Privacy notice

Who is responsible

BoccoPrep, is the data controller. Contact: mtanaygungor@gmail.com.

Age requirement

Accounts and submissions are for people aged 18 or over. Before these actions, we ask you to confirm that you are an adult. We store a necessary signed age-confirmation cookie for up to one year; we do not ask for your date of birth or an identity document. This is a self-declaration, not independent proof of age. If you are under 18, do not submit personal information. Contact us to request removal of information submitted in error.

What we process

Account: name and e-mail from Google sign-in, a stable account id, interface language and time zone.

Study data: onboarding answers, attempts, answers and timings, saved and reported questions, study plan and streak.

Purchase data: order id, plan, amount, currency and status. Card details never reach us; they are processed by the payment provider.

AI follow-up: the question you selected, its prepared solution and your message are sent to the AI provider to generate one reply; requests are not stored by the provider for training and we keep only daily usage counts.

Technical data: server logs with truncated IP addresses kept for at most 30 days for security.

Why and on what basis

Providing the service you asked for (contract). Security, fraud and abuse prevention (legitimate interest). Accounting records (legal obligation). Marketing e-mail and analytics/advertising cookies only with your consent, which you can withdraw at any time.

Leaderboard

If you complete 200 questions in 30 days your first name and the initial of your last name appear on the leaderboard together with your accuracy. No other data is shown.

Retention

Account and study data: while your account exists and 12 months after the last sign-in. Orders: 10 years (tax law). Logs: 30 days. Consent records: as long as needed to prove consent.

Your rights

Access, correction, deletion, restriction, portability and objection. You can export all your data and delete your account from Profile & settings. You may also complain to your supervisory authority (in Türkiye the KVKK Board; in the EU your national authority).

Transfers

Hosting, Google sign-in, the payment provider and the AI provider may process data outside your country. We rely on their standard contractual clauses and document each processor before launch.