Privacy Policy

Welcome to Vocly ("Company", "we", "our", "us"). This Privacy Policy explains how we collect, use, process, and protect your information when you use our AI-powered language learning platform ("Service").

Vocly is operated by Yunus Demirel

Data Controller: Yunus Demirel

1. Information We Collect

1.1 Account Information

When you register:

• Name or username
• Email address
• Password (securely hashed)
• Subscription plan
• Billing country

1.2 Payment Information

Payments are processed by third-party payment providers. We do not store full credit card information on our servers.

We may collect:

• Payment transaction ID
• Subscription status
• Payment history
• Invoice information

Payment processors handle sensitive payment data in compliance with PCI-DSS standards.

1.3 Learning & AI Interaction Data

Because our platform generates content using AI, we may collect:

• Words searched or generated
• Prompts submitted to AI
• Generated vocabulary lists
• Quiz responses
• Learning progress and statistics

This data is used to personalize your experience and improve AI output quality.

1.4 Automatically Collected Data

We may automatically collect:

• IP address
• Device type
• Browser type
• Operating system
• Usage logs
• Cookies and tracking technologies

2. How We Use Your Data

We use your data to:

• Provide access to the Service
• Process subscriptions and payments
• Generate AI-powered content
• Personalize vocabulary and lessons
• Improve AI models and system performance
• Detect fraud or abuse
• Comply with legal obligations

We do not sell personal data.

3. AI Data Processing

• Our Service uses artificial intelligence to generate vocabulary, examples, explanations, and exercises.
• Prompts submitted by users may be processed by AI systems.
• AI-generated content may not always be fully accurate.
• We may use anonymized interaction data to improve system quality.
• We do not use your private data for advertising profiling.

4. Legal Basis (For EU Users)

If you are located in the EEA, your data is processed in accordance with the General Data Protection Regulation based on:

• Contract performance (providing the Service)
• Consent (cookies, marketing)
• Legitimate interest
• Legal compliance

5. Turkish Data Protection

If you are located in Türkiye, personal data is processed under KVKK.

You may request:

• Information about processed data
• Correction of inaccurate data
• Deletion of personal data
• Objection to processing

6. Subscriptions & Retention

We retain subscription and billing records:

• As long as required for accounting and tax compliance
• While your account remains active

If you cancel your subscription:

• Access continues until the billing period ends
• Personal data may be deleted upon request
• Some financial records may be retained for legal obligations

7. Data Sharing

We may share data with:

• Hosting providers
• Cloud infrastructure providers
• AI infrastructure providers
• Payment processors
• Analytics services

We only share what is necessary to operate the Service.

We do not sell or rent your data.

8. International Transfers

Your data may be processed outside your country of residence. We ensure appropriate safeguards are in place when transferring data internationally.

9. Data Security

We implement security measures including:

• HTTPS encryption
• Secure password hashing
• Role-based access control
• Server-side access restrictions

No online service is completely secure.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Request correction
• Request deletion
• Withdraw consent
• Request data portability
• Object to processing

11. Policy Updates

We may update this Privacy Policy periodically. Users will be notified of material changes.