In short
• What we collect: your e-mail address (or an anonymous guest account if you start without signing up), your conversations with Aysel and the question photos you send, the learning map and the topics you are weak in that are built automatically from the questions you work on, your exam, grade and goal if you choose to give them, and access records that protect your account. • Why: to give you AI-assisted study help, keep your map and plan, suggest verified tutors who match your gaps if you want, and keep your account and the service secure. • Who sees it: providers working on our behalf (some in the United States; your conversations go there for AI only with your explicit consent), authorised team members only for a specific reason and with every access recorded, and the people you choose to share with. The website uses Google Analytics, the Meta pixel and the OpenAI Ads pixel for every visitor (see Cookies); the mobile app uses Google Analytics and Meta App Events from the first launch, and you can turn them off in your account (see Measurement in the mobile app). • Age: if you are under 18, you need a parent's or guardian's consent. • Your rights: download your data or delete your account from your account page (see How to delete your account and data); write to us for anything else. • Contact: destek@aysel.ai. Our e-mails come from hello@send.aysel.ai. The details follow below.
Data controller
Aysel (aysel.ai). Contact for privacy matters: destek@aysel.ai.
What we process
Sign-in identity (your e-mail address, an opaque account id held by our authentication provider and, for password-free sign-in, the single-use 6-digit code sent to your e-mail address, valid for 15 minutes; if you set a password, it is held only by our authentication provider as a one-way hash); the record of the age declaration and explicit consents you give (kind, choice, notice version and time); where guest chat is available, an anonymous account created when you first send a message without signing up, which keeps your conversation, learning map and plan until you delete it or move them into a verified account; your study plans, tasks and outcomes, your learning maps, the map topics built automatically from the questions you work on, and the progress notes about a topic that you, or a Space you joined, record; your exam, grade and goal if you give them (learner profile; see below); the record of practice attempts Aysel notes during a chat (the topic, how much help came before your answer, the result and a short label of the item), which you can correct on your learning map; the conversations you have with Aysel, including their content and the photos of questions you send in them; the long-term notes Aysel keeps about your studies; your purchase and access state (no card data ever reaches us), including a promotional trial you claim; guest intent entered in the earlier pre-account flow; where Spaces and contact features are available, the Spaces you run or join, their assignments and your submissions, the contact requests and messages you exchange with other users, a teacher profile you choose to publish, your legal name and the identity or credential images you send if you ask to be verified as a tutor (the images are deleted once the request is decided), and reports you file; usage and cost records for each AI request (amounts and limits, never the content itself); processing records for AI runs, automations and quotas (never the content itself); when you claim a trial, a keyed one-way hash of your verified e-mail address, used only to stop the same address from claiming it twice; a keyed, time-window-limited hash derived from your network address, used only to limit how many guest conversations and trial claims one network can start in a short period (our counter records do not store the address itself); where enabled, the campaign link you arrived from (campaign name and link parameters), recorded when you first send a message; if you turned on push notifications, your phone's push token and platform (see Push notifications); in the mobile app, unless you turned it off, the measurement data sent to Google and Meta (see Measurement in the mobile app); and technical diagnostics when the app fails, which carry no message content but do carry an anonymous per-install identifier and a coarse location derived from your network address by the diagnostics provider.
Photos of questions
When you send a photo of a question in the chat, it is sent once to the AI model provider so the question can be read into text, and the photo is stored privately with your conversation (in the EU, Frankfurt) so you can see it again in the chat. If it cannot be stored, only the text read from it is kept, and the chat says so under that question. Only you can open it, through your signed-in account; it is not public, not logged and not used for anything else. The photo is deleted together with your account, and it is included in your data export. Like every processor, the model provider keeps what it receives under its own retention rules (see "Who processes it on our behalf").
