A software studio in Istanbul for apps, games and SaaS

What do we build from Istanbul?

The studio runs three lines: mobile apps, mobile games and web. Apps and web have been running since 2017; games are the newest line. In that time we have delivered more than 200 projects. The portfolio keeps client work and our own products apart; FitZen, Viralance and Tilting Jar are among our own.

Most mobile projects ship to iOS and Android from one React Native and Expo codebase, with admin panels in Next.js and a Supabase or Firebase backend. An app rarely comes alone: Karaman got restaurant and admin panels, PeakUp an owner panel, and Garaj an admin panel where the client enters the vehicle catalogue themselves, each built in the same project as the mobile app.

Founder and owner Ali Mert Güleç leads the work directly. Larger projects bring in project-specific hires and dedicated designers and engineers, with team size planned alongside the scope. A simple MVP and a multi-role platform do not need the same team or the same timeline.

Payments in Türkiye: iyzico, Garanti POS, cash on delivery and bank transfer

In the Karaman.com mobile app, ordering supports iyzico, Garanti POS and cash on delivery side by side. Each provider’s webhook runs in its own function (iyzico-webhook, garanti-webhook). The rule is strict: a successful online payment does not count as restaurant approval, so the order opens as pending and status changes are bound to the authorised role.

Delivery zones are validated server-side as PostGIS polygons and commission is computed on the order total. Existing karaman.com accounts map to a Supabase profile through a bridge function, so nobody signs up again. The project was handed over in September 2026 with source and setup notes.

Not every project takes cards. In PeakUp, cash payments carry no VAT and POS payments use a panel-configurable rate (20%), validated by the same schema on the client and in the database. On ozelokul.com, skipping a payment provider was the client’s call: the platform issues an invoice, the school reports the bank transfer from its panel, and on admin approval the invoice, subscription and audit record update in one transaction.

Treating KVKK as a traceable chain in the database, not a banner

KVKK, Turkey’s data protection law, often gets reduced to a cookie banner and a disclosure page. In what we build, consent is traceable in the database.

• ozelokul.com: every form consent is written to consent_records with the user or anonymous session, the version of the text agreed to, the context (quote, appointment, newsletter, application and others), a timestamp and a revocation time. legal_texts stores each text by key and version, with exactly one current version.
• Photonza: a face signature is special-category personal data, so disclosure and explicit consent are separate on screen and the disclosure is never tied to the checkbox. Face data is deleted no later than 30 days after the event ends; an hourly cleanup job removes files and rows, and endpoints enforce the same limit themselves.
• Macsug: a kvkk_consents migration plus separate data-export and data-deletion functions serve access and erasure requests.
• Arayandan: KVKK, cookie and membership agreement pages sit in the app’s (legal) group.

We do not give legal opinions; we build how the software records, stores and deletes consent.

81 provinces, 973 districts and searching in Turkish

For a product aimed at Türkiye, location and language are two things the schema has to know from day one.

On ozelokul.com, all 81 provinces and 973 districts are seeded and school records reference them as foreign keys, not text. On search, ilike did not handle Turkish: kadikoy returned 0 results and kadıköy returned 1, and anyone typing without diacritics saw no error either. A trigger-maintained search_text column with a trigram index fixed it, and the search term is normalised with the same rules. Calling unaccent inside the query would have bypassed the index, because a functional index needs an IMMUTABLE function.

PDF export has a similar trap: jsPDF’s built-in Helvetica has no ı, İ, ğ, Ğ, ş or Ş. Roboto was subset to the Turkish character ranges, cut from 515 KB to 39 KB per style, and embedded.

The same care shows up elsewhere: the Arayandan mobile app takes province and district data from a Turkey API, every PeakUp layer including cron runs on Europe/Istanbul time, and in Düzce Biz, our own product, the map is constrained to the city of Düzce.

What does our mobile game line do?

The game line works in Unity and C#, for mobile. Our priority is that levels rest on measurable rules rather than hand-tuned guesswork.

Our own game, Tilting Jar, took seven months: 300 levels, 15 chapters and 12 distinct mechanics. Generation is deterministic; the seed is the level index, so every player gets the same level. It has four-layer procedural music, five languages and is live on the App Store.

For Wardlight, built for Hallowmark, the client wanted proof that every level is solvable. The generator builds a valid Hamiltonian path first and derives arrows, walls and locks from it, so each level is solvable by construction. A sweep of 3200 levels found 3200 solvable, and generating the same levels twice produces byte-identical output. The Wardlight.Core layer has no UnityEngine references, and 40 of 40 EditMode tests pass.

Ads and in-app purchases are scoped per project. We do not guarantee downloads, revenue or retention.

How do meetings, proposals and invoicing work?

If you are in Istanbul we can meet in person; otherwise we meet online. Send a project or meeting request through the contact form, we review the need and agree a day and time by email. If you have existing code, designs or a competitor app, sharing them before the first call lets us spend it on open questions instead of introductions.

The proposal follows once the scope is clear. Proposals are in USD for every client, whatever the country, and there are no fixed prices or packages on the site. Payment is split into three stages: at the start, when the design is complete and before delivery. Amounts and dates are in the written proposal and every payment is invoiced. In Türkiye, contracts and invoices are issued by AMG Yazılım, the sole proprietorship of Ali Mert Güleç.

The design is shared for your approval before any code is written. App Store, Google Play, server and service accounts are opened in your name, and at delivery you receive the full source code, the design files and every credential.

Frequently asked questions

RELATED STUDIO NOTES