İlk Adım: İslamApp transparency center
Data and privacy

Privacy Policy

On-device learning data, Google advertising services, retention, security, and user rights.

Türkçe oku
On this page
  1. 1. App, scope, and independence
  2. 2. Information processed on the device
  3. 3. Google Mobile Ads and UMP
  4. 4. Network use, external links, and sharing
  5. 5. Retention, backup, and deletion
  6. 6. Children and teens
  7. 7. Security and international transfers
  8. 8. Requests and rights
  9. 9. Changes and references

Policy version: 1.0
Effective date: 2026-09-01
Data controller/publisher: darklove
Privacy contact: darkloveai@gmail.com

This policy reflects the source code, dependencies, and merged release manifest of app version 1.0 (1). It is not ready for public release until the publisher identity, contact address, and effective date are completed.

1. App, scope, and independence

İlk Adım: İslam is an independent educational app with age-appropriate lessons, quizzes, review activities, and progress tools for children, teens, and adults. It is not a product, service, or representative of the Presidency of Religious Affairs of Türkiye (Diyanet). Links to official Diyanet publications provide source transparency; they do not indicate partnership, authorization, or institutional support.

2. Information processed on the device

Core learning does not require an account or a developer-operated backend. The following may be processed locally in the Android app's Room database and DataStore preferences:

  • age group, visual profile, theme, notification/reminder, and similar choices;
  • an optional profile display name entered by the user;
  • completed or accessed lessons, quiz results, and learning activity times;
  • bookmarks, review queue, correct/incorrect outcomes, and review schedule;
  • badges, achievements, points, stars, streak, daily goal, and session state;
  • local content-package version, integrity, and publication state.

The app does not request an email address, phone number, street address, precise location, or date of birth for core use. The selected age group is stored as an experience and safety preference.

These local operations provide requested app functions, preserve progress, apply the age-appropriate experience, maintain security, and keep invalid or incomplete content from users. Depending on the release circumstances, applicable legal grounds may include necessity for providing the requested service and the controller's legitimate interests; where advertising/privacy operations require consent, the relevant consent mechanism is used. The publisher remains responsible for the final legal-basis assessment.

3. Google Mobile Ads and UMP

The app includes Google Mobile Ads SDK 25.4.0 (AdMob) and Google User Messaging Platform SDK 4.0.0 (UMP). Mobile Ads is not initialized until an exact age profile is known. Where required, consent information is updated through UMP and Google's own consent form is shown. If UMP reports that a privacy-options entry point is required, the in-app Legal & Privacy Center makes that entry visible.

Google's current SDK disclosure states that Mobile Ads may automatically collect and share IP address (which can estimate general location), product interactions, diagnostic information, and device/account identifiers for advertising, analytics, and fraud-prevention purposes. Data in transit is protected with TLS. The app manifest expressly removes AD_ID and Android Privacy Sandbox advertising permissions; this does not mean the SDK cannot process app set ID, other applicable identifiers, or technical data.

Advertising behavior:

  • no automatic lesson-completion interstitial is shown for a child profile;
  • the Support-screen ad is voluntary and does not unlock lessons, points, or required features;
  • for teen and adult profiles, an interstitial can appear only after the result screen and only when consent, readiness, and frequency conditions are satisfied;
  • SDK ad content is limited to a maximum G rating;
  • an ad or consent-network failure does not erase progress, close the app, or block offline lessons.

Personalization and mediation depend on region, the user's UMP choice, and the publisher's AdMob account settings. Before release, the publisher must verify production mediation partners, user metrics, regional privacy messages, and the SDK version permitted for child-directed use.

4. Network use, external links, and sharing

The merged manifest contains INTERNET and ACCESS_NETWORK_STATE for advertising/consent services. SDK dependencies also add WAKE_LOCK and FOREGROUND_SERVICE; the app source defines no custom Worker or foreground service.

The app may use the network or another app for:

  • UMP consent information and AdMob ad request, loading, display, and measurement;
  • opening a verified diyanet.gov.tr HTTPS source in the system browser at the user's request;
  • opening published legal pages in the system browser;
  • sending user-initiated progress text to the Android share target chosen by the user.

Cleartext HTTP traffic is disabled. The external browser, selected share target, and Google services apply their own terms and privacy practices.

5. Retention, backup, and deletion

Local learning information can remain until the user deletes it, clears Android app storage, or uninstalls the app. Bookmarks can be removed individually in the app. This version has no single in-app control that resets every category of local learning state.

Android cloud backup and device-to-device transfer are disabled, with database, preferences, file, and external domains excluded. The app therefore makes no promise of automatic cloud restoration. Clearing app storage or uninstalling deletes local records. Data processed by Google for advertising/consent can remain outside the app's local deletion boundary; Google's controls and request channels apply.

6. Children and teens

The app has experiences for ages 7–12, 13–17, and 18+. Restrictive behavior applies to child and unknown profiles: there is no automatic SDK startup, Android advertising-ID permissions are removed, and child profiles receive no lesson-completion ad. A parent or legal guardian should supervise external links and sharing. See child-teen-privacy-notice-en.md for a separate layered explanation.

7. Security and international transfers

Local information remains in the Android app sandbox; cleartext networking and automatic backup are disabled. External traffic uses HTTPS/TLS. No technical measure is an absolute security guarantee.

Depending on Google service and subprocessors' locations, international data transfers may occur. Before release, the publisher must determine the relevant AdMob/UMP configuration, Google contracts, and applicable transfer mechanism, and update this policy when necessary.

8. Requests and rights

Subject to applicable law, individuals may ask whether personal data is processed, request information, learn the purposes and recipients, request correction, request deletion when legal conditions apply, and exercise other available rights.

Requests may be sent to darkloveai@gmail.com. Only information necessary to verify and securely answer the request should be sought. Because no developer server account stores learning records, the publisher cannot remotely access or erase data held only on a user's device.

9. Changes and references

The policy is reviewed when app behavior, SDK versions, advertising settings, or legal requirements change. A new version and effective date will be published. Principal references:

This document describes the product's actual behavior; it is not legal certification or individualized legal advice.