Privacy Policy

This policy explains how your personal data is processed when you use the lingy mobile app (Android, com.lingy.app). It is our privacy notice under both the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and Turkey's Personal Data Protection Law No. 6698 (KVKK).

The app's interface is in Turkish, so menu names are given in Turkish with an English translation.

1. Data controller

The controller of your personal data is:

In this policy, “we” and “us” mean KAIA MEDIA LTD.

2. Data we process

Account data

You need an account to use the app. You can sign up in two ways:

• Email and password: your email address and password. Your password is stored only in irreversibly hashed form; we cannot see it.
• Sign in with Google: your Google account's email address and Google account ID.

App data (on our servers)

• Profile: your email address, optional nickname, chosen avatar (one of 6 preset images; no photos are uploaded), exam date, daily word goal, streak and streak-freeze data.
• Learning progress: for each word, its Leitner box, correct/incorrect counts and review dates.
• Daily activity: which days you studied, how many review and new words you studied that day, and the days on which a streak freeze was used.
• Words you add: words you add to the app yourself.
• Word error reports: the word you report and, optionally, your message.

Data that stays on your device

Your theme preference, notification preferences and whether you have seen the intro tour are stored only on your device and are not sent to us. Reminder notifications are scheduled locally on your device; we do not use a server to send notifications.

Advertising and technical data

• Advertising: your advertising ID (Android Advertising ID), device and app information are processed by Google AdMob (see section 7).
• Crash and error diagnostics: when the app crashes or an error occurs, technical information such as the error type, the relevant code lines, device model, operating system and app version is sent to Sentry. Your user ID, email address and learning progress are not attached, and your IP address is not stored.

We do not access your location, contacts, photos, microphone or camera. The app contains no product analytics or user tracking tools.

3. Purposes and legal bases

We do not use any data to make decisions about you based solely on automated processing that produce legal or similarly significant effects.

4. Service providers

We do not sell your data or share it with anyone for marketing. We use the following service providers to run the app:

Google processes some data for its advertising and sign-in services under its own privacy policy: policies.google.com/privacy. You can read how Google uses information from apps that use its services here.

We may share data with competent authorities where we are legally required to (for example, under a court order).

5. International transfers

KAIA MEDIA LTD is based in the United Kingdom and app data is hosted in the European Union. If you use the app from Turkey, your data is therefore transferred abroad. Providers such as Google and Sentry may also process data in other countries, including the United States.

These transfers rely on the international transfer rules of the UK GDPR and the transfer mechanisms provided for in KVKK Art. 9 (for example, standard contracts).

6. Retention and deletion

• We keep your account and app data for as long as your account is open.
• When you delete your account, your account, profile, progress, daily activity, streak-freeze records, words you added and word error reports are deleted from our database immediately. Details: Delete account.
• Error records in Sentry contain no personal data and are deleted automatically at the end of Sentry's retention period.
• Delivery logs for password reset emails are kept for Brevo's own retention period.

7. Ads and consent

lingy is free and supported by Google AdMob ads: banner ads, and optional rewarded ads that you choose to start. AdMob processes your advertising ID and device information to show and measure ads and to prevent fraud.

• If you are in the European Economic Area or the United Kingdom, Google's consent form is shown when you first open the app. Personalised ads are shown only if you consent.
• You can reset or delete your advertising ID in Android settings (Settings → Privacy → Ads; menu names vary by device).
• Because some of our users may be under 18, we limit ad content to the “Teen (T)” rating at most and block sensitive categories such as gambling, dating and alcohol.

8. Your rights

Under the UK GDPR you have the right to access your data, to ask for it to be corrected, erased or its processing restricted, to receive it in a portable format, to object to processing based on legitimate interests, and to withdraw your consent at any time.

Under KVKK Art. 11 you have the right to learn whether your personal data is processed and to request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties in Turkey or abroad to whom it is transferred, to request correction of incomplete or inaccurate data, to request its erasure or destruction, to request that these actions be notified to third parties to whom it was transferred, to object to an outcome against you arising solely from automated analysis, and to claim compensation for damage caused by unlawful processing.

To exercise your rights, email lingydestek@gmail.com, preferably from the email address registered to your account. We respond within 30 days at the latest. We may ask for additional information to verify your identity.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office (ICO) in the UK, or to the Personal Data Protection Board (KVKK) in Turkey.

9. Age limit

lingy is intended for a general audience and is not directed at children under 13. If you are under 13, do not use the app. If we learn that a child under 13 has created an account, we will delete the account and its data; if you become aware of this, please contact us.

10. Security

Data is transferred between the app and our servers over an encrypted connection (HTTPS/TLS). Row-level access rules are enforced in the database: each user can access only their own data. Passwords are stored hashed. No system is entirely risk-free; if a data breach occurs, we will notify the relevant authorities and you as required by law.

11. This website

getlingy.com uses no cookies, analytics or tracking tools and does not collect data through forms. The site is hosted by Cloudflare. Cloudflare briefly processes standard server logs, such as IP address and browser information, to serve the site and prevent abuse. Fonts are loaded from the site's own server; no requests are made to third-party servers.

12. Changes

We may update this policy as the app changes. The current version is always published on this page and the “Last updated” date at the top changes.

13. Contact

For any privacy question: lingydestek@gmail.com
Post: KAIA MEDIA LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom