharing and Disclosure

We do not sell your personal data. We share data only in the following circumstances:

With service providers listed above, strictly for operating the platform
Within your organization — studio owners and admins can see teacher and student data for their own studio only. Each studio's data is completely isolated from other studios
When required by law — we may disclose data to comply with legal obligations, court orders, or government requests under Turkish law
To protect rights — we may share data when necessary to investigate potential violations of our terms, detect fraud, or protect the safety of our users

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

All data is encrypted in transit (TLS/SSL) and at rest on Supabase-managed infrastructure
Passwords are hashed using industry-standard algorithms — we never store plain-text passwords
Row-level security policies ensure each studio can only access its own data
Authentication tokens are short-lived and securely managed
Regular monitoring and logging of platform access for security anomalies

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. When you delete your account or request data deletion, we will remove your personal data within 30 days, except where we are legally required to retain certain records.

Operational data (lessons, payments, attendance) associated with your studio is retained for the duration of the studio's subscription. Upon subscription cancellation, data is retained for 90 days to allow for reactivation before permanent deletion.

7. Your Rights Under KVKK

Under the Turkish Personal Data Protection Law (KVKK, Law No. 6698), you have the following rights regarding your personal data:

Right to know whether your personal data is being processed
Right to request information about the processing of your personal data
Right to know the purpose of processing and whether data is used in accordance with that purpose
Right to know the third parties to whom your personal data is transferred
Right to request correction of incomplete or inaccurate personal data
Right to request deletion or destruction of your personal data under the conditions set forth in KVKK Article 7
Right to object to a result that is exclusively against you through analysis of processed data by automated systems
Right to claim compensation for damages arising from unlawful processing of personal data

To exercise any of these rights, contact us at info@sanatkursupro.com. We will respond to your request within 30 days.

8. Children's Privacy

Sanat Kursu Pro is designed for art course studio operators to manage their business. Student records entered into the system may include information about minors who attend art courses.

Studio operators are responsible for obtaining appropriate parental or guardian consent before entering minor students' personal data into the system. We do not knowingly collect personal data directly from children under 18 without parental consent.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will notify registered users of material changes via email or in-app notification. The 'Last Updated' date at the top of this page indicates when the policy was last revised.

Your continued use of Sanat Kursu Pro after any changes to this policy constitutes your acceptance of the updated terms.

10. Contact Us

If you have questions about this privacy policy, want to exercise your data rights, or need to report a privacy concern, please contact us:

Email: info@sanatkursupro.com
Website: www.sanatkursupro.com/contact
In-App: Use the live support chat feature in your dashboard