Your answers by exam outcome, and tutor invites
When you answer a question Aysel checks, we note which outcome of the official YKS outcome list (Ministry of National Education, 2026) the question tests and whether your first answer was right, partly right or wrong, and whether you used a hint — not the text of your answer. The outcome is picked automatically from the question's own text by the AI model provider listed under recipients; nothing about you is sent with it. This matching is done by AI and can be wrong; the outcome list comes from the document the Ministry published, but Aysel is not affiliated with or endorsed by the Ministry of National Education. From these notes of the last 120 days we show you the topics where you are weak and rank tutor suggestions whose field matches them. They are kept while your account exists, are part of your data export and are deleted with your account. Tutor invites are off until you turn them on (on your inbox or the discover page) and you can turn them off at any time. While they are on, a tutor with a listed, verified profile whose field matches the topics where you are weak sees you only under a pseudonym that is different for every tutor — never your name, e-mail address or contact details — together with those topics and whether you practised this week, this month or earlier, and may send you an invite. Accepting it sends the tutor an ordinary request in your own words, under the same rules as any other request; declining ends it. The number of learners weak in a topic that tutors see counts only learners who turned invites on, and is never shown below five.
Your learner profile, the map built from your questions, and your gaps
After its first answer in a chat, Aysel asks at most two short questions you can skip: which exam you are preparing for (YKS, LGS, school — with your grade if you pick school — or other) and your goal. You pick from fixed options only; no free text is taken. Your answers are kept on your account (a guest account too) and can be changed under “About me” on your account page. We send them with your conversation to the AI model provider so that Aysel can fit its answers to your exam and level (see Transfers abroad), and we use them on our own server as a weak signal when ranking the tutors we suggest to you. Tutors are never shown your profile answers. When you work through a question in chat, its topic is added automatically to the “From my questions” goal on your learning map (as a guest too); the map shows those topics and your results on the questions, and you can edit or archive them. The “My gaps” list combines the topics you are stuck on in your map with your gaps by exam outcome; it keeps no separate record and is recalculated from your existing data each time it opens. All of this is kept while your account exists, is part of your data export and is deleted with your account. When you save a guest account with an e-mail address, your map and profile stay with you; if you sign in to an existing account instead, they move into it (profile answers that account already has take precedence).
Why we process it
To run the service you signed up for: planning and following your studies, answering your questions with AI assistance, fitting answers to your exam and goal, building your learning map and the topics you are weak in from the questions you work on, remembering what matters between sessions, suggesting verified tutors who match your gaps and, if you turned them on, delivering tutor invites, letting you work with others in Spaces and contact features where they are available, sending password-free sign-in codes and service e-mails, answering your support requests, securing your account (including two-step verification for our operators), granting promotional trials (no card, no charge, no automatic renewal) and, once purchases launch, handling purchases, keeping the cost of AI use within set limits, preventing abuse through fair-use limits and per-network limits on guest conversations and trial claims, measuring how the website and the mobile app are used and how well our ads work (see Cookies and Measurement in the mobile app), telling you about contact events by push notification if you turn it on, and diagnosing errors.
How we collect data, and legal bases
We collect your personal data from what you enter and send, and electronically, partly by automated means, while you use the website or the app (for example, your map being built from the questions in a chat, access records and cookies). Legal bases: performance of the service you asked for, for your account, password-free sign-in codes and service e-mails, the chat, the learning map, the learner profile, the plan, tutor suggestions and push notifications (KVKK art. 5/2-c); our legitimate interest, provided it does not harm your fundamental rights and freedoms, for security, access records, abuse prevention, error diagnostics, support and improving the service (art. 5/2-f); compliance with our legal obligations (art. 5/2-ç); and your explicit consent, which you can give or withdraw in your account, for tutor invites (while you have them on) and for transfers abroad (art. 9).
Who processes it on our behalf
Categories of processors, each bound by contract and keeping data under its own retention rules: a database and authentication provider (Frankfurt, EU); an e-mail delivery provider that sends sign-in codes, support replies and guardian approval e-mails (United States); an application hosting provider (Frankfurt, EU) whose automation queue runs in the United States; an error-diagnostics provider (EU region), which keeps the connecting IP address and the approximate location derived from it for diagnostics for its retention period (currently up to 90 days); a payments provider (once purchases launch); and, once AI features are switched on, AI model providers reached through an AI gateway and a memory provider for long-term notes (both in the United States). On the website and in the mobile app, analytics and ad measurement providers (Google and Meta, and on the website also OpenAI; see Cookies and Measurement in the mobile app) also receive data. If you turned on push notifications, your push token goes to the notification delivery services (Expo, Apple and Google; United States). The current list of named providers is available on request at the contact address above. Other users receive only what you choose to share with them: where Spaces are available, a Space's owner sees the submissions and outcomes you hand in there (your personal learning map is not shared with the Space); contact requests and messages reach their recipients; a teacher profile or Space listing you publish becomes public after our review; reports you file reach our operators.
