Kepyil
Separate consents
For students under 18, a parent gives separate consent for data processing, storage abroad, photos and AI moderation. No box is ticked in advance.
Safety and KVKK
Children’s yearbooks, carefully protected.
A yearbook carries children’s names, photos and messages. We designed Kepyil with that in mind: the school is the data controller, and we process data on the school’s behalf and under its instructions. KVKK is the Turkish data protection law.
Data
It’s clear who sees what.
Limited visibility
Phone numbers and e-mails are visible only to teachers and school management. Classmates see the name, the class and, if allowed, the photo.
No ads, no sales
Data is never used for ads and never sold. The servers are in the European Union (Frankfurt).
Retention
Original photos and messages are deleted 12 months after the yearbook is delivered. Account deletion: the account closes at once and is fully deleted after 30 days.
Passwordless sign-in
Sign-in uses a one-time code sent by e-mail, so there’s no password to guess or leak.
Your rights
You can exercise your rights under KVKK by contacting the school or Kepyil. Details are in the Privacy Policy.
Messages
A hurtful message doesn’t make it into the book.
- Rule-based checks. Profanity, insults, personal details (phone number, e-mail, account name), hidden acrostic messages and characters that can’t be printed are caught; the writer is invited to fix the message.
- Teacher review. Unclear messages go to the teacher, who approves, asks for a fix, or doesn’t publish.
- Self-harm signal. A message showing such a signal is flagged and reported to the teacher.
- The student’s control. Everyone can hide a message on their own page, report it, or block the writer. Reports reach the platform team as well.
Does your school need more detail?
Write to us for the privacy notice, the explicit consent texts and the data processing steps.
Frequently asked
Common questions
Is Kepyil KVKK compliant?
Kepyil is designed to work in line with KVKK: the school is the data controller, parents give explicit consent separately, data is visible to few people and is deleted after set periods. We recommend that your school review it with its own legal adviser.
Where is data stored?
The database and files are kept on servers in Frankfurt, in the European Union. Because this is a transfer abroad, a separate consent is taken from the parent.
Does AI read the messages?
Only if the parent has given that consent: messages are sent to an AI model for an inappropriate-content check without the names in them. Without consent, messages go through rule-based checks and teacher approval.
How do I delete my account?
In the app: Me → Account and privacy → Delete my account. The account closes at once and is fully deleted after 30 days. If you can’t access the app, follow the steps on the account deletion page.