Studyko - Arkadaşlarınla Birlikte Çalış, Daha Verimli Ol

01About This Policy

This Privacy Policy describes how Studyko ("we," "us," or "our") collects, uses, processes, and protects information about users ("you" or "users") of the Studyko mobile application (the "App" or "Service").

Studyko is a social study and productivity application that uses the Pomodoro Technique to help users focus, track study sessions, and connect with other learners in study rooms.

02Legal Framework & Compliance

Studyko is designed and operated in compliance with the following data protection laws:

GDPR - EU General Data Protection Regulation 2016/679
COPPA - Children's Online Privacy Protection Act (USA)
CCPA/CPRA - California Consumer Privacy Act
KVKK - Turkish Personal Data Protection Law (Law No. 6698)
Apple App Store Review Guidelines - Section 5.1 (Privacy)
Google Play Developer Program Policies - User Data Policy

03Information We Collect

3.1 Account Information

When you create an account using Google Sign-In or Apple Sign-In, we collect:

Email address: Account identification, communication
Display name: Public profile, social features
Profile photo URL: Avatar display (optional)

Note: We do NOT collect or store your password. Authentication is handled securely by Google or Apple through OAuth 2.0 protocol.

3.2 Study & Activity Data

Pomodoro sessions: Start time, duration, completion status
Study categories: Subject/topic of study
Streak data: Consecutive study days
Achievement progress: Unlocked achievements, progress

3.3 Social & Communication Data

Follow relationships: Users you follow and followers
Room memberships: Study rooms joined/created
Chat messages: Text messages in study rooms
Reactions: Emoji reactions to messages

3.4 Automatically Collected Information

Device type & model: Compatibility, debugging
OS version: Compatibility, crash analysis
App version: Update management
Timezone: Local time features, notifications
IP address: Security, fraud prevention (temporary)

04Information We Do NOT Collect

We want to be absolutely clear about data we do NOT collect:

✗Precise GPS location

✗Contact list / Address book

✗Photos / Camera access

✗Microphone / Audio

✗Calendar data

✗Health / Fitness data

✗Financial / Payment info

✗Biometric data

✗SMS / Call logs

✗Browsing history

✗Files / Documents

✗Clipboard data

05How We Use Your Information

5.1 Core Service Delivery

Create and maintain your account
Provide Pomodoro timer functionality
Track and display statistics
Enable study room features and social interactions
Unlock and track achievements
Sync data across devices

5.2 Safety & Security

Detect fraudulent activity
Enforce Terms of Service
Moderate chat content
Protect minors

06Age Requirements

We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent.

General Use: 13 years and older

Account creation, timer usage, statistics, joining study rooms, sending reactions, and follow features.

Chat Messages: 18 years and older

For safety reasons, text-based chat in study rooms is restricted to users aged 18 and above. Users aged 13-17 can use quick messages and reactions.

Parental Rights (Ages 13-17)

Parents and guardians have the following rights:

Access your child's data
Request data deletion
Refuse further data collection
Request data correction

07Chat & Messaging Features

Message Types

Text messages: Only 18+ users can send
Quick messages: All users (13+) can send predefined messages
Emoji reactions: All users (13+) can react

Chat Moderation & Safety

Rate limiting: Max 30 messages/hour (regular) or 100/hour (premium)
Spam detection: Repetitive content is automatically filtered
Content flagging: Potentially harmful content flagged for review
Age enforcement: Automatic chat restriction for users under 18

08Third-Party Services

Firebase (Google)

We use Firebase for our backend infrastructure:

Firebase Authentication: Secure sign-in
Cloud Firestore: Database (AES-256 encrypted)
Cloud Messaging: Push notifications
Crashlytics: Error reporting (no PII)
Analytics: Usage analytics (anonymized)

Data center location: Europe (eur3 region - Belgium/Netherlands)

Authentication Providers

Google Sign-In

Email, display name, profile photo URL

We never receive your password

Apple Sign-In

Email (or relay), display name

"Hide My Email" supported

Google AdMob (Advertising)

Applicable to: Free (non-premium) users only. Premium subscribers do not see ads.

Opting Out of Personalized Ads

Android: Settings → Google → Ads → "Opt out of Ads Personalization"

iOS: Settings → Privacy & Security → Apple Advertising → Disable "Personalized Ads"

09Data Storage & Security

Encryption

✓Data in transit: TLS 1.3 encryption
✓Data at rest: AES-256 encryption
✓Backups: AES-256 encryption

Access Control

✓Authentication: OAuth 2.0 (no password stored)
✓Authorization: Firebase Security Rules
✓API access: Short-lived tokens

10Data Retention Periods

Active Account Data

Stored as long as your account is active

Chat Messages

Automatically deleted after 90 days

After Account Deletion

Most data deleted immediately. Backup systems: 30 days. Payment records: 5 years (legal requirement).

11Your Rights

→

Right of Access

Request information we hold about you

→

Right to Rectification

Correct inaccurate or incomplete information

→

Right to Erasure

Request deletion of your personal data

→

Right to Data Portability

Receive your data in a structured format

→

Right to Object

Object to data processing

→

Right to Withdraw Consent

Withdraw your consent at any time

12Account Deletion

You can delete your account and personal data at any time.

This policy was last updated on January 28, 2026.

Privacy Policy