Privacy Policy
Last updated: 12 August 2026
In short: We do not ask for more than a name and an email address. What you say during a lesson is turned into text so the teacher can respond. If you would rather those transcripts were not stored, you can turn that off in settings with one tap — lessons keep working. We do not sell your data to anyone for advertising.
1. Data controller
This policy covers the ULearn mobile app and the u-learn.app website. For the purposes of the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK), the data controller is Sibra (address: Karşıyaka, İzmir, Türkiye).
2. What we process
Account information
You can start using the app as a guest, without giving us any personal information. In that case we only create a random account identifier tied to your device.
If you sign in with Google or Apple, we receive your email address and, when available, your display name from that provider. If you choose to hide your email when signing in with Apple, we receive Apple's relay address and never see your real one. We never see your password.
Learning profile
To adapt lessons to you: your native language, the language you are learning, your level, your learning goal, your daily goal, your time zone and your country.
Learning data
Your lesson sessions, completed objectives, the corrections the teacher made, the vocabulary you picked up, your progress records and your daily activity summary.
Technical data
To keep the app working and fix problems: device and operating system information, app version, crash reports and anonymised usage statistics.
Subscription data
The status and expiry of your Pro subscription. We never see your payment details — card and bank information is processed directly by Apple or Google, and only the fact that a subscription is active reaches us.
3. Your voice and transcripts
During a lesson, the audio from your microphone is converted to text in real time. That text is sent to an AI model so the teacher can produce a reply, and the reply is turned back into speech.
We do not store recordings of your voice. Audio is only processed as a live stream for the duration of the lesson.
The text transcript of the conversation is, by default, saved to your account so we can show your progress and list the corrections at the end of a lesson.
You can turn this off. When you disable transcript storage in the app's settings, lessons continue to work exactly as before — only the conversation history is not written to the database.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Creating your account and keeping you signed in | Account information | Performance of a contract |
| Running lessons and adapting them to your level | Learning profile, transcripts | Performance of a contract |
| Showing your progress and corrections | Learning data | Performance of a contract |
| Verifying your subscription | Subscription data | Performance of a contract |
| Fixing bugs and improving the service | Technical data | Legitimate interest |
| Sending a weekly summary email | Email, activity summary | Consent (you can turn it off) |
5. Who we share with
We do not sell or rent your data for advertising. We use the following service providers to operate the service:
| Provider | Used for | Data shared |
|---|---|---|
| Cloudflare | Hosting, database, file storage | All account and learning data |
| LiveKit | Real-time audio connection | Lesson audio stream |
| Deepgram | Speech to text | Lesson audio stream |
| OpenAI | Generating the teacher's replies | Conversation text, lesson context |
| Cartesia, ElevenLabs | Text to speech | The teacher's reply text |
| Google, Apple | Sign-in verification | Email, display name |
| RevenueCat | Subscription management | Account identifier, subscription status |
| PostHog | Usage analytics | Anonymised event data |
| Sentry | Error and crash reporting | Technical error logs |
| Resend | Email delivery | Email address, email content |
We may also disclose data to competent public authorities where and to the extent required by law.
6. International transfers
Some of the providers above operate servers outside Türkiye, primarily in the European Union and the United States, so your personal data is transferred internationally. These transfers are carried out under the relevant provisions of the KVKK and, where applicable, standard contractual clauses under the GDPR.
7. Retention
- Account and learning data: for as long as your account is open.
- Transcripts: never written if you disabled storage; otherwise for as long as your account is open.
- Voice: not stored — processed only during the lesson.
- Error logs: up to 90 days.
- After account deletion: personal data is deleted within 30 days. Records we are legally required to keep are retained only for the required period and only for that purpose.
8. Your rights
Under the GDPR and the KVKK you have the right to:
- Learn whether your data is being processed and access it,
- Have inaccurate or incomplete data corrected,
- Have your data erased,
- Restrict processing,
- Receive your data in a portable, structured format,
- Withdraw consent where processing is based on it,
- Object to processing,
- Claim compensation for damage caused by unlawful processing.
You can delete your account yourself from the profile screen in the app. For anything else, write to [email protected] — we respond to requests within 30 days at the latest.
9. Children's privacy
ULearn is not directed at children under 13. The app includes a kids mode in which a parent can create a profile for their child; that profile is attached to the parent's account, and the weekly summary email is sent only if the parent explicitly opts in. If we learn that we have collected data from a child under 13 without parental consent, we delete it.
10. Security
Data is encrypted in transit using TLS. Access to our servers is restricted, and admin panel passwords are stored irreversibly hashed (PBKDF2). That said, no transmission over the internet can be guaranteed to be 100% secure.
11. Changes
We may update this policy from time to time. When a change is significant we will let you know in the app. The date at the top of this page always shows the version in force.
12. Contact
For any privacy question, request or complaint: [email protected]
If you are in Türkiye and are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Authority (KVKK). If you are in the EU, you may lodge a complaint with your local supervisory authority.