Privacy Policy

Last updated: October 27, 2026

1. Who We Are and What This Policy Covers

UNIQLM is provided by VIAVERBA YAPAY ZEKA TEKNOLOJİ VE EĞİTİM ANONİM ŞİRKETİ ("UNIQLM", "we", "us"), Soğanlık Yeni Mah. Baltacı Mehmetpaşa Sk. AC Moment Yapı B Blok No: 4B İç Kapı No: 286 Kartal / İstanbul, Türkiye, MERSIS 0925134350600001. We are the data controller for the personal data described here.

This policy covers the website uniqlm.com and the UNIQLM apps for iPhone, iPad and Android. It is our privacy notice under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, Articles 13 and 14 of the EU General Data Protection Regulation (GDPR). A Turkish version is available at uniqlm.com/gizlilik. If the two versions differ, the Turkish version prevails for users in Türkiye.

Please read Section 4 carefully. It explains which parts of your profile and content are public and can appear in search engines.

2. Information We Collect

2.1 Information you give us

  • Account details: name and email address
  • Profile details: display name, public handle, profile photo, role, goal, profession, age range or date of birth, native language, country, education level, interests and bio
  • What you create and send in the app: messages to the assistant, course topics, answers, notes, courses you publish, uploaded files, photos and voice recordings
  • People you add to share your progress with: their name and email address. Only add people who agree to this.
  • Reports you send about other users or content, and people you block
  • Purchases: which plan or credit pack you bought and when. Card details are never stored by us.
  • Messages you send to our support

2.2 Information collected automatically

  • Learning activity: lessons opened, answers, mistakes, mastery, progress, XP, level and streak
  • Social activity: who you follow and who follows you, duels you play and their results
  • Usage data: features you use and how you interact with the app
  • Device data: device type, operating system, app version, a random device ID created by the app and, if you allow notifications, a push notification token
  • IP address, used for security, rate limiting and to choose your currency and country
  • Crash and error reports (not linked to your account)

We do not use the advertising identifier, we do not show ads, we do not sell personal data, and we do not track you across other companies' apps or websites.

2.3 Information from other companies

  • Sign in with Google: your name, email address and profile picture
  • Sign in with Apple: your name and your email address, or the private relay address Apple creates if you choose to hide your email. We also keep a token Apple provides so we can revoke the Apple connection when you delete your account.
  • Apple App Store and Google Play: confirmation of your in-app purchases and subscription status (renewal, cancellation, billing problems, refunds)
  • iyzico: confirmation of payments you make on the website

Signing in with Google does not give us access to your Gmail, Google Drive or Google Calendar. Connecting Google Calendar is a separate, optional step described in Section 6.

2.4 Sensitive data

UNIQLM does not ask for and does not need special categories of personal data, such as health, religion, ethnic origin, political opinions, biometric data or criminal records. Please do not enter them in messages, files, your bio or courses. If you choose to include them anyway, you do so on your own initiative, and they are processed only as part of the content you asked us to handle.

3. Why We Use Your Data and Our Legal Bases

PurposeDataLegal basis
Creating and running your account, signing you in, providing courses, lessons, the assistant and progress trackingAccount, profile, content and learning dataPerformance of our contract with you (KVKK Art. 5/2-c, GDPR Art. 6/1-b)
Processing purchases and subscriptions, giving credits and features you paid forPurchase and subscription dataPerformance of contract (KVKK 5/2-c, GDPR 6/1-b)
Invoices, accounting and tax records, answering requests from authoritiesPurchase, identity and transaction recordsLegal obligation (KVKK 5/2-ç, GDPR 6/1-c)
Security, fraud and abuse prevention, reviewing reports and blocks, fixing errors, rate limitingDevice data, IP address, logs, crash reports, reports you or others sendOur legitimate interest in a safe service (KVKK 5/2-f, GDPR 6/1-f)
Improving features and understanding how the app is usedUsage and learning activity dataOur legitimate interest (KVKK 5/2-f, GDPR 6/1-f)
Your public profile and courses you publishThe profile sections and courses you choose to make publicData made public by you (KVKK 5/2-d) and performance of contract
Sending your profile details (name, education level, interests, bio) to AI providers to personalize lessonsPersonalization detailsYour explicit consent, which you can withdraw (KVKK 5/1, GDPR 6/1-a)
Push notifications, study reminders and optional emailsPush token, email addressYour consent or choice in the app and device settings
Transfers abroad (Section 8)As described in Section 8KVKK Art. 9 and, where applicable, GDPR Chapter V

Where we rely on consent, you can withdraw it at any time. Withdrawing does not affect processing that already took place. Where we rely on legitimate interest, you can object as described in Section 11.

4. Your Public Profile and What Others Can See

UNIQLM is a learning community. Some information is visible to other users and, for adults, to anyone on the internet. You control most of it in Profile → Settings → Public.

4.1 Public profile page

  • When we know your age, a public profile page at uniqlm.com/u/your-handle is created and turned on when you sign up.
  • By default it shows your display name, profile photo, the people you follow, your followers and the courses you published. Your bio, goals, interests, stats, badges, profession, location, current courses and activity are hidden by default.
  • You can show or hide each section, limit it to followers or to selected people, change your handle, or turn the whole page off at any time.
  • If you keep the page on or make more sections public, you choose to make that information public.

4.2 Search engines and AI crawlers

  • Public profile pages of adults and published courses can be indexed by search engines such as Google, and read by AI crawlers. They can then appear in search results and in answers of AI services.
  • Profiles of users under 18 are never indexed and never listed in our sitemap.
  • If you turn your page off, hide sections or unpublish a course, we stop showing them and mark them as not indexable. Search engines and other services may keep copies or caches for some time. Removing those copies is controlled by those companies, and you can ask them directly (for example with Google's removal tools).

4.3 Published courses

Courses you publish on the marketplace are public. They show your author name, and can be viewed, added and shared by other users and visitors. Others may copy or save what they see. Do not publish anything you do not want to be public, including personal data of other people.

4.4 Followers, duels and sharing

  • Other users can follow you, find you in learner search and see you in suggestions, unless you are under 18.
  • Duels with people you follow show your name, photo and score. Random duels are anonymous: your opponent sees only a nickname.
  • When you share a course, lesson or result, the people you share it with can see it.
  • You can report users and content and block users. Blocked users cannot follow you, challenge you or share with you.

4.5 Users under 18

For users under 18 we show only a nickname such as "Learner-4821" on their page, never a photo, bio, goals, interests, profession or location, whatever the settings say. Their names and photos are also hidden in duel history, they are not shown in learner search or suggestions, and their pages are never indexed.

5. AI Processing

UNIQLM uses AI models to create your courses and lessons, answer your questions in the assistant, check your answers and adapt your learning. To do this, the data below is sent to the AI providers listed in this section. They process it on our behalf to produce a response.

5.1 Always sent when you use AI features

  • What you type, the files you upload and your voice (after it is turned into text)
  • Profile info: role, goal, profession, age range, native language and country
  • Your learning history in UNIQLM (progress, mistakes, XP, level and streak)

This is needed to provide the AI features of the service you signed up for.

5.2 Sent only with the personalization permission

If you turn on Lessons made just for you, your name, education level, interests and bio are also sent, so lessons can be shaped around you. This permission is optional and the app works without it. You can turn it off anytime in Profile → Settings → Privacy & Consents, and these details stop being sent right away.

5.3 AI providers

ProviderCompanyBased in
Google GeminiGoogle LLCUnited States
OpenAIOpenAI, L.L.C.United States
AnthropicAnthropic, PBCUnited States
DeepSeekHangzhou DeepSeek Artificial Intelligence Co., Ltd.China

DeepSeek is based in China, so data sent to it is transferred to and processed in China. Each provider also processes data under its own terms and policies.

5.4 Automated processing and AI output

Lessons, recommendations and feedback are prepared automatically. They do not produce legal effects for you and are not used to make decisions about you such as eligibility for services or credit. You can object to a result produced only by automated analysis (KVKK Art. 11/1-g). AI output can be incomplete or wrong. It is educational support, not professional advice, so please check important information.

