Privacy Policy

Who is responsible

Mayk AI is operated by PEAK SALES DİJİTAL PAZARLAMA (Türkiye). Contact: [email protected] or +90 538 612 63 16. Last updated: 2026-10-02.

Your tutor is an AI

Mayk is not a human being: the conversation is produced by an AI model. It can be wrong, and it is not medical, legal or financial advice.

What we collect

Device account: the first time you open the app we create an account for your device without asking for an email or a password. To do that we store a hash of a random key generated on your device and the IP address the account was created from; the IP is kept only to stop abuse (unlimited free accounts from one place).

Account: the name you give us, your interface language, native language, target language, country, tutor name, daily goal and reminder hour. If you later save your account with Apple or with an email and password, those credentials are added.

Lesson data: transcripts of what you and the tutor said, detected mistakes, word cards, lesson summaries and interest notes derived from conversations (learner memory). Audio is not stored: it is streamed to the voice provider only during a live lesson and discarded when the lesson ends.

Usage: screen view durations, lesson durations, app version, device model, operating system, event logs; subscription status and purchase events via the app stores (we never receive card details).

If you allow notifications: your push token and time zone.

Advertising and tracking

We use AppsFlyer (a processor) to measure whether our ads work. AppsFlyer receives app install and open events and events such as registration, first lesson, trial start, subscription and purchase (with amount and currency), along with device and app information and your IP address. It never receives your conversations, lesson content, name or email.

On iOS we use the advertising identifier (IDFA) only if you allow it in Apple's App Tracking Transparency prompt; if you don't, measurement uses Apple's privacy-preserving SKAdNetwork and AdServices without identifying you. On Android you can reset or turn off the advertising ID in your device settings.

Through AppsFlyer these events are shared with the platforms where we advertise (Meta, TikTok, Apple Search Ads) only to measure ads and improve ad delivery. You can withdraw permission on iOS at any time in Settings → Privacy & Security → Tracking.

Why and on what basis

To deliver lessons, track your level and manage your subscription (performance of a contract); to improve the product, find bugs and prevent abuse (legitimate interest); to send notifications and, on iOS, to measure ads with the advertising identifier (your consent); to measure ad effectiveness without identifying you (legitimate interest); to meet legal obligations.

Who we share it with

AI providers (processors): OpenAI (live voice conversation) and Anthropic (assessment, subtitles, explanations, summaries). They receive only the audio and text needed for the lesson, never your name, email or account identifier. Under our agreements this data is not used to train models.

Subscriptions: Apple App Store, Google Play and RevenueCat. Ad measurement: AppsFlyer. Error and crash tracking: Sentry. Hosting: Hetzner (Germany) and Cloudflare.

We do not sell your data. Apart from the ad measurement described above we do not share it for advertising, and we share it with no one else unless the law requires it.

Some providers are in the United States; transfers are covered by standard contractual clauses and the providers' data processing agreements.

How long we keep it

Lesson data and account details are kept while your account exists. Session keys expire after 180 days. Product usage events are kept for at most 24 months.

Deleting your account in the app (Me → Delete account) permanently erases your lessons, transcripts, word and mistake notebooks, learner memory, push tokens, learning profile, sessions and the stored IP; your name and email are anonymized. Purchase records required for accounting are kept without identifying you for the legally required period.

Your rights

You can access, correct, delete, export and object to the processing of your data (GDPR and Turkish KVKK). Use the in-app deletion or write to [email protected]; we answer within 30 days. EU residents may complain to their data protection authority, and people in Türkiye to the KVKK Authority.

Children

The app is not for children under 13 and we do not knowingly collect their data. Kids themes are designed to be used with an adult's account and supervision. If we learn that we hold data from a child under 13, we delete it.

Security

Data is protected with TLS in transit and encrypted disks and backups at rest. Passwords are stored irreversibly hashed (bcrypt). AI provider keys live only on our servers and never reach the device.

Changes

When this policy changes we notify you in the app and update the date above.