Privacy policy

1. Who we are

Yallapp is a trading name of WEBEK LTD, a company registered in England and Wales under company number 16326894, with its registered office at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. WEBEK LTD is the data controller for the personal data described here. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. When we process data of people in Türkiye or the European Union, we also follow the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR). Contact: info@yallapp.com.tr.

2. Data we collect from our clients

• Account details: name, email, WhatsApp number and a securely hashed password.
• Website and app details: your website address, app name, logo, icons, colors and store listing text.
• Publishing credentials: Google Play and App Store Connect keys, if you choose to add them. These are stored encrypted.
• Billing records: your plan, dates and payment notes.
• Messages you send us, and technical logs such as IP address, browser and sign-in times.

3. Data about your students

The Yallapp plugin runs on your WordPress website. Your students’ accounts, phone numbers, progress and orders stay in your website’s database, and Yallapp’s servers do not receive them. License checks send only your website address, plugin version and license key. You are the data controller for your students and should give them your own privacy notice. Push notifications are sent through your own Firebase project. If you ask us for help with a problem involving a student, we use only the data you share with us, and only on your instructions.

4. Why we use your data, and our legal basis

• To provide your account, build your apps and publish them when you ask us to (performance of a contract).
• To support you and keep the service secure (legitimate interests).
• To keep accounting and tax records (legal obligation).
• To send service emails about your account and builds (performance of a contract).

5. Who we share it with

We share data only with providers that help us run Yallapp: website hosting (Netlify), our own servers for the database and build files, the build service that compiles your apps, and Apple or Google when we publish for you. We may also share data with professional advisers or authorities when the law requires it. We never sell personal data.

6. International transfers

We are based in the United Kingdom. Some of our providers are in other countries, such as the United States. When data leaves the UK, Türkiye or the European Union, we use the safeguards the law requires, such as the UK International Data Transfer Agreement or Addendum, standard contractual clauses, and the transfer rules in Article 9 of KVKK.

7. How long we keep it

We keep account data while your account is active and for up to 12 months after it closes. Billing records are kept for 6 years, as UK tax law requires. Signing keys are kept until you ask us to delete them after your account ends. Technical logs are kept for up to 12 months.

8. Security

All connections use HTTPS. Publishing credentials and signing keys are encrypted at rest, and only the people who need access have it.

9. Your rights

Under the UK GDPR, you can ask to access, correct or delete your data, restrict or object to how we use it, and receive a copy in a portable format. KVKK (Article 11) and the EU GDPR give you similar rights, including the right to know who your data was shared with. We reply within one month. Email info@yallapp.com.tr. You can also complain to the UK Information Commissioner’s Office (ico.org.uk), the Turkish Personal Data Protection Authority (kvkk.gov.tr), or the data protection authority in your EU country.

10. Cookies

We use only the cookies needed to keep you signed in. We don’t use advertising or tracking cookies.

11. Changes and contact

We will post changes here and email you about important ones. Questions: info@yallapp.com.tr or WhatsApp +90 544 673 19 42.