Perlecta — Privacy Policy

Türkçe · English

Last updated: 17 August 2026 · English translation published 29 July 2026

This policy explains how the Perlecta application processes your personal data. Perlecta is an OCR (optical character recognition) application that converts photographs of documents into tables or text.

1. Data Controller

This application ("Perlecta") is operated by Dedeyunus Keskin (sole proprietor). Contact: [email protected] · Address: Kayseri, Türkiye. Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is Dedeyunus Keskin.

2. What Data We Collect

We do not collect advertising identifiers, location, contacts, or separate analytics tracking.

Perlecta does not sell or rent user data, and does not share it with third parties for advertising purposes.

3. Who We Share Your Data With

In order to provide the service, your data is sent to the following services, and only for the purposes stated:

• Google (Gemini) and Mistral AI — your document image/text is processed for character recognition. Besides character recognition, these providers are also used for any other AI operations you request: translation, document summary/analysis, table generation, file-name suggestions and editing instructions you type yourself (e.g. "move the date column to the front"). In other words, not only document content but also the text you write for these operations is transmitted to the provider.
• Google Drive — only if you choose "Open in Google Sheets/Docs", the file we generate is sent to your own Drive. We cannot access your Drive — our permission only covers delivering the file we created ourselves (the drive.file scope).
• RevenueCat / the app store — subscription verification. Card details are processed by the store; we never see them.
• Resend (e-mail infrastructure, USA) — only your e-mail address is transmitted, so that account verification and password reset e-mails can be sent. Your documents never go to this service.
• Backblaze (backup infrastructure, USA) — our nightly backups are stored there. Each backup is encrypted before it leaves our server and the decryption key is held only by us; Backblaze cannot read the content (see §4 "Backups").
• Telegram (notification infrastructure) — used to send security and abuse alerts to the person operating the service. When such an alert is triggered (for example unusually heavy use of a single account, or repeated refunds), the notification includes your e-mail address. Your documents, scans and files never go to this service.
• Expo (app update infrastructure, USA) — if the app fails to start, it checks for an update so that it can repair itself. That check transmits only a technical identifier for your installation and version information; your name, e-mail address and documents are not transmitted.

Privacy policies of these services: Google · Mistral AI · RevenueCat · Resend · Backblaze · Telegram · Expo.

Voice input: When you dictate into a cell, your voice recording is not sent to our server — your phone's own speech recognition feature is used. This feature is provided by your device's operating system (Android/iOS), and your voice may be sent to that service in accordance with the device manufacturer's own policy. Only the resulting text reaches us.

The servers of these services may be located abroad; document content may be transferred abroad for processing purposes, with the necessary safeguards taken under KVKK art. 9.

3.1 Do the AI providers use my document for training?

Perlecta uses the paid (enterprise) tier of the Google Gemini API and the Mistral AI API — not the free/trial tier. According to these providers' own current statements:

• Google Gemini API (paid): submitted content is not used for product improvement or model training; it is logged only briefly for abuse detection, security and legal compliance.
• Mistral AI API (paid): inputs/outputs are not used for model training; they are retained for 30 days for abuse monitoring and then deleted automatically. Perlecta does not send any feedback signal to these providers.

An honest limit: This is the current policy published by the providers themselves — Perlecta cannot control it and cannot guarantee the behaviour of a third party. If Perlecta moves to a different provider in the future, this section will be updated; the principle will not change: only the paid/enterprise tier is used, and content is not shared for training purposes.

3.2 AI processing and user verification

Perlecta uses AI-assisted OCR services to convert your documents into text or tables. The AI output is not an automated or final decision — the result is shown to you, and you can edit and verify any cell you wish. OCR results can always contain errors; the final check belongs to the user.

