Privacy Policy

We may collect the following types of data:

1.1 Personal Information

Only if you choose to provide it:

• Name
• Email address
• Phone number
• Account information

1.2 Usage Data

Automatically collected:

• Device information
• Service interactions
• Crash logs
• Analytics data for improving performance

1.3 Permissions

If required by the service:

• Camera
• Microphone
• Photos/Media
• Location

Users may grant or revoke permissions at any time through device settings.

1.4 Data types (for App Store & Google Play Data Safety)

So that our declarations match this policy, the data we may collect includes (depending on product and version):

• Email and account identifiers – e.g. email address, user ID, account information
• User-generated content – e.g. profile information, course notes, schedules, and other content you submit
• Device or other identifiers – e.g. device information, app instance ID, operating system
• Analytics data – e.g. usage, interactions, crash logs, performance data

When filling in the App Store Privacy Nutrition Labels or Google Play Data Safety form, only declare data types and purposes that are described in this policy. Keep those declarations in sync with any product changes.

We use collected data to:

• Provide and improve service functionality
• Personalize user experience
• Offer customer support
• Ensure security and prevent fraud
• Comply with legal requirements

We do not sell, rent, or trade your data under any circumstances.

Retention:

• Account and profile data: kept while your account is active; after account deletion, removed within 30 days.
• Usage and analytics data: anonymized or deleted within 24 months unless a shorter period is required by law.
• Support and contact messages: retained as needed to resolve requests, then deleted in line with our retention policy.

Security (Güvenlik):

Your data is stored on secure servers using industry-standard encryption. We take reasonable measures to protect your information from unauthorized access, alteration, or disclosure.

We do not sell, rent, or trade your personal data.

We do not sell your personal data. We may share data only in these cases:

• Service providers (e.g. cloud hosting, analytics, authentication): only the minimum data needed to operate the service, under strict confidentiality.
• Legal obligation: when required by law or to protect our rights and safety.
• With your consent: for purposes you have explicitly agreed to.

Third-party providers are bound by contracts that require them to protect your data and use it only for the specified purpose.

Third-party SDKs and services we may use: We may use third-party service providers such as analytics tools (e.g. Google Analytics, Firebase), cloud hosting providers, and payment processors (if applicable) to operate and improve our services. Which specific SDKs collect data depends on the version of our app and website; we use only what is necessary for the service and ensure our App Store and Google Play Data Safety sections stay in line with this policy.

If you have questions about a specific provider, contact us at the email in the Contact section below.

This service is not intended for children under 13 (or the applicable minimum age in your country, if higher).

We do not knowingly collect personal data from children under that age. If we discover that we have collected such data, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at the email in the Contact section so we can remove it.

Because OnlyCampus is used by students for courses and planning, we take this restriction seriously and expect users to meet the minimum age requirement.

Your data may be processed in countries outside your country of residence (for example, where our servers or service providers are located). When we transfer data internationally, we do so in line with applicable law and subject to appropriate safeguards, such as standard contractual clauses, adequacy decisions, or other mechanisms recognized by KVKK, GDPR, or local data protection authorities.

If you have questions about how your data is protected when transferred, contact us at the email in the Contact section.

You have the right to:

• Access your personal data
• Request correction or deletion
• Withdraw consent
• Object to processing or request restriction
• Data portability where technically feasible

In Türkiye, these rights are also supported by the Law on Protection of Personal Data (KVKK). To exercise any of these rights, contact us at the email in the Contact section below. We will respond within the time required by applicable law (e.g. 30 days under KVKK).

For account and data deletion steps, see our Data Deletion page.

We may update this Privacy Policy when necessary.

All updates will be posted here, and continued use signifies your acceptance of the revised terms.

General and support: See our Contact & Support page.

Privacy and data requests (access, correction, deletion, objections):

Email: support@onlycampus.ai

Subject line: "Privacy request" or "Data request". Include the email or identifier linked to your account so we can process your request.

Owner: OnlyCampus