本隐私政策目前提供英语、土耳其语和俄语版本，下面显示的是英语版本。
Qazaq Tili — Privacy Policy
Last updated: 1 August 2026
Qazaq Tili ("the app") is a Kazakh language learning app published by Mehmet Uğur ("we", "us"). This policy explains exactly what leaves your device, where it goes, and how long it is kept.
The app is offline-first. Every feature except the four optional online services listed in section 2 works with no network connection and sends nothing anywhere.
1. Data stored on your device only
Your learning progress — XP, streak, completed lessons, learned words, review schedule, badges, daily statistics, settings, and your chosen interface language — is stored locally using Apple's SwiftData framework. Downloaded pronunciation audio is cached in the app's own file container.
None of this leaves your device unless you sign in for sync (section 2.1). Deleting the app deletes all of it.
2. Optional online services
2.1 Account and cross-device sync (optional)
You can use the entire app without an account. If you choose to sign in — with Sign in with Apple or with an email magic link — we store the following on our own backend (Cloudflare Workers, D1 database, EU/global edge):
| Stored | Why |
|---|---|
| A random user id | Identifies your account |
| Apple subject identifier, or your email address | Lets you sign in again |
| Display name and avatar choice (if you set them) | Shown in the app |
| Your learning progress snapshot | Sync between your devices |
Session records: device name, device identifier (Apple's identifierForVendor), platform, a SHA-256 hash of the active refresh token, sign-in IP address, timestamps | Keeps you signed in and powers the "active devices" security screen so you can spot and revoke unfamiliar sign-ins |
Email magic-link tokens are stored for 15 minutes, are single-use, and are deleted after that.
If you use Sign in with Apple with "Hide My Email", we only ever see Apple's private relay address.
**We never sell this data, never use it for advertising, and never share it with third parties.**
Deletion: Settings → Account → Delete account removes your account and every row linked to it (progress, sessions) from our database immediately and permanently.
2.2 AI conversation practice (Premium only)
Premium subscribers can practise conversation with an AI tutor.
Please read this carefully — it involves a processor outside the EU/US.
- Your chat messages are sent to our backend, which forwards them to
DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.), an AI provider whose servers are located in the People's Republic of China.
- What is forwarded: the text of the current conversation (at most the last 20
messages, each capped at 500 characters) and a fixed teaching instruction. The app does not attach your name, email, account id, device id, or location.
- We do not store your chat messages. They pass through our backend in
memory and are not written to any database or log.
- DeepSeek processes the messages on its own servers under **its own privacy
policy and Chinese law**, and may retain them and use them to train its models. We have no control over that retention or use. See <https://www.deepseek.com/privacy>.
- Because of this, the app shows a consent screen before your first AI chat
and the feature stays disabled until you accept. You can decline and keep using every other part of the app. That screen also asks you not to share real names, addresses, phone numbers, passwords, or other personal details in the chat.
- To enforce your subscription and fair-use limits we send Apple's signed
transaction receipt to Apple for verification and keep a **usage counter keyed to the Apple transaction id** (daily and monthly), which expires automatically. This counter contains no message content.
- AI output can be wrong. Every AI reply is labelled as such in the app, and you
can report any reply by long-pressing it.
Alternative — bring your own key. Instead of our backend you may enter your own AI provider API key. That key is stored only in your iPhone's Keychain, is sent only to that provider, and never reaches our servers.
2.3 Pronunciation audio (text-to-speech)
To play Kazakh audio the app may request an audio clip from our backend. What is sent is a Kazakh phrase that is part of the app's own course content — never anything you typed. Our backend serves it from cache, or generates it once via Microsoft Azure Speech Service (West Europe region) and stores the resulting MP3 in our own object storage so that it is generated only once for all users.
Free users are limited to a number of new cloud clips per day. That counter is keyed to your IP address, stored for at most 48 hours, and then deleted. No device identifier is requested for this.
2.4 In-app purchases
Subscriptions and content packs are sold and processed by Apple. We receive no card, billing, or contact information. We send Apple's signed transaction to Apple's App Store Server API only to check that a purchase is valid, and we keep the transaction id solely as the key of the expiring usage counters described above.
3. Microphone and speech recognition
The pronunciation exercise asks for microphone permission, and only when you open that exercise. Audio is evaluated by Apple's Speech Recognition:
- on your device where the locale supports it,
- by Apple's servers for locales that do not (iOS has no Kazakh recogniser;
the app falls back to Russian/Turkish phoneme matching, and tells you so).
Your voice is never sent to our servers and never stored by us. Apple's privacy policy governs Apple's part: <https://www.apple.com/legal/privacy/>.
4. Analytics and tracking
None. The app contains no third-party analytics, attribution, or advertising SDKs — no Firebase, no Mixpanel, no AppsFlyer, no ad networks. We do not use the Advertising Identifier, we do not track you across apps or websites, and we do not build advertising profiles. The app's NSPrivacyTracking flag is false.
The only measurement we keep is a set of anonymous counters on our own server: when the subscription screen is shown, or a purchase is started, completed or abandoned, the app sends the event name plus — at most — which screen the subscription page was opened from and which plan was selected. No user ID, device ID, advertising ID or account is attached. Nothing is stored per person: we only increment a daily total per event, so the numbers cannot be linked back to you.
5. Children
The app is rated 12+ and contains no advertising and no user-to-user communication. The AI tutor is constrained by safety rules that refuse harmful, sexual, violent, or illegal content, never ask for the user's name or any other personal detail, never suggest meeting, and redirect any mention of self-harm or danger to a trusted adult or a local emergency line. AI chat is Premium-only and gated behind the consent screen in section 2.2.
6. Retention summary
| Data | Kept for |
|---|---|
| Local progress on device | Until you delete the app |
| Account, progress snapshot, sessions | Until you delete your account |
| Magic-link token | 15 minutes, single use |
| Sign-in IP in session record | Until that session is revoked or the account is deleted |
| Chat messages | Not stored by us (see 2.2 for DeepSeek) |
| Free-TTS IP counter | Up to 48 hours |
| Purchase-quota counter (transaction id) | Rolling daily / monthly window |
| Generated pronunciation audio | Indefinitely — course content only, contains no personal data |
7. Your rights
You can, at any time and without contacting us: use the app fully without an account, sign out, revoke any individual device session, decline AI chat, and delete your account together with all associated data from Settings → Account.
For access, correction, or any other request under the GDPR, the KVKK, or comparable law, write to pix_apps@proton.me.
8. Changes
If this policy changes materially we will update the date at the top and, where the change affects what leaves your device, surface it in the app.
9. Contact
pix_apps@proton.me