Privacy Policy

Last updated: May 9, 2026

This Privacy Policy explains how Flapp Bilisim A.S. ("Flapp", "we", "us", or "our") collects, uses, stores, and protects personal data when you use the Flapp AI mobile application, website, and related services (collectively, the "Service").

Flapp AI is operated by Flapp Bilisim A.S., Istanbul, Turkey. You can contact us at support@flapp.ist.

By using Flapp AI, you agree to the collection and use of information described in this Privacy Policy.

1. Age Requirement

Flapp AI is intended only for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe that a person under 18 has provided us with personal data, please contact us at support@flapp.ist and we will take appropriate action.

2. Information We Collect

We collect information that is needed to provide, secure, improve, and personalize the Service.

Account Information

When you create or use an account, we may collect:

• Name and surname

• Email address

• Firebase user ID

• Sign-in provider information, such as email/password, Google Sign-In, or Apple Sign-In

• Account status, role, subscription status, and TOEFL credit balance

If you sign in with Google or Apple, those providers may share basic account information with us, such as your email address and name, depending on your account settings and the permissions you approve.

We do not use profile photos as part of the current Flapp AI experience.

Learning and App Usage Information

We may collect and store:

• Questionnaire answers, such as learning goals, English level, focus areas, native language, age range, and preferences

• Chat messages and AI conversation history

• Speech transcripts generated from your voice input

• Feedback notes, corrections, score details, and saved learning feedback

• Selected topics, subtopics, CEFR level, practice progress, and saved session results

• TOEFL practice session status, TOEFL credit purchases, and TOEFL score-related information

• Contact messages you send through the app

Voice and Audio Information

Flapp AI uses microphone access so you can practice speaking and receive AI feedback.

Voice recordings may be temporarily created on your device so they can be transcribed or scored. We do not intentionally store your raw voice recordings in our long-term user database after processing. Audio may be transmitted to our speech, AI, or prosody processing services to provide transcription, conversation, feedback, scoring, and TOEFL practice features.

Generated transcripts, chat messages, feedback, and scores may be stored as part of your learning history.

Payment and Purchase Information

Flapp AI offers subscriptions and one-time TOEFL credit packs. Payments are processed by Apple, Google, and/or RevenueCat. We do not collect or store your full credit card number or full payment credentials.

We may receive and store purchase-related information such as:

• Subscription entitlement status

• Active subscription type

• Purchase or transaction identifiers

• TOEFL credit purchase status

• Restore purchase status

• Subscription update timestamps

Device, Technical, and Local Storage Information

The app may store basic local settings on your device, such as onboarding completion and local app preferences. We may also receive standard technical information through our service providers, such as device type, operating system, app version, logs, and error information needed to operate and secure the Service.

3. How We Use Information

We use personal data to:

• Create, authenticate, and manage your account

• Provide AI conversation practice, speech transcription, feedback, scoring, and TOEFL practice features

• Save your learning history, feedback, scores, and progress

• Manage subscriptions, TOEFL credits, purchases, and restores

• Respond to support and contact requests

• Improve app reliability, quality, scoring, and user experience

• Prevent abuse, fraud, unauthorized access, and misuse

• Comply with legal, tax, accounting, platform, and regulatory obligations

4. AI Processing

Flapp AI uses artificial intelligence and speech-processing services to power its learning features. Your messages, voice input, transcripts, and practice answers may be sent to AI or speech-processing providers for transcription, conversation generation, feedback, scoring, text-to-speech, and related functionality.

These providers may include:

• OpenAI and Azure OpenAI

• Firebase services

• Flapp-operated scoring or prosody services hosted on cloud infrastructure

AI-generated responses and scores may be inaccurate or incomplete. They are provided for educational practice and should not be treated as professional, academic, immigration, legal, or official testing advice.

5. Service Providers

We use third-party service providers to operate the Service. These providers process data on our behalf or independently according to their own terms and privacy policies.

Our service providers may include:

• Firebase / Google services for authentication, cloud database, app infrastructure, and related backend services

• Google Sign-In and Apple Sign-In for authentication

• OpenAI and Azure OpenAI for AI, speech, transcription, and audio features

• RevenueCat for subscription entitlement management

• Apple App Store and Google Play for purchases, billing, refunds, and subscription management

• Cloud-hosted Flapp scoring services for grammar, vocabulary, prosody, and TOEFL-related scoring

6. Legal Bases

Where applicable, we process personal data based on one or more of the following legal bases:

• Your consent, such as when you grant microphone access

• Performance of a contract, such as providing the app features you request

• Legitimate interests, such as improving, securing, and maintaining the Service

• Compliance with legal obligations

7. Data Storage and Retention

We retain personal data for as long as reasonably necessary to provide the Service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, and support business operations.

Learning history, transcripts, feedback, score records, questionnaire answers, and purchase-related records may remain associated with your account unless deleted or unless retention is no longer necessary.

Raw voice recordings are not intentionally stored in our long-term user database after processing, but generated transcripts, scores, and feedback may be stored.

8. Account Deletion and Data Requests

You can request account deletion from inside the app where available, or by contacting support@flapp.ist.

In-app deletion removes the main account record and Firebase authentication account. If you want us to review and delete additional related records, such as stored chat history, feedback notes, questionnaire answers, contact messages, or other records associated with your user ID, please contact us at support@flapp.ist.

Some records may be retained where required for legal, tax, accounting, fraud prevention, dispute resolution, purchase verification, or platform compliance purposes.

9. Your Rights

Depending on your location and applicable law, you may have rights to:

• Access your personal data

• Correct inaccurate data

• Request deletion of personal data

• Object to or restrict certain processing

• Withdraw consent where processing is based on consent

• Request a copy of certain data

To exercise these rights, contact support@flapp.ist. We may need to verify your identity before fulfilling a request.

10. International Transfers

We are based in Turkey and use service providers that may process data in Turkey, the United States, the European Economic Area, or other countries. By using the Service, you understand that your data may be transferred to and processed in countries outside your country of residence.

Where required, we rely on appropriate legal mechanisms and safeguards for international data transfers.

11. Security

We use reasonable technical and organizational measures designed to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your account credentials secure and for using a secure device and network.

12. Microphone Permission

The app requests microphone permission to enable speaking practice, voice conversations, transcription, and TOEFL speaking exercises. You can manage microphone permission through your device settings. If microphone permission is disabled, voice-based features may not work.

13. Purchases and Refunds

Purchases are processed through Apple, