Privacy Policy
Last updated: October 7, 2026
1. Who we are
Online Test Time (“we”, “us”) is a test maker and online exam platform for teachers, institutions and students, available at https://onlinetesttime.com and as the Android app “Online Test Time - Test Maker”. The data controller is Tema Sky Bilişim Eğitim Yazılım Ltd. Şti., Adana, Türkiye (“Temasky”). This policy applies to the website and the app.
2. Data we collect
- Account data (teachers and administrators): name, email address, phone number, city and country, institution and role, and — if you register with email — a securely hashed (bcrypt) password. We never store passwords in plain text.
- Google sign-in: if you choose to sign in with Google, we receive your name, email address and profile picture. We never see your Google password.
- Content you create: tests, questions, answer keys, question images and PDFs you upload, booklets, optical answer sheet scans and results, curriculum entries, invitations and feedback/support messages.
- Students: students can take an exam without an account. We collect the name the student enters, their answers, scores, timing and, if enabled by the teacher, exam-integrity events such as leaving the exam page. A student may optionally identify with Google; then we receive their Google name and email address to prevent taking the same exam twice.
- Technical data: IP address, device and browser type, log and error records, session times — used for security, abuse prevention (e.g. limiting repeated login attempts) and to keep the service running.
- Android app data: see section 7 (advertising ID, push notification token, purchase status).
We do not collect precise location, contacts, SMS, call logs, health or financial account data.
3. How we use data
- To create and secure your account and let you sign in.
- To provide the service: building tests, publishing online exams, automatic grading, question analysis, reports and OMR answer sheet scanning.
- To show the results of an exam to the teacher who published it (and, if the teacher allows, the student's own result and rank).
- To send service messages and, if you allow them, push notifications (e.g. a student finished your exam).
- To show ads to visitors and free-plan users, and to measure them (see section 6).
- To maintain security, prevent abuse, fix errors and improve the service.
We do not sell your personal data. We do not use the content of your tests or students' answers for advertising.
4. Legal bases
We process personal data under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for users in the European Economic Area, the United Kingdom and Switzerland, the GDPR: to perform our contract with you (providing the service), for our legitimate interests (security, abuse prevention, improving the service), to comply with legal obligations, and with your consent where required (personalized ads, push notifications, optional analytics). You can withdraw consent at any time.
When a teacher or school uses Online Test Time with students, the teacher or institution decides why students' data is processed; we process it on their behalf to provide the service.
7. Android app (Online Test Time - Test Maker)
The app talks only to https://onlinetesttime.com over an encrypted connection. Everything in this policy applies to it, plus:
- Ads (Google AdMob): the app shows AdMob ads. AdMob may process the advertising ID, IP address and device information to serve, measure and, with consent, personalize ads. Users in the EEA, UK and Switzerland are asked for consent through Google's User Messaging Platform; you can change your choice in the app under Settings → Ad preferences. You can reset or delete your advertising ID in your device settings. The website's own ads are not shown inside the app.
- Push notifications (Firebase Cloud Messaging): if you allow notifications, a device-specific notification token, the app language and the app version are stored with your account so we can notify you. The token is deleted when you sign out or delete your account. You can turn notifications off in your device settings at any time.
- In-app purchases (Google Play Billing): Premium (ad-free) subscriptions and the one-time purchase are processed by Google Play. We never see or store your card details. The app keeps only the purchase status (which plan is active) on your device. Manage or cancel subscriptions in Google Play → Payments & subscriptions.
- Camera, photos and files: the camera is used only when you scan a QR code, photograph a question or scan an answer sheet; file access only when you pick a PDF or image. Permissions are requested the first time you use the feature. QR codes are read on the device. Images are uploaded only when you choose to.
- Data on your device: sign-in session, language, theme and notification preferences, and ad frequency counters are stored only on your device, are excluded from backups where they contain session data, and are removed when you uninstall the app.
- Crash reports: Google Play may collect anonymous crash and ANR reports (Android vitals) according to your device settings. The app does not include a separate crash-reporting SDK.
8. Students and children
The app and teacher accounts are not directed at children under 13. Students take exams only through a code shared by their teacher, without creating an account; the teacher or school is responsible for informing students (and, where required, their parents) and obtaining any consent needed. If you believe a child has provided us personal data without appropriate consent, contact us and we will delete it.
9. Retention and security
Data is transmitted over HTTPS and passwords are hashed. We keep account data and content while your account is active. Exam results are kept while the teacher's account exists, so the teacher can access their reports. When an account is deleted, its personal data is removed as described in section 12. Records we must keep by law are kept only for the legally required period. Security logs are kept for a short period.
10. International transfers
Some of our service providers (e.g. Google, Anthropic) process data outside Türkiye and your country. These transfers are made with the safeguards required by KVKK and, where applicable, the GDPR (such as standard contractual clauses).
11. Your rights
Under KVKK (Article 11) and, where applicable, the GDPR, you may ask to access your data, correct it, delete it, restrict or object to its processing, receive a copy (portability), and learn whether it has been transferred and to whom. You may also complain to the Turkish Personal Data Protection Authority or your local data protection authority. Students should contact their teacher or school first; we will help them respond. To exercise your rights, write to temaskyltd@gmail.com. We respond within 30 days.
12. Deleting your account and data
- In the app: Settings → Delete my account. After you confirm your email address (and your password if you registered with email), your account is deleted immediately.
- Without the app: send an email with the subject “Account deletion request” from your account's email address to temaskyltd@gmail.com. We complete the request within 30 days and confirm by email.
Deleted: your account (name, email, password hash, profile), your tests, question bank, published exams and their results, OMR scan results, invitations, support messages and notification tokens. Questions you shared with your institution that colleagues already use in their tests are transferred so that those tests keep working. Purchase records for Google Play are kept by Google. Data we must keep by law is kept only for the required period.
13. Changes to this policy
We may update this policy. We will post the new version on this page with a new date and, for significant changes, notify you through the service or by email.
14. Contact
Privacy questions and data requests — contact Temasky: temaskyltd@gmail.com
Tema Sky Bilişim Eğitim Yazılım Ltd. Şti. · Adana, Türkiye · General support: destek@onlinetesttime.com
Türkçe sürüm: Gizlilik Politikası