Privacy Policy

2. Information We Collect

2.1 Data Collection Categories

2.2 Collection Methods

3. Purpose and Legal Basis for Processing

3.1 Primary Uses of Your Data

Service Delivery and Operation

• Providing core text-to-speech functionality
• Personalizing user experience and app interface
• Processing and fulfilling subscription services
• Maintaining app performance and stability
• Generating audio content from your text inputs

Communication and Support

• Responding to user inquiries and support requests
• Sending service-related notifications and updates
• Providing technical assistance and troubleshooting
• Processing feedback and feature requests

Business Operations and Compliance

• Conducting security monitoring and fraud prevention
• Performing analytics to improve our services using Google Analytics and Firebase
• Meeting legal and regulatory requirements under Turkish law
• Protecting intellectual property and user rights
• Ensuring compliance with Turkish Personal Data Protection Law

Marketing and Enhancement (with consent)

• Sending promotional materials about new features
• Conducting user research and feedback collection
• Analyzing usage trends for product development
• Delivering personalized content and recommendations

3.2 Legal Justification

We process your personal data based on:

• Contract Performance: To deliver the services you've requested under our Terms of Service
• Legitimate Interest: For security, analytics, and service improvement purposes
• Legal Compliance: To meet Turkish regulatory and legal obligations
• Consent: For marketing communications and optional features like location services

4. Data Sharing and Third-Party Access

4.1 When We Share Your Information

Service Providers and Partners

• Cloud hosting and data storage services (Firebase)
• Analytics platforms (Google Analytics, Firebase Analytics)
• Payment processing companies
• Advertising networks and marketing platforms
• Customer support and communication tools
• Performance monitoring and crash reporting services

Legal and Safety Requirements

• Law enforcement agencies when legally required under Turkish law
• Regulatory authorities for compliance purposes
• Legal proceedings and dispute resolution
• Protection of user safety and security
• Court orders and government requests

Business Operations

• Professional service providers (legal, accounting)
• Business partners for integrated services
• Potential acquirers in case of business transfer
• Third-party auditors for compliance verification

4.2 International Data Transfers

Your data may be processed and stored internationally, including in countries outside Turkey such as the United States and European Union member states, where our service providers (including Firebase, Google Analytics, and other technology partners) maintain servers and data centers. We ensure appropriate safeguards are in place for cross-border data transfers in compliance with Turkish Personal Data Protection Law and international data protection standards.

5. Data Security and Protection

5.1 Security Measures

Technical Safeguards

• Advanced encryption for data in transit and at rest
• Multi-factor authentication for administrative access
• Regular security audits and vulnerability assessments
• Automated backup systems and disaster recovery protocols
• Secure API endpoints and data transmission

Administrative Controls

• Staff training on data protection principles
• Access controls limiting data access to authorized personnel
• Confidentiality agreements with employees and contractors
• Regular policy reviews and security updates
• Incident response procedures

Physical Security

• Secure data center facilities with restricted access
• Environmental controls and monitoring systems
• Redundant power and network infrastructure
• 24/7 security monitoring

5.2 Data Breach Response

In the event of a security incident affecting your personal data, we will:

• Immediately investigate and contain the breach
• Notify the Turkish Personal Data Protection Authority within required timeframes
• Inform affected users promptly with details and guidance
• Implement additional protective measures as necessary
• Provide regular updates on remediation efforts

6. Your Privacy Rights and Choices

6.1 Access and Control Rights

Under Turkish Personal Data Protection Law, you have the right to:

• Access: Request information about what personal data we hold about you
• Rectification: Correct inaccurate or incomplete personal information
• Erasure: Request deletion of your personal data under certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your personal data
• Objection: Opt out of certain types of data processing, including marketing

6.2 Managing Your Preferences

App Settings

• Control notification preferences within the app
• Manage data sharing and analytics preferences
• Adjust privacy settings for specific features
• Configure voice and audio generation settings

Marketing Communications

• Unsubscribe from promotional emails
• Opt out of marketing notifications
• Update communication preferences
• Withdraw consent for marketing activities

6.3 Exercising Your Rights

To exercise your privacy rights, please contact us at support@tuspeech.com with:

• Your full name and account information
• Specific details about your request
• Proof of identity for verification purposes

We will respond to legitimate requests within 30 days as required by Turkish law.

7. Data Retention and Deletion

7.1 Retention Periods

We retain your personal data for:

• Account Data: Until account deletion or as required for the purpose of processing under Turkish Personal Data Protection Law
• Usage Data: 24 months for analytics and service improvement purposes
• Support Records: 5 years for quality assurance and legal compliance
• Financial Records: 10 years as required by Turkish Tax Procedure Law and accounting regulations
• Marketing Data: Until consent is withdrawn or 3 years of inactivity

7.2 Automatic Deletion

Data is automatically purged when:

• Retention periods expire according to Turkish legal requirements
• Account deletion is requested and processed
• Legal requirements no longer apply
• Business purposes are fulfilled
• You withdraw consent for specific processing activities

8. Age Restrictions and Parental Controls

8.1 Minimum Age Requirements

tuSpeech is not intended for users under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we discover we have collected information from a user under 18, we will delete it immediately.

If you are under 18, you must not use our services. Users must be 18 or older to create an account and use tuSpeech.

8.2 Age Verification

We may implement age verification measures to ensure compliance with this policy. If we cannot verify that a user is 18 or older, we may restrict or terminate their access to the services.

9. Cookies and Tracking Technologies

9.1 Types of Cookies Used

Essential Cookies: Required for basic app and website functionality
Analytics Cookies: Help us understand user behavior through Google Analytics and similar services
Preference Cookies: Remember your settings and personalization choices
Advertising Cookies: Used by advertising networks to deliver relevant content (where applicable)

9.2 Managing Cookies

You can control cookie preferences through your device settings or browser settings. Note that disabling certain cookies may limit app functionality. For mobile app analytics, you can opt out through your device's privacy settings.

9.3 Third-Party Analytics

We use Google Analytics and Firebase Analytics to understand how users interact with our services. These services may use cookies and similar technologies to collect usage information. You can opt out of Google Analytics through Google's opt-out tools.

10. Third-Party Services and Links

tuSpeech may integrate with or link to third-party services including:

• Payment processors
• Social media platforms
• Cloud storage services
• Analytics providers
• Advertising networks

This Privacy Policy does not cover third-party practices. We encourage you to review the privacy policies of any external services you access through our app.

11. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service features. We will notify users of significant changes through:

• In-app notifications
• Email notifications to registered users
• Website announcements
• Push notifications where appropriate

Continued use of tuSpeech after updates constitutes acceptance of the revised policy. Material changes will be highlighted and explained clearly.

12. Contact Information and Data Protection

12.1 General Inquiries

For questions about this Privacy Policy or our data practices:

tuPandas
BAGLARBASI MAH SAKARYA SK DiskapiNo: 31 /1
Daire:0002 MALTEPE
Email: support@tuspeech.com

12.2 Data Subject Requests

To exercise your privacy rights or submit data-related requests, please contact us at support@tuspeech.com. Include:

• Your full name and contact information
• Specific details about your request
• Proof of identity for verification purposes

We will respond to legitimate requests within 30 days or as required by applicable law.

12.3 Regulatory Complaints

If you believe we have not addressed your privacy concerns adequately, you have the right to file a complaint with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) or other relevant data protection authorities in your jurisdiction.

12.4 Data Protection Officer

For complex data protection matters or questions about compliance, you may contact our data protection team at support@tuspeech.com with "Data Protection" in the subject line.