VOKAR Privacy Policy

Last updated: 4 October 2026

VOKAR is a language-learning app published by Got2F ("we", "us"). We built VOKAR to help you learn, not to collect data about you. This policy explains, in plain language, what little data the app handles, why, and the choices you have. If anything is unclear, write to us at support@got2f.com. A real person reads every message.

1. Our approach: your learning stays on your device

Your decks, cards and study history are stored locally on your phone. We never upload them to our servers during normal use. The sections below cover everything we do process.

2. What we process, and why

• Account (optional). You can use VOKAR without an account. You only need one to generate cards with AI. Sign-in is handled by Google or Apple, so we never see or store a password. From sign-in we receive your email address and an anonymous user ID, which we use to identify your account and apply your usage allowance. If you use Apple's Hide My Email, we only receive Apple's private relay address. We never use your email for marketing.
• AI card generation. When you generate a card, the word or text you enter and your chosen languages and level are sent to our server and then to one of our AI providers (see section 5) to create the card. We never attach your name, email or account ID to these requests. AI providers may use the text they receive to improve their services, so please only enter words you want to learn, not personal information. We keep a daily count of generations to apply usage limits.
• Photo scanning (optional). Photos you scan are processed entirely on your device and never reach our servers. Only the words you choose to turn into cards are sent for AI generation, as described above.
• Purchases (optional). Payments are handled by the Apple App Store or Google Play, and we never see your payment details. We use RevenueCat to confirm your subscription status, linked only to your anonymous user ID, so your Pro features work correctly.
• Crash reports. If the app hits an error, it sends us an anonymous report: the error and where it happened, the screen you were on, app and OS version, plan type, app language, and a random per-install ID used only for anonymous counts. Reports never include your name, email, account ID or card content, and we delete them after 90 days.
• Daily activity. Once a day, the app sends the same random per-install ID and your device platform (iOS or Android) so we can count active installs. It contains no account, email or learning content.
• Server logs. Our hosting providers keep standard short-term logs, such as IP addresses, for security and abuse prevention.

3. What we never do

• No ads and no ad networks.
• No third-party analytics or tracking tools.
• We never sell, rent or share your personal data for marketing.

4. Why we're allowed to process it (legal basis)

We process account, AI generation and purchase data because it is needed to provide the service you asked for (performance of a contract). We process crash reports, usage counts, daily activity and server logs based on our legitimate interest in keeping the app reliable, secure and fair to use.

5. Who helps us run VOKAR

We work with a small number of service providers, each of which only processes data as needed to do its job:

• Supabase: authentication, database and hosting
• Groq, DeepSeek and Google (Gemini): AI card generation
• Google and Apple: sign-in
• RevenueCat: subscription management
• Resend: internal email notifications
• Cloudflare: hosting and content delivery

6. International transfers

Some of these providers store or process data outside Türkiye, including in the European Union, the United States and China (DeepSeek). The AI providers only ever receive the words and settings needed to create a card, never your identity. Where personal data is transferred abroad, we rely on the safeguards our providers offer, in line with KVKK and the GDPR.

7. How long we keep data

• On your device: until you delete it or uninstall the app.
• Account data: until you delete your account.
• Usage counts: up to 12 months, to apply limits and prevent abuse.
• Crash reports: 90 days.
• Daily activity: about 13 months.
• Server logs: typically 30 days or less, per our hosting providers.

When you delete your account, we keep only a one-way fingerprint (hash) of the sign-in ID Apple or Google gives us, together with a few yes/no account flags. This fingerprint cannot be turned back into any personal detail. It stops free-tier limits from being reset by repeatedly deleting accounts, and restores your early-supporter status if you return with the same Apple or Google account. We keep nothing else.

8. Your rights

We follow Türkiye's Personal Data Protection Law (KVKK, No. 6698), and the GDPR if you are in the EU/EEA. You have the right to:

• access the personal data we hold about you
• correct or delete it
• object to or restrict its processing
• receive it in a portable format
• complain to a data protection authority: in Türkiye, the Personal Data Protection Authority (KVKK); in the EU/EEA, the authority in your country

To use any of these rights, email support@got2f.com. We will reply within 30 days.

9. Deleting your account

You can delete your account and its data at any time, directly in the app. See How to delete your account.

10. Children

VOKAR is not intended for children under 16, and we do not knowingly collect their data. If you think a child has shared data with us, contact us and we will remove it promptly.

11. Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top, and if a change is significant we will let you know in the app.

12. Contact

Utku Fırat Ertürk (Got2F)
Osman Temiz Mah. 1040. Sokak No: 3/16
06450 Çankaya/Ankara, Türkiye
support@got2f.com