Transfers abroad
Most of your data stays in the European Union (Frankfurt). The following goes to providers in the United States: for AI and memory features, your conversations, the question photos and documents you send, the choices in your learner profile and Aysel's long-term notes (AI model providers and the memory provider), and jobs in the automation queue; for the e-mails we send you (sign-in codes included), your e-mail address and the e-mail's content (e-mail delivery provider); the analytics and ad measurement data of the website and the mobile app (Google and Meta, and on the website also OpenAI; see Cookies and Measurement in the mobile app); and, if you turned on push notifications, your phone's push token (Expo, Apple and Google). We ask for your explicit consent before your conversations or notes travel there; without it, AI-assisted features stay off for your account, and you can withdraw it in your account at any time. A risk you should know: data in the United States is subject to rules that differ from Turkey's and may not be protected there to the same level as in Turkey.
How long we keep it
Your account data lives as long as your account does and is erased when you delete it, with these exceptions: usage and cost records for AI requests are kept after deletion with the link to your account replaced by a random identifier; a keyed hash of a verified e-mail address that claimed a trial is kept to prevent a second claim; records of a trial's funding commitment carry no link to your account and are kept; a report you filed is kept for moderation without your account. None of these currently has an automatic deletion schedule. An anonymous guest account is kept like any account until it is deleted or moved into a verified account; it currently has no automatic expiry. Clock-driven records are pruned automatically: guest sessions from the earlier pre-account flow 7 days after expiry (90 days after they were turned into an account), processing and diagnostics records 90 days, fair-use counters 7 days, internal event queues 30 days, payment-provider notifications 90 days. Per-network counters are removed by a maintenance job once their window (configurable up to 7 days; initially 1 hour for guest chat and 24 hours for trial claims) has ended, whenever that job runs; where campaign-link recording is enabled, the same job removes those records 395 days after the first message. The IP address, full user agent and network hash in access records are deleted after 30 days (see Security and access records). The operator audit trail is retained. Provider-side copies follow each provider's rules.
Chat summaries and team access
To improve the service we create short AI summaries of your chats with personal details removed (topic, subject, exam track, where you got stuck) and use them only in aggregate reports that authorised team members open with multi-factor authentication; summaries are deleted after at most 180 days. Our team opens a chat's full text only for a specific reason (support, safety, quality) and every such access is logged.
A teacher's AI assistant (pre-meetings)
Some teachers turn on a text assistant that answers your questions before a first meeting, using only answers the teacher approved. It is an AI assistant, never the teacher, and it never confirms a time, a fee or a booking. What you write there (with phone numbers, e-mail addresses and links hidden before it is stored) is kept in your account as a pre-meeting and sent to the AI model provider named under recipients, as in your chats with Aysel; it is never used for Aysel's memory of you and never reads your other chats, profile or map. Only if you switch on "Share my gaps" does it see the names of your open topics. The teacher sees nothing of the pre-meeting: only a short summary if you choose to send one with your request, which you can edit or delete first. We delete a pre-meeting 30 days after its last message (if it was reported, it is kept until 30 days after the report is decided); a summary you sent is deleted 30 days after sending. If you report a pre-meeting, or a message suggests you may be at risk, our team can read it to help; that access is recorded. Teachers' approved answers stay with their account; older versions of an answer are deleted 90 days after they were replaced.