6. Google Calendar Connection (Optional)

UNIQLM offers an optional integration that lets the in-app assistant work with your Google Calendar on your behalf. It is the only Google service UNIQLM connects to: we do not access your Gmail or your Google Drive. This connection is never enabled by default, is separate from signing in with Google, and can be revoked at any time. If you never connect your Google Calendar, nothing in this section applies to you.

6.1 What we request and why

  • Calendar (auth/calendar): to place study-plan blocks on your calendar, read your existing events so we can avoid scheduling conflicts, and remove blocks we previously created.
  • Basic identity (openid, userinfo.email, userinfo.profile): to show you which Google account is connected.

We do not request any Gmail or Google Drive permission. If you connected UNIQLM to Google before October 2026, that earlier connection may still list Gmail or Drive access in your Google Account. UNIQLM no longer uses it, and reconnecting (or disconnecting) removes it.

6.2 How we store and use it

Connecting stores Google authorization tokens in our database in a record bound to your account and protected by row-level security, so no other user can read them. Tokens travel over encrypted connections (TLS) and are used only on our servers to call Google APIs on your behalf. We never see your Google password.

Google data is retrieved only to carry out the specific action you asked for in the app, and we do not store copies of your calendar events beyond what is needed to complete that action. When you ask the assistant to reason about such content, the relevant excerpt is sent to an AI provider listed in Section 5 solely to produce your answer. We do not use Google data for advertising, and we do not sell it.

6.3 Limited Use of Google Calendar data

UNIQLM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

  • We do not use Google Calendar data to train or improve AI models. Content obtained from your Google Calendar is never used to create, train, or improve any generalized machine learning or artificial intelligence model, whether ours or a third party's.
  • Restricted routing. When a conversation contains Google Calendar content, our servers route that request only to an AI provider operating under a contractual commitment not to train on submitted data. Requests carrying Calendar content are refused rather than sent to any provider without that commitment.
  • No human review. We do not read your Google Calendar content, and we do not permit our AI providers to subject it to human review, except where required by law, necessary for security purposes such as investigating abuse, or where you have given explicit prior consent.
  • No transfer or sale. We do not transfer or sell Google Calendar data, and we do not use it for advertising, credit assessment, or lending purposes.

6.4 Disconnecting

You can disconnect at any time from Profile → Settings → Connections inside the app, or from your Google Account at myaccount.google.com/permissions. Disconnecting from within UNIQLM revokes the authorization with Google and deletes the stored tokens from our database.

7. Sharing and Service Providers

We do not sell your personal data. We share it only:

  • with the service providers below and the AI providers in Section 5, which process it on our behalf
  • publicly or with other users as described in Section 4, based on your settings and what you publish
  • with the people you choose, when you share a course, lesson or progress
  • with courts, authorities and law enforcement when the law requires it
  • when needed to protect the rights, safety and property of our users, the public or UNIQLM
  • with a buyer or successor if UNIQLM is merged, acquired or its assets are transferred, under the same protections as this policy
ServicePurposeLocation
Supabase Inc.Database, sign-in and file storage. Your account and learning data are stored here.Sydney, Australia
Vercel Inc.Website and server hosting, content deliverySydney, Australia (servers), global (content delivery)
Apple Inc.Sign in with Apple, in-app purchases on iPhone and iPad, push notifications on Apple devicesUnited States
Google LLCSign in with Google, in-app purchases on Android (Google Play), push notifications on Android, text-to-speech, and web, YouTube and book searches the assistant runs for youUnited States
AssemblyAI, Inc.Turning your voice into text when you speak to the assistantUnited States
iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. (iyzico)Card payments on the website. Card details are entered on iyzico and never stored by us.Türkiye
Stripe, Inc.Payouts to course creators who sell coursesUnited States
Resend, Inc.Sending emails such as reminders and account messagesUnited States
Functional Software, Inc. (Sentry)Crash and error reports. These reports are not linked to your account.United States
Upstash, Inc.Limiting how many requests can be sent in a short time, to protect the serviceUnited States

8. Where Your Data Is Processed

Your account and learning data are stored in Sydney, Australia. Some service providers and AI providers process data in the United States and, for DeepSeek, in China. Payments on the website are processed in Türkiye. These transfers are needed to provide the service you use, and they are carried out in line with Article 9 of KVKK and, where applicable, Chapter V of the GDPR. We work with providers that encrypt data in transit and limit their use of it to providing their service to us.

