KVKK Clarification Notice

1. Data controller (Veri sorumlusu)

Innovative Teknoloji is the data controller for personal data processed through ScopeFocus and TabletX. Where an organisation deploys TabletX at its own premises and decides why and how its members' results are processed, that organisation is the controller for those results and Innovative Teknoloji acts as its data processor (veri işleyen).

2. Personal data processed (İşlenen kişisel veriler)

• Identity (Kimlik) — the display name chosen for playing, and an age band — both optional
• Contact (İletişim) — email address, only if you sign in with Google or join a team
• Transaction security (İşlem güvenliği) — session and device-pairing records created when you sign in, including short-lived device codes
• Performance data — game results: scores, accuracy, reaction times, streaks, and the cognitive dimension each game measures
• Reports — AI-generated summaries produced from your own performance data at your request

3. Purposes of processing (İşleme amaçları)

• Running the games and showing you your own results
• Keeping progress in sync across the screens you play on
• Producing the reports you ask for
• Operating team and competition features where an organisation has deployed TabletX
• Keeping the service secure, and diagnosing faults

4. Legal basis (Hukuki sebep)

Processing rests on Article 5 of the Law:

• Article 5/2(c) — necessary for the performance of a contract — running the product you asked to use
• Article 5/2(ç) — necessary for the controller's legal obligations
• Article 5/2(f) — legitimate interests, for security and fault diagnosis, balanced against your rights
• Article 5/1 — explicit consent (açık rıza), for anything optional — cross-device sync, interaction analytics, and AI report generation. Each can be declined, and declining does not stop you playing.

5. Transfers (Aktarım)

Data is transferred to service providers only so far as the product needs them to work, and never sold. Some of these providers process data outside Türkiye, which is a transfer abroad (yurt dışına aktarım) made on the basis of your explicit consent where required:

• Vercel — hosting, and aggregate page-view and performance measurement
• Turso — the edge-replicated database holding synced results
• Google — sign-in, and Gemini for AI report generation when you request a report
• Microsoft Clarity — interaction analytics — off until you allow it, and revocable at any time

6. Method of collection (Toplama yöntemi)

Data is collected electronically, through the browser or the TabletX application, as you play, sign in or request a report. Results are written to the device first; they leave it only where sync or a report is requested.

7. Your rights (İlgili kişinin hakları — Madde 11)

• Learn whether your personal data is processed
• Request information about processing, and learn its purpose and whether it is used accordingly
• Know the third parties to whom data is transferred, in Türkiye or abroad
• Request correction of incomplete or inaccurate data, and notification of that correction to third parties
• Request erasure or destruction where the grounds for processing have disappeared, and notification of that to third parties
• Object to a result produced solely by automated analysis that works to your detriment
• Claim compensation for damage arising from unlawful processing

8. Making an application (Başvuru)

Applications under Article 11 are made in writing to the data controller, in Turkish or English, with enough detail to identify you and the request. They are answered within thirty days at the latest, free of charge unless the request requires a cost, and you may complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) if you are not satisfied with the answer.

Send applications to Innovative Teknoloji. Requests to delete synced results can also be made from the profile page, and local data can be cleared from your browser at any time without asking anyone.