BlueGraysArduino · ESP32 · Pico

BlueGrays Privacy Policy

This is an English translation. In case of any conflict, the Turkish version prevails.

Last updated: October 31, 2026

Version: 2.0

This policy explains in plain language what data we collect in the BlueGrays iOS and Android apps and on bluegrays.com, how we use it, who we share it with and how you stay in control of your data. The detailed notice required under Turkish law is in the KVKK Privacy Notice. The two documents are consistent with each other.

1. Who are we?

BlueGrays is developed and operated by Yunus Emre EKE, who is the person responsible for your data.

  • Address: Beylikdüzü, Istanbul *****
  • For privacy questions and requests: [email protected]
  • Phone: *****

2. Data we collect

What you give us

  • First name, last name, username and email. When you sign in with Google or Apple, the name and email these companies share.
  • Password. Only an irreversible hash of it is stored.
  • Profile photo and preferences such as language.
  • Your inventory, favorites, ratings, completed projects and guide progress.
  • Your answers to Daily Questions, your XP, level and streak.
  • Your forum posts, comments, the photos and code you share, and the projects you submit.
  • Your reports and the users you've blocked.
  • Support requests and their attachments, content or copyright notices.
  • Your answer to the "How did you hear about us?" survey (optional).

What's collected automatically

  • IP address and the country derived from it.
  • Device and browser information, operating system, app version, time zone.
  • Transaction logs (the time of actions such as signing in, posting content and uploading files).
  • Notification address (FCM token).
  • App usage events, crash and performance reports (Firebase).
  • On Android, Google Play install referrer information (which link brought you here). On iOS, Apple's ad attribution information, which contains no personal data.
  • Advertising ID: the Android advertising ID; on iOS, IDFA only if you grant "Tracking" permission. It's used only to measure our promotional ads.
  • Strictly necessary cookies on the website. Analytics and marketing cookies only if you allow them.

Purchases

Payment is collected by the App Store or Google Play, so your card details never reach us. We only see which product you bought, its period, the transaction ID and the status of your subscription.

What we don't collect

GPS location, date of birth or age, your contacts, health and biometric data. We access the camera and gallery only when you want to take or pick a photo, and only for that photo.

3. What do we use data for?

  • Opening and protecting your account and providing the app's features: projects, Workshop, badges, questions, league, forum.
  • Running Premium and purchases, managing Educator Pack codes, and making you time-limited personal offers.
  • Responding to support requests and notices, moderating the forum, preventing abuse.
  • Sending account and security emails and service notifications. We send campaign and discount messages only if you've given consent.
  • Improving the app, fixing bugs, and measuring which channel you found BlueGrays through.
  • Measuring how many installs our promotional ads lead to (only with your permission).
  • Meeting our legal obligations.

We don't sell your data.

4. Who do we share data with?

  • Infrastructure: Amazon Web Services (database, Frankfurt), Cloudflare (content delivery, security, file storage).
  • Google: Firebase Analytics, Crashlytics, Performance, Cloud Messaging; Google Analytics 4 and Google Tag Manager (web, with your permission); Google Ads (with your permission); Sign in with Google; YouTube videos; Google Play.
  • Apple: Sign in with Apple, App Store, ad attribution.
  • Meta: Meta SDK in the app; Meta Pixel on the web (only if you allow marketing cookies). Only for measuring promotional ads.
  • RevenueCat: Subscription management. Your user number, email, name, country, sign-up method, user source and purchase records are shared.
  • Twilio SendGrid: Sending emails.
  • Slack: Our team's internal notification tool. Your name, username and email on new sign-ups and sign-ins; support and report texts; security alerts.
  • DeepL: Automatic translation of app texts and of search terms in languages other than Turkish. No identity information is sent.
  • Educators: If you redeem an educator's code, that educator sees your first name, last name, username, email and profile photo.
  • Other users and the public: Your forum posts are public together with your username and profile photo, and they may show up in search engines. Other members in the app can also see your first and last name. Your username appears in the league; you can turn this off.
  • Authorities: When required by law.

Our service providers process your data only to provide their services to us. We require them by contract to give your data the same or equivalent protection as this policy. Some of these providers process data in the US, Ireland and Germany. Transfers abroad are made with the safeguards in Article 9 of the Turkish Personal Data Protection Law (Kişisel Verilerin Korunması Kanunu).

5. How long do we keep data?

  • Account data is kept as long as your account is open.
  • Transaction and traffic logs are kept for up to 2 years, then deleted automatically.
  • Purchase records are kept for at least 3 years, with the direct link to you removed.
  • Promotional consent records are kept for 3 years after consent is withdrawn.

Detailed periods are in Section 6 of the KVKK Privacy Notice.

6. Deleting your account and data

  • In the app: Profile > Security > Delete Account.
    • Freeze: Your account is hidden and reopens if you sign in again. This is not deletion.
    • Permanent deletion: Your account and the data linked to it, including your forum posts, comments, inventory, progress and support requests, are deleted or anonymized.
  • If you can't access the app: Sign in on bluegrays.com and use the "Delete account" section on the Profile page, or send an email with the subject "Account deletion" from your registered email address to [email protected]. We'll resolve your request within 30 days.
  • What remains after deletion: As required by law, transaction and traffic logs, and the "deleted account" record kept to match them (user number, email, username, deletion date), are kept for up to 2 years. Purchase records are kept with the link to you removed.
  • Subscription: Deleting your account doesn't cancel your store subscription. You need to cancel it in the App Store or Google Play.

7. Your choices and withdrawing permission

  • Promotional messages: You can turn them off in Preferences in the app or use the "unsubscribe" link in the email.
  • Ad measurement: On Android, you can turn it off in the app under Profile > Preferences > Ad Measurement. On iOS, you can change it under Settings > Privacy & Security > Tracking. On Android, you can delete or reset your advertising ID in your device settings.
  • Web cookies: Through the "Cookie preferences" link at the bottom of the site.
  • Notifications: In your device settings and in the question reminder settings in the app.
  • League visibility: In Daily Questions settings.
  • Other rights: To use your rights to access, correct and delete your data, to find out where it has been transferred and to object, write to [email protected] (see the KVKK Privacy Notice, Sections 9 and 10).

8. Children

BlueGrays is educational and has no age limit. Students use it too. We don't ask for age. We process children's data only as far as needed for the service, and we don't use it to build marketing profiles. We recommend that users under 18 use BlueGrays with their parents' knowledge, that parental consent is obtained for paid purchases, and that information such as full name, school and address isn't shared on the forum. Parents can write to [email protected] with any request about their child's account.

9. Security

Passwords are stored irreversibly, and all connections are encrypted. Admin access is restricted and monitored. If there's a data breach, we notify the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within 72 hours and inform the affected users as soon as possible. No system is completely risk-free, so it's important that you don't share your password with anyone.

10. Changes

When we update this policy, we change the date and version at the top. We announce important changes in the app. The current policy is always available in the app under Profile > Preferences > Agreements and at bluegrays.com/en/legal/privacy-policy.

All agreements