9. Security

We use encryption in transit (TLS), database access rules so each user can reach only their own private data, server-side checks for purchases, rate limiting and secure sign-in. Access to personal data inside UNIQLM is limited to people who need it for their work. No method of storage or transmission is 100% secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authority as required by law.

10. How Long We Keep Your Data

DataHow long
Account, profile, content and learning dataWhile your account is open. After you delete your account, 30 days for recovery, then erased.
Invoices, payment and accounting recordsUp to 10 years, as required by Turkish commercial and tax law
AI personalization detailsUntil you withdraw consent or delete your account
Security logs, error and crash reportsOnly as long as needed for security and fixing errors, then deleted or anonymized
Reports and blocksAs long as needed to protect users and to handle legal requests
BackupsOverwritten on a rolling basis. Deleted data disappears from backups as they are replaced.

You can export your data or delete your account inside the app at Profile → Settings → Privacy & Consents, or on the web at uniqlm.com/account-deletion. When you delete your account you are signed out right away, and if you signed in with Apple we revoke the Apple connection. At the end of the 30 days your public page and published courses are erased with the rest of your data. If you want your public page to disappear right away, turn it off in Profile → Settings → Public before deleting. Deleting your account does not cancel an App Store or Google Play subscription. Cancel it in your Apple or Google account settings.

11. Your Rights

Under KVKK Article 11 and, where it applies, the GDPR, you can:

  • learn whether we process your personal data and request information about it
  • learn the purpose of processing and whether it is used for that purpose
  • learn who it is transferred to in Türkiye or abroad
  • ask us to correct incomplete or inaccurate data, and to inform the recipients
  • ask us to delete or destroy your data, and to inform the recipients
  • object to a result against you that comes only from automated analysis
  • claim compensation if you suffer damage from unlawful processing
  • withdraw a consent you gave, take your data to another service, and object to or restrict some processing (GDPR)

Many of these you can do yourself in the app. Otherwise, email uniqlm@uniqlm.com from the email address of your account, or send a written request to our address in Section 1. We may ask you to confirm your identity. We answer free of charge within 30 days at the latest. If you are not satisfied, you can complain to the Personal Data Protection Authority (KVKK) in Türkiye or to the data protection authority where you live.

12. Children

UNIQLM is for users aged 13 and over. If you are younger than the age of digital consent in your country (13 in Türkiye and the United States, up to 16 in some other countries), you can use UNIQLM only with approval from a parent or your school. Users under 18 need permission from a parent or guardian. Section 4.5 explains the extra protections for users under 18. If we learn that we collected data from a child without the required approval, we delete it. Parents can contact us at the address below.

13. Your Responsibilities

  • Give accurate information, especially your age.
  • Only add or share other people's personal data (for example in courses, files, or the people you share progress with) when you have the right to do so.
  • Check your Public settings before publishing, and remember that public content can be copied by others.
  • Keep your device and sign-in method secure.

14. Cookies, Notifications and Other Services

On the website we use cookies and local storage to keep you signed in and remember your preferences. Optional categories can be managed in Profile → Settings → Privacy & Consents and in your browser. Push notifications are optional. You can turn them off anytime in your device settings or in the app.

Lessons and the assistant can link to or show content from other services, such as YouTube videos or websites. Their own privacy policies apply when you use them.

15. Changes to This Policy

When we change this policy we update the date at the top. If the change is important, we show it to you in the app before you continue.

16. Contact

VIAVERBA YAPAY ZEKA TEKNOLOJİ VE EĞİTİM ANONİM ŞİRKETİ
Soğanlık Yeni Mah. Baltacı Mehmetpaşa Sk. AC Moment Yapı B Blok No: 4B İç Kapı No: 286 Kartal / İstanbul, Türkiye
MERSIS: 0925134350600001
Email: uniqlm@uniqlm.com