# Privacy Policy — GigaSpeak

**Last updated:** June 6, 2026
**Version:** 1.0
**Turkish version:** [privacy-policy.md](./privacy-policy.md)

---

## 1. Introduction

GigaSpeak ("we", "our app") values the privacy of our users. This Privacy Policy explains what data we collect, how we use, store, and protect it when you use the GigaSpeak mobile application.

**Application:** GigaSpeak (com.gigaspeak.app)
**Platform:** Android (Google Play Store), iOS (App Store)
**Developer:** Ozcan Ceylan
**Business and legal:** ozcanceylanbusiness@outlook.com
**General support and feedback:** ozcanceylan.main@gmail.com

---

## 2. Data We Collect

### 2.1 Automatically Collected Data

- **Device Information:** Device model, OS version, language setting
- **Usage Data:** Modules completed, words learned, XP earned, study time
- **Crash & Performance:** Anonymous error reports

### 2.2 User-Provided Data

- **Email Address:** (Optional) Provided when creating an account — for password reset and account recovery
- **Name/Nickname:** (Optional) Provided during onboarding
- **Progress:** Lessons completed, vocabulary mastered, achievement levels

### 2.3 Data We Do NOT Collect

- ❌ Location (GPS)
- ❌ Contacts
- ❌ Photos/Gallery (unless explicitly uploaded by user)
- ❌ Microphone recordings (speech recognition runs on-device, not stored)
- ❌ Financial information (payments processed by Google Play / App Store, not by us)

---

## 3. How We Use Your Data

- **Service Provision:** Sync progress across your devices
- **Personalization:** Recommend appropriate lessons
- **Improvement:** Fix bugs, improve performance
- **Communication:** (Optional) Feature updates via email (if you opt-in)
- **Security:** Protect your account, prevent abuse

**We DO NOT sell your data to third parties for advertising or marketing purposes.**

---

## 4. Third-Party Services

Our app uses the following third-party services:

| Service | Purpose | Data Collected |
|---|---|---|
| **Firebase Authentication** | User accounts | Email, anonymous UID |
| **Firebase Firestore** | Data storage | Progress data |
| **Firebase App Check** | Bot/abuse protection | Device integrity token |
| **Google Play Services** | App distribution, purchases | Device ID, payment info (on Google's side) |
| **RevenueCat** | Subscription management | Anonymous UID, purchase status |
| **Cloudflare R2** | Audio file CDN | Request logs (anonymous) |

All services are subject to their own privacy policies:
- [Firebase Privacy](https://firebase.google.com/support/privacy)
- [Google Play Privacy](https://policies.google.com/privacy)
- [RevenueCat Privacy](https://www.revenuecat.com/privacy)

---

## 5. Data Retention

- **Active account:** Retained until deleted
- **Anonymous account (no email):** Auto-deleted after 12 months inactivity
- **Account deletion:** Available via in-app "Delete Account" or contact — fully deleted within 30 days

---

## 6. Children's Privacy

The app is **not designed for children under 13**. If you are under 13, please do not use the app without parental consent.

If we become aware that we have collected data from a child under 13, we will delete it immediately.

---

## 7. User Rights

Under GDPR (EU) and KVKK (Turkey), you have the following rights:

- ✅ Access your data
- ✅ Correct/update your data
- ✅ Delete your data
- ✅ Data portability (JSON export)
- ✅ Withdraw consent
- ✅ Object to processing

To exercise these rights, write to **ozcanceylanbusiness@outlook.com** (GDPR/KVKK requests) or **ozcanceylan.main@gmail.com** (general support). We respond within 30 days.

---

## 8. Security

We protect your data with:

- 🔒 **Encryption:** All data transmitted via TLS 1.3
- 🔒 **Server Security:** Industry-standard Firebase + Cloudflare protection
- 🔒 **Rate Limiting:** Brute force/spam attacks prevented
- 🔒 **App Check:** Only requests from authentic app accepted
- 🔒 **Access Control:** Only you can access your data

---

## 9. Cookies and Local Storage

The app stores the following locally on your device:

- Session information (token)
- Progress cache (SQLite)
- Audio file cache (~50MB)
- User preferences (theme, language)

**This data stays only on your device** and is not sent to external servers.

---

## 10. Changes

We may update this policy occasionally. Important changes will be notified in-app. Continued use means acceptance of new terms.

---

## 11. Contact

For questions or privacy requests:

📧 **Business/Legal:** ozcanceylanbusiness@outlook.com
📧 **Support/Feedback:** ozcanceylan.main@gmail.com
🌐 **Web:** [github.com/ozcanceylanmain/gigaspeak-legal](https://github.com/ozcanceylanmain/gigaspeak-legal)

---

*This policy complies with KVKK (Turkey), GDPR (EU), and applicable consumer protection laws.*