Last updated: October 14, 2026
Version 2.2
DailyEnglish ("App", "we", "our") is committed to protecting your personal data in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR").
The data controller responsible for processing your personal data:
| Category | Examples | Legal Basis |
|---|---|---|
| Identity data | Email, username, display name | Contract performance |
| Profile data | Profile photo, bio, language preference | Consent |
| Contact data | Email address (support requests) | Contract performance |
| Category | Examples | Legal Basis |
|---|---|---|
| Learning data | Reading history, quiz results, vocabulary lists, progress | Contract performance |
| Usage data | Session duration, feature interactions, screen views | Legitimate interest |
| Device data | OS, app version, device model | Legitimate interest |
| Install source | Which store the app was installed from and (on Android) which link or campaign led to the install | Legitimate interest |
| Notification token | FCM push notification token | Consent |
| Crash data | Error reports, stack traces | Legitimate interest |
On iOS devices, we access your Identifier for Advertisers (IDFA) only with your explicit permission via Apple's App Tracking Transparency (ATT) framework. If you decline, this data is not collected. On Android, the Google Advertising ID (GAID) may be used for similar purposes.
We do not sell your personal data. We share limited data with the following service providers solely for the stated purposes:
| Provider | Purpose | Data Type | Location |
|---|---|---|---|
| Firebase (Google) | Push notifications, crash reports, usage analytics (Google Analytics for Firebase) | FCM token, device info, error logs, in-app interactions, app instance ID, user ID | US / EU |
| Apple App Store | Purchase verification | Receipt data | US |
| Google Play Store | Purchase verification | Receipt data | US |
Through Firebase services, your data may be processed on servers in the US and EU. These transfers are safeguarded by Google's Standard Contractual Clauses (SCCs) in accordance with KVKK Art. 9 and GDPR Art. 46.
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion |
| Learning data (XP, badges, progress) | Until account deletion |
| Usage analytics (our own servers) | Until the account is deleted |
| Usage analytics (Google Analytics for Firebase) | 14 months |
| Crash reports | 90 days |
| Subscription receipts | 10 years (legal requirement) |
| Support requests | 2 years after resolution |
When you delete your account, your personal data is permanently deleted within 30 days. Data subject to legal retention obligations (subscription receipts) is excluded from this timeline.
We implement the following technical and organizational measures to protect your data:
Our App performs profiling to personalize your learning experience (CEFR level assessment, content recommendation, difficulty adjustment). This profiling is solely for improving educational quality and does not involve automated decision-making with legal effects.
Under KVKK Art. 11 and GDPR Arts. 15-22, you have the following rights:
Our mobile app does not use browser cookies. To understand how the app is used and to improve the service, in-app interactions (screens opened, texts read, features used) are processed on our own servers and through Google Analytics for Firebase. This data is linked to your account ID, but:
When you delete your account, your analytics data on our servers is deleted as well; data in Google Analytics is deleted at the latest when its retention period (14 months) ends.
Our App is not intended for children under 13. Accounts of users found to be under 13 will be promptly deleted along with all associated data. Parents may contact us at privacy@getdailyenglish.com.
We may update this policy. You will be notified of significant changes via in-app notification and/or email. Continued use of the App after updates constitutes acceptance of the revised policy.
You may file complaints regarding the processing of your personal data with the Turkish Data Protection Authority (KVKK): www.kvkk.gov.tr
EU residents may also contact their local Data Protection Authority.