ATAC Med. School

Privacy Policy

This document describes how ATAC Med. School's website and mobile app collect, use and protect your personal data.

Effective: 2026-05-24 · Last update: 2026-05-28

  1. 1. Purpose and Scope

    This Privacy Policy explains how we collect, use and protect personal data when you use the ATAC Med. School website and mobile application (the "Service"). By using the Service you agree to the practices described here. Users subject to Turkish law (KVKK) may also refer to the Turkish KVKK Information Notice on the Turkish site.

  2. 2. Data Controller

    The data controller for the Service is the operator of the platform offered under the ATAC Med. School brand.

    Contact: ggok.yusuf@gmail.com.

  3. 3. Data We Collect

    Depending on how you use the Service, we process:

    • Information you provide at signup: first name, last name, email address, university, year of study.
    • Account information: user ID, user code, subscription status, profile updates.
    • Learning data: questions answered, correct/wrong records, per-subtopic performance, total answered, accuracy ratio, daily streak.
    • Content preferences: saved questions, your wrong-answer pool, answers given in the anatomical structure labeling exercise.
    • Social data: friend requests and friend list.
    • Support requests and account deletion logs.
    • Payment/subscription state (handled by App Store / Google Play; we do not store your card details).
    • Device and technical data: app version, error logs, IP / device identifiers.

  4. 4. Why We Process Data

    We process your data to:

    • Create your account, sign you in, and authenticate you.
    • Deliver and personalize content (your wrong-answer pool, module progress, streak).
    • Run the quiz, anatomy labeling, and statistics features.
    • Manage subscriptions and gate premium content.
    • Detect errors, secure the Service and prevent abuse.
    • Respond to support requests.
    • Comply with legal obligations and protect rights.

  5. 5. Legal Bases

    Where applicable, processing is based on contract performance (delivering the Service), compliance with legal obligations, and our legitimate interests (security, improvement, abuse prevention). Where required by law, explicit consent is requested separately.

  6. 6. Data Sharing

    Your data may be shared with the following categories of recipients for the purpose of providing the Service:

    • Cloud and infrastructure providers (e.g. Google Firebase) — authentication, database, Cloud Functions, logging.
    • Subscription platforms — Google Play and Apple App Store.
    • AI assistant provider (Anthropic) — the questions you type and any images you attach to the AI assistant are sent to Anthropic to generate a response; this content is not used for advertising.
    • Competent authorities — where legally required.

  7. 7. International Data Transfers

    Because we use Firebase, store platforms and an AI assistant provider, your data may be processed or stored on servers outside your country (including in the EU, US or elsewhere) by Google, Apple and Anthropic. We aim to apply appropriate technical and organizational safeguards for such transfers.

  8. 8. Retention

    Account data is retained while your membership is active, and thereafter for the periods required by law or for handling disputes. Learning/statistics data is kept as long as needed for the Service's functionality. Error and log records are limited to reasonable periods (e.g. 6–24 months). When you delete your account from within the app, your profile, answer history, wrong-answer pool, saved questions and friend records are deleted or anonymized.

  9. 9. Security

    We apply technical and organizational measures to protect your data — access control, secure transport (TLS), owner-based access rules on Firestore, least-privilege principle, and error monitoring. No internet-based system is 100% secure, but we treat security as a continuing obligation.

  10. 10. Cookies and Similar Technologies (Web)

    The ATAC Med. School website may use cookies and similar technologies that are necessary for session management, security and core functionality. You can manage cookies via your browser settings; some features may be limited if you disable them.

  11. 11. Your Rights

    Subject to applicable law (including GDPR for EU/EEA users and KVKK for Turkish users), you may have the rights to be informed about and access your data, request correction or deletion, object to certain processing, withdraw consent, and lodge a complaint with a supervisory authority. To exercise these rights contact: ggok.yusuf@gmail.com.

  12. 12. Children's Privacy

    Data of users who are not of age may be processed only with legal guardian permission and within the limits of applicable law. If you believe the data of a minor has been processed unlawfully, please contact us.

  13. 13. Changes

    We may update this policy from time to time. The current text takes effect when published on the Service. For material changes we may notify you in-app or by email.