Scope and controller
This Privacy Policy applies to the Biyoloji Hikayesi Android app. The publisher and data controller is Hamza EROL — Rolpa Bilişim Pazarlama Yönetim Sistemleri. Address: Hasanefendi - Ramazan Paşa Mah. 1921 Sok. No:24/A, Efeler / Aydın, Türkiye. Privacy contact: info@biyolojihikayesi.com. Alternative contact: info@rolpa.com.tr, +90 555 608 59 45.
Account, session and content access
The app uses your existing website account. Your email address and password are sent to the server to authenticate sign-in. Your account ID, name and subscription/access information display your account and determine content access. An optional phone number saved in your profile is also processed on the server. Passwords are stored as hashes rather than in plain text.
Session cookies are used on online screens. Opening your website question history displays existing server records. New sign-ins and content entitlement checks require internet access.
Data stored on your device
Downloaded lessons, eligible images and questions are encrypted in app-private storage and excluded from Android app backup and device transfer. Packages contain your account ID, topic information and access expiry. Offline access lasts up to seven days, or until the relevant subscription expires if earlier. Access expiry does not automatically delete the stored file.
Offline question selections remain on your device and are not uploaded to the website in this version. The download summary on the account screen is calculated from local packages. Information pages also have an offline copy.
Support and technical records
The support form sends your name, email address, subject and message to our server. These are stored in the support management system to investigate your request and reply. Requests sent by email and our replies are also part of the support process.
For operation and security, the server may record IP address, request time, requested URL, response status and browser/app client information. The app does not request location, contacts, camera or microphone permissions.
Google reCAPTCHA and service providers
Sign-in and online support screens use Google reCAPTCHA to prevent automated submissions. These screens connect to Google, which may process IP addresses, browser/device information, verification interactions and cookies for risk analysis. reCAPTCHA uses necessary verification cookies. Google's retention and processing practices are described in its Privacy Policy and Terms of Service.
Hosting and email infrastructure may process data to provide the service. Necessary information may be disclosed to competent authorities to meet a valid legal obligation. Personal data is not sold for advertising. Providers such as Google may process information on infrastructure outside Türkiye.
Advertising and purchases
This Android version does not contain AdSense, AdMob or in-app purchases. It uses existing account access rights. Previous website purchases may have invoice and transaction records associated with the shared account; this app version does not collect payment card details.
Retention and deletion
- Account and access information is retained to maintain your shared account service. Following a verified deletion request, account and associated data without a legal retention requirement is deleted or anonymised so that it no longer identifies you.
- Support messages are retained to resolve and follow up requests and maintain necessary dispute records. You may request deletion of specific support records without deleting your account.
- Technical security records have restricted access and are retained according to security and operational needs. Standard web access logs rotate daily; separate security or incident records may have different retention periods.
- Invoices, financial transactions and necessary legal records may be retained for applicable legal retention obligations or ongoing disputes. Retained record categories and reasons are explained in the response to your deletion request.
- Backup copies are also considered when processing a deletion request. Backups are not available through normal app access. Accepted deletions must be reapplied after a restore. Records remaining because of backups or legal retention, and their status, are explained in the request response.
Request account or data deletion
Email info@biyolojihikayesi.com from your registered account email with the subject “Biyoloji Hikayesi — account/data deletion request”. Specify whether you want the entire account or particular data deleted. Proportionate additional information may be requested to verify ownership. Do not send your password or payment card details. If you cannot access your registered email address, contact the same address for help.
We notify you by email of the outcome and the reason for any required retention. Personal data requests are answered as soon as possible and, for valid requests under Türkiye's KVKK, within 30 days. Account deletion and clearing a device are separate actions.
Detailed instructions: Account and data deletion. You can access that page without installing the app or signing in.
Device controls and security
You can delete individual topics in Downloads. The Information section's “Bu cihazdaki hesabı ve indirmeleri temizle” option clears the local session, packages and question selections; it does not delete your server account. Clearing Android app storage or uninstalling the app also does not close your server account.
We use HTTPS for transmission, encryption for local content and app-private storage. Send access, correction or deletion requests to the address above. This policy is updated when the service's practices change.