LearnoryPrivacy Policy
Learnory is an English-learning app with interactive stories. This policy explains what data the app collects, why, who can see it and how you can control it. It applies to the Learnory mobile app, the Learnory website and the Learnory servers.
Who is responsible
Learnory is operated by Onuralp Kaygın, an individual based in Türkiye, who is the data controller. Contact for all privacy questions: support@learnory-app.com.
What we collect
Account data
Your email address, your username, and a salted hash of your password (we never store your password itself). If you sign in with Apple or Google, we receive an identifier from that provider and the email address it shares with us. We also store your avatar choices, your chosen app language, your level and experience points, and your notification preferences.
Learning data
Your story progress, the choices you make, the endings and badges you unlock, your achievements, your daily activity and streak, and your experience-point history. If you save words, we store the word, its meaning in your language, the sentence it came from, the story it belongs to, your word lists and your review history.
Friends
Friend requests, friendships and blocks. Your accepted friends can see your username, avatar, level, current streak, when you last studied, the number of endings you reached and your achievements. They see badge names only for stories they have finished themselves.
Purchases
Payments are processed by Apple. We never see your card or Apple ID details. For Premium we receive and store the transaction identifiers, product, status, expiry date and the price and currency of the transaction so that we can verify your subscription and unlock Premium.
Notifications
If you allow notifications, we store a push token for your device (with the platform and a last-seen time) so we can send reminders such as a streak reminder or a friend's nudge. You can turn each type off in the app or turn notifications off in iOS Settings.
Product analytics
The app reports a small fixed set of events (app opened, paywall viewed, purchase started, ending shared), optionally with a short fixed label such as the screen it came from. They contain no free text, no advertising identifier and are not used to track you across other companies' apps or websites. Other product statistics are computed from the learning data above.
Technical data
Our servers keep standard operational logs (for example IP address, time and requested address) for security and troubleshooting. If error reporting is enabled in your app version, crash and error reports are sent to Sentry without personal identifiers.
We send sign-up verification codes and password-reset codes to your email address through our email provider, Resend.
Word meanings
Most word meanings come from our own glossaries. If a word is not in the glossary, our server sends that single word (not your identity) to the MyMemory translation service to look up a meaning, and caches the result. Reading words aloud uses the speech engine built into your iPhone.
What we do not do
- We do not sell your personal data.
- We do not show advertising and do not use advertising identifiers.
- We do not track you across other apps or websites.
Why we use your data
To create and secure your account, to run the stories, quizzes, review and friends features, to verify and provide Premium, to send the notifications you asked for, to keep the service reliable and secure, and to understand which parts of the app are used so we can improve it. Under GDPR our legal bases are performance of the contract with you, our legitimate interests in running and securing the service, and your consent for push notifications.
Who processes your data
We use the following service providers, who process data on our behalf: a rented virtual server from OVH (hosting and database), Resend (transactional email), Sentry (error reports, if enabled), and the MyMemory translation service (single words only). Apple and Google process sign-in and, for Apple, payments, under their own privacy policies. Some of these providers are located outside your country, including outside the European Economic Area and Türkiye, so your data may be transferred internationally.
How long we keep it
We keep your data while your account exists. Verification and reset codes expire within minutes. When you delete your account in the app, we delete your account and its data (progress, saved words, achievements, friends, subscription records and analytics events linked to you). Regular backups of our database are kept for a limited period, so deleted data may remain in a backup until it is overwritten. Records we are legally required to keep, for example for tax, may be kept as the law requires.
Your rights
Depending on where you live (including under the GDPR and Article 11 of the Turkish Personal Data Protection Law, KVKK), you can ask us to give you access to your data, correct it, delete it, restrict or object to its use, receive a copy in a portable format, and withdraw consent at any time. You can delete your account yourself in the app (Profile → Settings → Account → Delete account) or write to support@learnory-app.com from your account email. You may also complain to your local data protection authority.
Children
Learnory is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, write to us and we will delete it.
Security
Connections to our servers use HTTPS, passwords are stored only as hashes, sign-in sessions use short-lived tokens, and access to our servers is restricted. No system is perfectly secure, so we cannot guarantee absolute security.
Changes
If we change this policy we update the date above and, for important changes, tell you in the app or by email.