4. How Long We Keep Data

Perlecta does not store your documents on its server — but we want to tell you exactly what is kept and for how long: (1) The photograph of your document is never saved — it is deleted from server memory immediately after being sent for character recognition. (If you send a PDF, the file is written to a temporary folder for the duration of processing so that it can be split into pages, and is deleted when processing ends — even if an error occurs.) (2) The file we generate (Excel/Word/PDF) is sent to your phone; no copy is kept on the server. (3) The text read in order to generate your file is held temporarily until you press "save", and is deleted the moment you save; if you abandon a scan midway, this temporary record is deleted automatically within 1 hour at the latest (the system cleans up every 15 minutes). (4) If you have saved a template, that template's column headers remain in your account until you delete them, so that the feature can work. Apart from these, your documents stay in the app's own storage on your phone; because we do not keep them, the security and backup of that storage are your responsibility.

• The photograph of the document you scan is never stored on our server. The image is deleted from server memory as soon as it is sent to the provider for character recognition; our database contains no field reserved for images. Document content is not kept in server access logs either — only technical information (such as the image's size/format) is logged briefly.
• Your scan results are not stored on our server. Your document (text/table and the Excel/Word/PDF file) is generated on demand, delivered to your device and not retained on our server; after delivery it exists only on your own device. Storing, backing up and securing these files after delivery is your responsibility. A result deleted from your device, or lost when you uninstall the app, cannot be recovered from us — we hold no copy; you can re-scan the photograph of the document and regenerate the result.
• Account information: until your account is deleted.
• When you delete your account: your name, e-mail, templates and all your records are deleted. A single trace remains: an irreversible digest of your e-mail address (a string produced by one-way encryption; your e-mail address cannot be recovered from it). We keep this for one purpose only — to prevent the free trial entitlement from being claimed over and over with the same address. This trace contains no other information (no name, documents or scan counts).
• Scan quality statistics (§2): document content is never written; the numerical records are deleted automatically after 30 days.
• Connection logs (IP address — §2): kept for security purposes, rotated daily, with at most 14 days of history retained; older entries are deleted automatically.
• Crash and feedback records: these are kept not in a database but in the server's technical log files. These files are overwritten in rotation — at most 5 files are kept, and the oldest is deleted once full. How far back they reach depends on usage intensity: at today's volume roughly 2 weeks, and shorter under heavy use. Rather than promising you a fixed number of days, we describe the mechanism as it is.
• Backups: In order to restore the service after a fault or cyber-attack, a nightly backup of the database is taken. The backup is encrypted before it leaves the server and is held with a backup provider abroad (Backblaze, USA); only the 5 most recent copies are kept and older ones are deleted automatically. Since a backup is taken every night, this normally means the last 5 days of history. What this means for you: when you delete data (or your account) it is removed immediately from the live system, but may remain in the encrypted backups for about 5 more days, disappearing on its own as backups are rotated. Backups are used only for disaster recovery; they are not opened for day-to-day operations.
• Where your data is stored: Our server is located within the borders of the European Union (France — Lauterbourg; service provider Contabo GmbH). Some operations (the AI, e-mail and backup providers in §3) are carried out through service providers located abroad.

5. Your Rights (KVKK art. 11)

You have the right to access your data, to have it corrected, to request its deletion, to object to its processing, and to learn the third parties to whom your data has been transferred. For your requests: [email protected].

To delete your account and all of your data (your scans, templates and files), you can use Settings > Delete My Account (in the app: "Ayarlar > Hesabımı Sil") — this takes effect immediately and is irreversible. Alternatively you may request it via [email protected].

Two honest notes. (1) Deletion takes effect immediately on the live system, but your data may remain in the encrypted nightly backups for about 5 more days, disappearing on its own as backups are rotated (see §4 "Backups") — these backups are kept solely for disaster recovery. (2) What remains is the irreversible digest of your e-mail address (§4) — its only purpose is to prevent the free trial entitlement from being claimed over and over with the same address.

6. Security

Passwords are stored hashed; communication is encrypted with HTTPS; payment card details are not held by us. Access is granted only to authorised systems and at the minimum level necessary; our systems are maintained with regular security updates. Even so, no transmission over the internet is 100% secure.

7. Children's Privacy

Perlecta is intended for a general audience and is not designed for children; we do not knowingly collect data from children.

8. Changes and Contact

We may update this policy; we will announce material changes within the app. Questions: [email protected].