Privacy Policy

1. Who we are

Intellege App ("Intellege", "we", "us") runs the Intellege website and app and is the data controller for the personal data described in this policy, within the meaning of the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).

For any privacy question or request, write to help@intellege.app.

2. What we collect

• Account data: your email address, display name, language, time zone and an approximate country derived from your browser's time zone and language settings. If you sign up with a password, our authentication provider stores it in hashed form; we never see it. If you sign in with Google, we receive the name and email address Google shares with us.
• Your answers: the text you type, or the transcript of what you say, together with word timings and how long each answer took.
• Results: scores, written feedback, the topics you studied, recall checks and your review schedule, and any topics you create yourself.
• Fair-play signals: the evaluator estimates how likely it is that an answer was generated by AI. This is used to keep scores meaningful.
• Billing data: if you buy a plan or credits, our payment partner Polar handles your payment details. We only receive your plan, subscription status, orders and refunds — never your card number.
• Technical data: our hosting providers keep standard server logs (such as IP address, browser type and time of request) for security and operations.

3. Why we use it, and on what legal basis

• To provide the service — evaluating your explanations, showing results, scheduling recall checks and managing your credits. Basis: performance of our contract with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• To transcribe voice answers and score your delivery (pace, filler words, steadiness) — only when you choose to answer by voice in a round. Basis: performance of our contract, since transcription is how the voice feature works (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)). Your voice is not used to identify you, and you can always answer in writing instead.
• To take payments, keep accounts and meet tax obligations. Basis: contract and legal obligation (GDPR Art. 6(1)(b) and (c); KVKK Art. 5(2)(ç)).
• To keep the service secure, prevent abuse and keep scoring fair. Basis: our legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• To send service emails such as sign-in links and account confirmations. Basis: contract.

Your scores are produced automatically by an AI evaluator. They describe how well an explanation covered a topic and have no legal or similarly significant effect on you. If you think a score is wrong, tell us and a person will look at it.

We don't sell personal data and we don't use it for advertising profiles.

4. Voice answers

When you answer by voice, your recording is sent to a speech-to-text service so it can be turned into text. Once it has been transcribed, the recording is discarded. We do not store your voice: only the transcript and word timings are kept, so your history and feedback keep working.

Transcription is currently performed by DeepInfra (United States), reached through OpenRouter (United States). Under the terms that apply to our requests, your recording is not used to train models.

5. How AI evaluates your answers

To score an answer we send the topic, the question and the text of your answer to an AI model. The model we currently use is Qwen, provided by Alibaba Cloud International and reached through OpenRouter. We do not send your name, email address or account ID with these requests.

We configure these requests so that providers that store prompts or use them for training are excluded. Your answers are not used to train AI models.

6. Who we share data with

We use the following service providers. They process data on our behalf and only for the purposes above.

• Supabase — database and sign-in. European Union (Frankfurt, Germany).
• Render — application servers. European Union (Frankfurt, Germany).
• Vercel — website hosting and delivery. United States, with a global delivery network.
• OpenRouter — routes our AI and speech-to-text requests. United States.
• Alibaba Cloud International — AI evaluation of answers. Singapore.
• DeepInfra — speech-to-text for voice answers. United States.
• Google — only if you choose to sign in with Google.

Polar Software, Inc. (United States) sells our plans and credits as merchant of record. For your purchase, Polar acts as an independent controller under its own privacy policy.

We may also disclose data where the law requires it, for example to a court or a public authority.

7. International transfers

Some of these providers are located outside Turkey and the European Economic Area, in particular in the United States and Singapore. Where such transfers take place, they rely on the safeguards the law provides — for transfers from the EEA, the European Commission's Standard Contractual Clauses or an adequacy decision such as the EU–US Data Privacy Framework for certified providers; for transfers from Turkey, the mechanisms set out in Article 9 of the KVKK.

8. How long we keep data

• Account data, answers, transcripts and results: for as long as your account exists. When you delete your account they are deleted straight away.
• Voice recordings: not stored. They are discarded as soon as they have been transcribed.
• Purchase records: kept by Polar for as long as tax and accounting law requires.
• Server logs and backups: kept by our providers for a limited period and then overwritten. Deleted data can remain in an encrypted backup until it is overwritten.

9. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or give it to you in a portable format. Under the KVKK you also have the rights listed in its Article 11.

In Settings you can download a copy of your data as a file and delete your account at any time. For every other request, write to help@intellege.app. We answer within 30 days.

You also have the right to complain to a data protection authority — in the EU, the authority in the country where you live; in Turkey, the Personal Data Protection Board (KVKK Kurulu).

10. Cookies and local storage

We only use what is needed to run the service: authentication cookies that keep you signed in, a cookie that remembers your language, and storage on your own device for display settings (theme, background animation and sound).

We don't use advertising or analytics cookies. If that ever changes, we will ask for your consent first and update this policy.

11. Age

Intellege is for people aged 16 and over. We don't knowingly collect data from anyone younger. If you believe a child under 16 has created an account, write to us and we will delete it.

12. Security

Data is encrypted in transit, passwords are stored only in hashed form, and access to production systems is restricted. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

13. Changes

If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect. The date at the top shows when it was last updated.