LumiTalk

Privacy Policy

Last updated: July 25, 2026 · Türkçe

LumiTalk ("the App", "we") is a personal AI language coach developed by Caner Polat. This policy explains what data the App collects, why, and what your rights are. We keep it short and honest.

1. Data we collect

Account: the App creates a pseudonymous account automatically, tied to your device. We do not ask for your name, e-mail or phone number. A device-derived identifier and a generated credential are used to sign you in.
Learning profile: the language you are learning, your level, your goal and app language.
Learning content: your chat messages with the AI coach, generated lessons and plans, learned words, quiz results and game scores. This is the product — it is how the App remembers your progress.
Subscription status: whether you have an active subscription. Payments are processed entirely by Apple; we never see or store your payment details.
Push token: if you allow notifications, a token used to deliver reminders.

2. Your voice

Speech recognition runs on your device using the operating system's speech engine. Your audio is never uploaded, stored or recorded by us. Only the resulting text of what you said is sent to our servers to generate the coach's reply — exactly like a typed message.

3. AI processing — what is sent to OpenAI

LumiTalk generates its lessons, plans and replies with a third-party AI service. We ask for your explicit permission inside the App before anything is sent, and you can withdraw it at any time under Profile → Legal → AI & my data. If permission is not granted, nothing is sent and the AI features do not run.

What is sent: the messages you write; the text of what you say during voice practice (transcribed on your device); the topic or scenario you pick; and your learning profile — the language you speak, the language you are learning, your level and your goal.
Who receives it: the request goes from the App to our own backend (Supabase Edge Function), which forwards it to OpenAI, L.L.C. (United States), the provider that generates the reply. Our API key stays on the server; the App never talks to OpenAI directly.
What is never sent: your name, e-mail, contacts, location, device identifier, subscription data — and no audio. Voice is converted to text on your device.
What it is used for: only to produce the lesson, plan or reply you asked for. It is not sold, not used for advertising, and not used for user profiling.

OpenAI processes this content as our service provider (data processor) under the OpenAI API terms and their Data Processing Addendum, which provide protections equivalent to those described in this policy: API data is not used to train OpenAI's models, is retained only for a limited period for abuse monitoring and then deleted, and may not be sold or repurposed. Because OpenAI is based in the United States, this content is transferred outside the EEA/UK/Türkiye under the Standard Contractual Clauses included in that addendum.

4. Service providers

Provider	Purpose
Supabase	Database, authentication and backend functions
OpenAI, L.L.C. (US)	AI-generated lessons, plans and conversation replies — only with your in-app permission (see section 3)
RevenueCat	Subscription management (pseudonymous user ID and purchase state)
Apple	Payments, App Store, push notification delivery
Expo	Push notification delivery and app updates

5. What we don't do

We do not sell your data.
We do not show third-party ads or use advertising trackers.
We do not record or store your voice.
We do not send anything to the AI provider without your explicit in-app permission.

6. Retention & deletion

Your data is kept while your account exists. You can delete your account anytime in Profile → Account → Delete account; this permanently removes your profile, chats, words, plans and scores. Subscription billing history is retained by Apple under their policies.

7. Your rights

Under GDPR, the Turkish KVKK and similar laws you may request access, correction, deletion or a copy of your data, and object to processing. The in-app delete covers most of this instantly; for anything else, contact us.

8. Children

The App is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child provided us data, contact us and we will delete it.

9. Changes

We will update this page when the policy changes and revise the date above. Material changes will be announced in the App.

10. Contact

Questions or requests: canerpolat.cnrplt@gmail.com