Privacy Policy

Last updated: October 20, 2026 · Version 2.0 This Privacy Policy describes how Oguzhan Cart, doing business as Askarf ("Askarf", "we", "us" or "our"), processes personal information that we collect through askarf.com, the Askarf mobile applications and our related services (collectively, the "Service"). Index 1. Personal information we collect 2. How we use your personal information 3. How we share your personal information 4. Retention 5. Your choices 6. Children and students 7. Security 8. International data transfer 9. Notice to European and UK users 10. U.S. state privacy rights notice 11. Changes to this Privacy Policy 12. How to contact us 1. Personal information we collect Information you provide to us: a) Account data: the parent's name or display name, email address, phone number, and the credentials used to sign in, including sign-in through Google or Apple. b) Student profile data: the student's first name or nickname, grade level, curriculum country, avatar and preferences, created and managed by the parent. c) Learning data: lesson transcripts, topics studied, learning memory (strengths, gaps and misconceptions), practice and quiz results, progress and badges, and question photos uploaded by the student. d) Voice data: during voice lessons the student's speech is processed in real time only to convert it to text. We do not store audio recordings on our servers. e) Transaction data: subscription plan, billing records and payment status. We do not receive or store full payment card details; they are processed by our payment providers. f) Communications data: support messages, parent testimonials and notification preferences. Automatic data collection: g) Device and usage data, such as browser and operating system, IP address, language settings, pages viewed, access times and referring pages, collected through cookies and similar technologies described in our Cookie Policy. h) Security and device data, such as sign-in records, mobile notification tokens and device time zone, session tokens, one-time verification codes and a one-way hash of the parental PIN. 2. How we use your personal information a) Service delivery: to create and secure accounts and student profiles, provide personalized AI-assisted lessons using the Socratic method, report progress to parents, and apply parental controls such as daily time limits and the parental PIN lock. b) Subscriptions and payments: to process purchases, renewals, cancellations and refunds. c) Communications: to send lesson reminders, service notices and responses to support requests. d) Student safety: to automatically review lesson content for inappropriate material, stop a lesson where needed and notify the parent. e) Service improvement and analytics: to understand how the Service is used and to improve it. We use Google Analytics for this purpose on our website. f) Compliance and protection: to comply with applicable laws, lawful requests and legal process; to protect our rights, the Service and our users; and to prevent fraud and abuse. We do not use personal information for advertising, we do not sell personal information, and we do not build advertising profiles of students. We do not use student content to train third-party AI models for their own purposes. 3. How we share your personal information We share personal information only as needed to operate the Service: a) Hosting and infrastructure: Hetzner Online GmbH (Germany), MongoDB Atlas (database) and Vercel Inc. (United States). b) AI processing: Pollinations, for text generation, speech-to-text and text-to-speech. We send only the lesson content and the information needed to run the lesson (such as the student's first name and grade level), not parent contact details. c) Payments: Dodo Payments (web subscriptions, acting as merchant of record), Apple Inc. and RevenueCat Inc. (iOS in-app subscriptions). d) Authentication and analytics: Google LLC (Sign in with Google and Google Analytics). e) Communications: Namecheap Private Email (email), Twilio Inc. (SMS), Apple Push Notification service (iOS mobile notifications). f) Professional advisors, authorities and others where required by law, legal process or to protect rights and safety. g) A successor entity in connection with a merger, acquisition or sale of all or part of our business, subject to this Privacy Policy. 4. Retention We retain account, profile and learning data for as long as the account is active. When a parent deletes the account, the account, all student profiles, related learning data, subscription records and registered device notification tokens are permanently deleted. Invoices are issued and retained by our payment providers acting as merchant of record (Dodo Payments for web, Apple for iOS) under their own legal obligations. Voice data is not stored. One-time verification codes expire within minutes. Security logs are kept for a limited period and then deleted or anonymized. 5. Your choices a) Access and update: parents can review and update account and student profile information in the parent dashboard. b) Delete your account: parents can delete their account at any time from the parent dashboard or the mobile app, confirmed with the parental PIN. c) Notifications: you can turn lesson reminders and notifications off in the settings. d) Cookies: see our Cookie Policy. e) Do Not Track: we do not currently respond to "Do Not Track" browser signals. f) Declining to provide information: some information is required to provide the Service; if you do not provide it, we may not be able to provide the Service. 6. Children and students The Service is designed to be used by students under the supervision of a parent or legal guardian. Only adults aged 18 or over can create an account. Student profiles, including those of children under 13, are created and controlled by the parent, who provides consent on the student's behalf. We collect from students only the information reasonably necessary to provide lessons. Parents can review the student's lesson history, request correction or deletion, and stop further collection at any time by deleting the student profile or the account. If you believe that we have collected personal information from a child without the consent of a parent or guardian, please contact us and we will delete it. 7. Security We employ technical and organizational safeguards designed to protect personal information, including encrypted connections, hashed credentials and access controls. However, no internet or information technology is completely secure and we cannot guarantee the security of your personal information. 8. International data transfer We are based in Turkey and use service providers located in other countries, including the European Union and the United States. Your personal information may be transferred to countries whose privacy laws may not be as protective as those in your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses. 9. Notice to European and UK users a) Controller: Oguzhan Cart (Askarf) is the controller of your personal information for the purposes of the EU General Data Protection Regulation and the UK GDPR (together, the "GDPR"). b) Legal bases: performance of a contract (providing the Service and processing subscriptions); legitimate interests (security, fraud prevention, student safety review and service improvement); compliance with legal obligations (billing records); and consent (analytics cookies where required). c) Your rights: you may request access to, correction of, deletion of, restriction of, or portability of your personal information, object to processing based on legitimate interests, and withdraw consent at any time without affecting prior processing. d) Complaints: you may lodge a complaint with the data protection authority in your country of residence or, in the UK, the Information Commissioner's Office. e) Requests can be sent to info@askarf.com. We respond within one month. 10. U.S. state privacy rights notice Depending on your state of residence (including California), you may have the right to know what personal information we collect and how we use and disclose it, to access, correct and delete your personal information, and to appeal our decision on your request. We do not sell or share personal information for cross-context behavioral advertising, we do not process personal information for targeted advertising, and we do not use personal information for profiling that produces legal or similarly significant effects. You will not be discriminated against for exercising your rights. To exercise your rights, email info@askarf.com; we may need to verify your identity before responding. An authorized agent may submit a request on your behalf with your written permission. 11. Changes to this Privacy Policy We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date above and, where appropriate, by email or an in-app notice. 12. How to contact us Name: Oguzhan Cart, doing business as Askarf Email: info@askarf.com Website: askarf.com