Privacy Policy

1. Who we are

This Privacy Policy explains how personal data is handled in the Pursuits mobile app for iOS and Android (the “App”) and on the website pursuitsapp.com (the “Website”), together the “Services”. Pursuits is developed and operated by Batuhan Özcan (“Pursuits”, “we”, “us”), who is the data controller for the personal data described here.

Questions or requests about your data: info@pursuitsapp.com.

2. Information we collect in the App

2.1 Account information

You can start without an account; in that case your progress is linked to a randomly generated identifier. If you sign in with Apple, Google or email, we receive your email address (with Sign in with Apple this may be a private relay address), the name you or the sign-in provider share, and a unique user ID. You can also set a display name in the App’s settings.

2.2 Your answers and preferences

During onboarding and in settings you may tell us why you want to learn, your daily goal, your age group, how you heard about Pursuits, and your language, theme and notification preferences.

2.3 Learning activity

The topics you ask about, your conversations with Purr, the learning maps and lessons created for you, your answers to exercises, your progress, streaks and in-app items (such as minerals and hearts), and any feedback, reports or survey answers you send us.

2.4 Material you import

If you import a PDF or document, photos, or a YouTube link, the file or link is sent to our servers and processed by an AI service (see section 5) to extract the study content. We do not store the original file or photo. We keep the extracted content and the learning journey created from it in your account. Please do not import material that contains sensitive personal information about you or anyone else.

2.5 Purchases

Subscriptions and in-app purchases are processed by Apple (App Store) or Google (Google Play). We receive information about your purchases and subscription status, partly through our subscription provider RevenueCat. We never receive your card or payment details.

2.6 Device, usage and diagnostic data

Like most apps, the App collects technical information such as device model, operating system and app version, language, time zone, IP address, events showing how features are used (for example, starting or completing a mission), crash and performance reports, a push-notification token, and app-integrity signals that help us block abuse.

2.7 Advertising and install attribution

We use AppsFlyer and Meta’s app events tools to understand which ads and campaigns lead people to install Pursuits and to subscribe. These tools may process device identifiers. On iOS, your device’s advertising identifier (IDFA) is only available to them if you allow tracking when the App asks; on Android, you can reset or delete your advertising ID in your device settings. The App does not currently show ads. If ads are shown in the future (via Google AdMob), they will be non-personalised unless we ask for and receive your consent.

3. Information we collect on the Website

• Language selection. To show the Website in your language, your browser asks our content-delivery provider, Cloudflare, for your approximate country (derived from your IP address); if that is unavailable, your device’s time zone is used. The resulting language and country code, and any language you pick yourself, are stored only in your browser’s local storage (the country result for up to 7 days). This information is not sent to us, and we do not use cookies for it.
• Contact form. If you write to us, we receive your name, email address, message, the page language and, where relevant, the topic of your message. The form is delivered to our inbox by FormSubmit (formsubmit.co).
• Hosting and security. Our hosting providers, Amazon Web Services and Cloudflare, process your IP address and request details in server logs to deliver and protect the Website. Cloudflare may set strictly necessary security cookies.
• Fonts. The Website loads fonts from Google Fonts, so Google receives your IP address when the page loads.

The Website does not use analytics or advertising trackers.

4. How we use your information

Where the GDPR or a similar law applies to you, each use below relies on the legal basis shown in brackets.

• To provide the App: create and save your learning journeys, sync your progress across devices and run your account (performance of a contract).
• To generate lessons and exercises with AI from your topics and imported material (performance of a contract).
• To manage subscriptions and purchases (performance of a contract).
• To send reminders and notifications you have allowed (consent, which you can withdraw in your device settings).
• To measure usage, fix crashes, improve the Services and protect them from abuse (legitimate interests).
• To measure the results of our advertising (your consent where required, for example through Apple’s tracking prompt; otherwise our legitimate interests).
• To answer your messages (legitimate interests).
• To comply with legal obligations and enforce our Terms & Conditions (legal obligation; legitimate interests).

5. AI processing

Pursuits uses Google’s Gemini models, through the Gemini API, to turn your topics, messages to Purr and imported material into learning maps, lessons and exercises. To ground lessons in real sources and find images, short search queries based on your topic are sent to the search provider Serper. They do not include your name or account details. For YouTube imports, we retrieve the video’s public information and captions from YouTube.

AI-generated content can contain mistakes. It is provided for learning and is not professional or academic advice.

6. Community

Pursuits has a Community section where topics that learners explore can be shown to other users. Your name is shown there only if you turn on “Show name in Community” in settings, which is off by default.

7. Who we share information with

We share personal data only with service providers that help us run the Services, and only as needed for the purposes above:

• Google: Firebase (authentication, database, storage, cloud functions, analytics, Crashlytics, cloud messaging, remote config, App Check), Google Cloud, the Gemini API, Google Sign-In, Google Play and Google Fonts.
• Apple: Sign in with Apple and the App Store.
• RevenueCat: subscription management.
• AppsFlyer and Meta Platforms: install attribution and campaign measurement.
• Serper: web search for lesson sources and images (topic queries only).
• Cloudflare and Amazon Web Services: Website delivery, hosting and security.
• FormSubmit: delivery of Website contact-form messages.

We may also disclose information when the law requires it, to protect our rights or the safety of users, or as part of a business transfer. We do not sell your personal data.

8. International transfers

Our service providers may process data outside your country, including in the United States and the European Union. Where required, these transfers rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, and on the conditions for cross-border transfers under Turkish personal data protection law (KVKK).

9. How long we keep information

We keep your account and learning data for as long as your account exists. When you delete your account in the App, your account and the learning data linked to it are deleted from our database, except for information we must keep to meet legal obligations. Copies may remain in service providers’ backups and logs for a limited time before they are overwritten. Analytics and diagnostic data are kept according to our providers’ retention settings. We keep contact-form messages only for as long as we need them to handle your request.

10. Your rights and choices

Depending on where you live (for example, under the GDPR or Article 11 of KVKK), you have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and withdraw consent at any time without affecting earlier processing. To exercise these rights, email us at info@pursuitsapp.com. We aim to respond within 30 days. You can also complain to your local data protection authority; in Türkiye, this is the Personal Data Protection Authority (KVKK).

You can also:

• Delete your account from the App’s settings.
• Turn notifications on or off in your device settings.
• Allow or deny tracking on iOS (Settings → Privacy & Security → Tracking), or reset your advertising ID on Android.
• Turn “Show name in Community” on or off in the App’s settings.
• Change the Website language at any time from the selector at the bottom of the page.

11. Children

Pursuits is not intended for children under 13, and we do not knowingly collect their personal data. If you are under 16, or under the minimum age set by the law of your country, please use Pursuits only with permission from a parent or guardian. If you believe a child under 13 has given us personal data, contact us and we will delete it.

12. Security

We use technical and organisational measures to protect your data, including encrypted connections, access controls and app-integrity checks. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy when the Services or the law change. We will post the updated version on this page with a new “Last updated” date and, when a change is significant, let you know through the App or by other appropriate means.

14. Contact

Email: info@pursuitsapp.com