Phone numbers
When you apply as a teacher, we ask for your mobile number. Purpose: so the Aysel team can call you to speed up your application, get to know you and verify you, and contact you about your teaching on Aysel (steps needed before entering into an agreement with you, KVKK art. 5/2-c, and our legitimate interest, art. 5/2-f). Your number is never shown to learners or parents and never appears in the teacher directory or on your page; only the team members who review teacher applications see it, with multi-factor sign-in, and every time the number is opened it is logged. When the team talks to you on the phone, it records that it did, when, and an optional short note on your application. The number is never written to logs or sent to measurement tools. You can change it on your teacher page; your number and these call records are part of your data export and are deleted when you delete your account. When you leave an open lesson request, we ask for a mobile number. Purpose: the Aysel team calls it to check your request and to find the right teacher for you (steps needed before a contract with you, KVKK art. 5/2-c, and our legitimate interest, art. 5/2-f); you do not need to tick a separate box for this. You may also leave the request as a guest, before entering any e-mail code: until the team has checked it, no teacher sees it, and the team's screen shows it as “unverified”; if you enter the code later, it is marked “verified”. If you type an e-mail address, it goes to our sign-in system only to send the code; if you never enter the code, it is not linked to your account and not stored with the request. To prevent abuse we count the requests left in a day with the same number and from the same connection; for this we keep only keyed summaries of the number and of the connection, never the number or the address themselves, for a few days at most. If you are an adult asking for yourself, the number is your own; if you are under 18 (or we do not know your age) we never ask for your own number — you write a parent's or guardian's; a parent asking for a child writes their own as the guardian. The number never appears in listings and is not passed to teachers because you left a request: a teacher sees it only in the conversation that opens when you accept their answer, and only while contact sharing is on there (after your own 18+ confirmation, or a guardian's approval). The Aysel team members who help with matching may see it, with multi-factor sign-in; every time they open it, it is logged. It is part of your data export and is deleted with the request or your account.
Security and access records
To keep your account secure, prevent abuse and fraud, and operate the service, we keep an access record when you sign in, sign up, start as a guest or save your account, and at most once an hour while you use the service: the time, your IP address, the identification your browser sends (user agent) and the browser, operating system and device type derived from it, the city-level location our hosting provider derives from the IP address (country, region, city, postal code — never a precise location or coordinates) and a keyed one-way hash of your network. Our legal basis is our legitimate interest, provided it does not harm your fundamental rights and freedoms. The IP address, the full user agent and the network hash are deleted automatically after 30 days; the hourly usage records are deleted entirely after 90 days; for the other records, the city-level location and the browser, operating system and device type are kept as long as your account exists and are erased when you delete it. Only authorised team members can see these records, with multi-factor authentication, and every view is logged; the records are included in your data export. Access records are never sold and never used for advertising or targeting.
Support messages
When you write to us through the in-app help panel, we keep your message and our replies, the category you chose, your name, the email address for replies, your phone number only if you add it and tick that we may call you or write to you on WhatsApp (with the time of that permission), a parent's or guardian's contact if you add one, the page you wrote from, the app version, a coarse device type (computer, phone or tablet) and, if you add one, a screenshot — never your IP address with the message. Purpose: to answer you and to fix what went wrong (performance of our service to you and our legitimate interest). The team members who answer support read them, with multi-factor sign-in; every opening of a conversation is logged. Your phone number is shown only to the support team. We email you our acknowledgement and replies through our email sending provider. A closed request is deleted 365 days after it was closed; all your requests are deleted when you delete your account, and they are part of your data export.
Push notifications
If you tap "Turn on notifications" in the app and your phone allows it (not for guest accounts), we save your phone's push token and its platform (iOS or Android) to your account; at most 10 devices per account. We use it only to tell you about contact events: a new lesson request, a message, your tutor's reply, an invite or an accepted invite. Notifications carry no content: they only say that something arrived and never contain a name, a subject or message text. You can turn them off with the "Send me push notifications" switch in your account or in your phone's settings. For delivery, the token goes to Expo (650 Industries, United States), which passes the notification on through Apple Push Notification service (iPhone) or Google Firebase Cloud Messaging (Android) (see Transfers abroad). Legal basis: performance of the service you asked for (KVKK art. 5/2-c). A token is deleted when you sign out on that device, when the device is no longer registered, when newer devices push it past the limit of 10 and when you delete your account. Turning the switch off does not delete the token; it only stops sending. Tokens are never written to logs and are not part of your data export, because a token is only a delivery address, not something you wrote.
Your rights
Under KVKK art. 11 you may learn whether we process your data, ask what is processed, why, and to whom it is transferred in Turkey or abroad, request correction or deletion and that recipients of the data be told about it, object to an outcome against you that results solely from automated analysis, and claim damages. Two of these are self-service in your account: download everything we hold about you, or delete your account for good (see How to delete your account and data). For anything else write to destek@aysel.ai; we answer free of charge within the legal period of 30 days. If you find our answer insufficient, you may complain to the Turkish Personal Data Protection Board.
