This Privacy Policy explains how Vokibi ("the Service") collects, uses, and protects your personal data when you use our mobile application. By using Vokibi, you agree to the terms of this policy.
1. Data Controller
The data controller responsible for your personal data under GDPR and Turkish KVKK is:
- Merve Erdöl — Sakarya, Türkiye
- Email: hello@vokibi.com
2. Data We Collect
2.1. Account Information
When you sign in with Google or Apple, those providers share your email address, display name, and (if available) profile photo URL with us. If you sign in anonymously, only a randomly generated Firebase user ID is stored — no personal information is shared.
2.2. Profile Photo (Optional)
Profile photos you optionally upload are stored securely in Firebase Storage.
2.3. Usage Data
To provide the Service, we store the following usage data:
- Your app settings (daily goal, notifications, theme, language)
- Your learning progress (spaced repetition data per word — SM-2 algorithm)
- Your study statistics (XP, level, review counts)
- Saved words and notebooks you create
- Story progress and game records
- Subscription status
2.4. Technical Information
For support purposes, the app version is displayed inside the app. This information is not automatically transmitted to us; we only learn about it if you choose to share it for support.
3. How We Use Your Data
- Service delivery: Creating your account and providing the vocabulary learning experience
- Personalization: Generating a personalized review schedule via the SM-2 algorithm
- Cross-device sync: Making your progress accessible across your devices
- Subscription management: Verifying your access to premium features
- Legal compliance: Meeting applicable legal obligations
4. Legal Basis (GDPR)
For users in the EU/EEA, we process your personal data based on:
- Performance of a contract (Art. 6(1)(b) GDPR): To provide the Service
- Legitimate interests (Art. 6(1)(f) GDPR): Security and improvement of the Service
- Legal obligation (Art. 6(1)(c) GDPR): For tax and accounting records
5. Sharing with Third Parties
We do not sell, rent, or share your data for marketing purposes. Limited data is shared only with the following service providers strictly to operate the Service:
| Provider | Purpose | Policy |
|---|---|---|
| Google (Firebase) | Authentication, database, file storage | policies.google.com/privacy |
| Apple | Sign in with Apple (if used), App Store payments | apple.com/legal/privacy |
| Adapty | Subscription management (paywall, purchase verification) | adapty.io/privacy |
6. Data Retention
Your data is retained while your account is active. When you delete your account, all personal data is removed from our systems within 30 days. Limited information may be kept in anonymized or pseudonymized form when required by law (e.g., tax records).
7. International Data Transfers
Your data may be processed on Google Cloud / Firebase's global infrastructure and therefore transferred to servers outside the EU or Türkiye. Such transfers are made under Standard Contractual Clauses (SCC) and Google's compliance frameworks.
8. Data Security
Measures we take to protect your data:
- All connections use HTTPS / TLS encryption
- Secure authentication via Firebase Authentication
- Firestore Security Rules restrict data access on a per-user basis
- Only the signed-in user can access their own data
No method is 100% secure; absolute security cannot be guaranteed, but we protect your data with reasonable care.
9. Your Rights
Under GDPR Articles 15–22 and Turkish KVKK Article 11, you have the right to:
- Access: Know what data we hold about you
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a structured format
- Object: Object to processing based on legitimate interests
- Lodge a complaint: File a complaint with the Turkish KVKK Authority or an EU data protection authority
To exercise these rights, email hello@vokibi.com. We will respond to your request within 30 days.
10. Children's Privacy
Vokibi's content is suitable for all ages, but you must be at least 13 years old to create an account. Children under 13 should use the Service only under the supervision of a parent or legal guardian, using the guardian's account. We do not knowingly collect personal data from children under 13; if we become aware of such data, we promptly delete it. If you are a parent and believe your child has provided us with personal information, please contact us.
11. Cookies and Local Storage
Our website (vokibi.com) serves static content and does not use tracking cookies. The mobile app uses local storage on your device (Hive database) for performance — this data is stored only on your device and is not shared with third parties.
12. Changes to This Policy
We may update this policy from time to time. For material changes, we will notify you via in-app message or email. The current version is always available on this page.
13. Contact
For privacy questions, requests, or complaints:
- Email: hello@vokibi.com
- Data Controller: Merve Erdöl, Sakarya, Türkiye