Privacy Policy

1. Introduction

This Privacy Policy explains what information Kurdlingo (“Kurdlingo,” “we,” “us”) collects through the Kurdlingo app and related services (the “Service”), how we use it, who we share it with, and the choices you have. It should be read together with our Terms of Service.

2. Information We Collect

We collect the following categories of information:

• Account information: your name, email address, and authentication data when you sign in with Apple or email.
• Learning progress: the lessons you complete, your streak count, and your league standing, so we can show your progress and rank you against other learners.
• Push notification tokens: a device identifier used to deliver notifications (e.g. a streak reminder, or a league result).
• Device and crash analytics: device type, OS version, app version, and crash/error diagnostics collected automatically through Sentry to help us fix bugs.

Kurdlingo does not access your precise location, your contacts, or any vehicle or driving data — the Service has no need for it.

3. How We Use Your Information

We use the information above to:

• Create and secure your account and authenticate you;
• Operate core features — lessons, streaks, and leagues — and show your progress;
• Send push notifications and transactional emails (e.g. account, security, or streak-reminder notices) via Resend;
• Diagnose crashes and errors and improve app stability and performance;
• Comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use it for advertising.

4. Who We Share Information With

We share information with the following categories of third parties, only as needed to run the Service:

• Apple — for Sign in with Apple authentication.
• Resend — for sending transactional emails (account and security notices).
• Sentry — for crash reporting and error diagnostics.
• Hosting providers — our backend runs on a self-managed Coolify VPS and our web properties are hosted on Vercel; these providers store and process data on our behalf under their infrastructure security controls.
• Other learners, limited to what a league or leaderboard shows (your display name, streak, and league standing).
• Law enforcement or regulators, only where required by law or to protect the rights, safety, or property of Kurdlingo or our users.

We do not share your data with data brokers or for third-party advertising purposes.

5. Data Retention

We keep your account information and learning progress for as long as your account is active. Crash and analytics data collected through Sentry is retained according to Sentry’s standard retention window, primarily for debugging recent issues. When you delete your account, we delete or anonymize your personal data as described in Section 6, subject to any legal retention requirements.

6. Your Choices & Data Deletion

You can:

• Delete your account directly from the app’s account settings, which removes your profile and learning progress;
• Or request deletion by emailing xdniklaus@gmail.com from the email associated with your account;
• Revoke notification permissions at any time from your device’s OS settings.

See our Support page for step-by-step deletion instructions.

7. Children’s Privacy

Kurdlingo does not knowingly collect personal information from anyone under 13, and in jurisdictions that set a higher age of digital consent (up to 16), we do not knowingly collect personal information from anyone under that age without the consent required there. If you believe a child has provided us with personal information, contact us at xdniklaus@gmail.com and we will delete it.

8. Data Security

We use industry-standard measures — including encryption in transit and access controls — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Our infrastructure and service providers (including our hosting on Coolify and Vercel, and processors such as Apple, Resend, and Sentry) may process data in countries other than where you live. Where required, we rely on appropriate safeguards for these transfers.

10. Governing Law & Your Rights

This Policy is governed by the laws of [Jurisdiction]. Placeholder — owner to confirm the controlling jurisdiction and add region-specific rights language (e.g. GDPR access/erasure/portability rights for EU/UK users, or CCPA/CPRA rights for California residents) once the primary user base and legal entity location are known. Depending on where you live, you may have additional rights to access, correct, export, or delete your personal data, or to object to certain processing. To exercise any such rights, contact us at xdniklaus@gmail.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app or by email before they take effect.

12. Contact Us

Questions about this Privacy Policy or your data? Email xdniklaus@gmail.com.