How to delete your account and data
In the app: open the Account screen, type the confirmation word (DELETE) under "Delete my account" and tap "Delete account permanently". On the web: sign in at aysel.ai and do the same on your account page. If you like, first take a copy with "Download my data". Deletion cannot be undone: your sign-in, conversations, question photos, learning map, plans, learner profile, Aysel's notes, support requests, push tokens and the rest of your account data are erased; only the exceptions listed under "How long we keep it" remain. By e-mail: if you cannot get into the app or the website, write "Delete my account" to destek@aysel.ai from the e-mail address on your account. We may ask you to confirm from that address that the request is yours; we complete it free of charge within the legal period of 30 days. Measurement data at Google, Meta and OpenAI: we never send them your name, e-mail address or account id, so what they received is not linked to your Aysel account, and deleting your account does not reach their copies. To stop measurement and cut that data off from you: turn measurement off under Account → Measurement or uninstall the app; reset or delete your advertising ID in your phone's settings; on iPhone, turn tracking off for Aysel under Settings → Privacy & Security → Tracking. Data Meta received from the app through App Events can be reviewed and disconnected from you with Meta's own tools ("Your activity off Meta technologies" in your Facebook or Instagram settings); Meta deletes it under its own data policy. Google deletes its data when the retention period of our Analytics property ends.
Age
Aysel is meant for students. By using it you declare that you are 18 or older, or that a parent or guardian has consented to your use. We record this declaration and when it was made. A learner under 18 can share contact details with a tutor only with a parent's or guardian's approval given by e-mail; the e-mail address entered for that approval is used only to send the approval e-mail and is not stored (only a one-way hash is kept, to prevent repeated sends). Parents and guardians can write to destek@aysel.ai to exercise their child's rights. If you confirm that you are 18 or older, we record the confirmation and its time; it is asked when you share contact details with a tutor, when you open a profile that works only with people 18 or older, and in the teacher directory's coaching view. You can withdraw it under Account. A grade or exam in your profile that reads as under 18 always counts first.
Security
Data travels over encrypted connections and rests encrypted at our providers; accounts are referenced by opaque identifiers; operators reach sensitive tools only with two-step verification; no chat content is ever sent to diagnostics.
Measurement in the mobile app
As the website does for every visitor, the Aysel mobile app uses Google Analytics for Firebase and Meta App Events for everyone who uses it, from the first launch. You can turn this measurement off at any time under Account → Measurement; from then on the app sends no further measurement events. • Usage statistics (Google Analytics for Firebase, by Google LLC): app interaction events from a fixed list (for example signing up or in, sending a first message or a question photo, activating a plan, opening the upgrade offer, changing the language, downloading your data) with short fixed-value details such as the language; the names of the screens you open, as templates (for example "/map" or "/artifact/[id]", never an id or what is on the screen); and the device and app information the Google SDK sends by itself (for example device model, operating system and app version, a random identifier for this installation of the app and the IP address of the connection). • Ad measurement (Meta App Events, by Meta Platforms): to learn whether people who saw an Aysel ad installed and opened the app, signed up or looked at a package. What is sent: the app install and launch events the Meta SDK records by itself and three events of ours (account created, upgrade offer viewed, upgrade offer opened); the device and app information the Meta SDK sends by itself (for example device model, operating system and app version, an installation identifier and the IP address); and the advertising identifier: on Android the advertising ID; on iPhone the advertising identifier (IDFA) only if you allow tracking when Apple's App Tracking Transparency prompt asks at first launch. You can change that permission at any time on iPhone under Settings → Privacy & Security → Tracking, and reset or delete the advertising ID on Android in your phone's settings. • Never sent to Google or Meta: your name, e-mail address, account id, messages, question photos, answers or anything you write. Both providers also process this data in the United States (see Transfers abroad). Google and Meta keep it for the periods set under their own terms (for Google, according to the data-retention setting of our Analytics property); we keep no copy. Because we do not send them your account id, name or e-mail address, this data is not linked to your Aysel account on our side. Unless it is turned off, measurement runs for every user of the app, including learners aged 13 to 17.
Changes
We will publish updates to this notice on this page with a new version number.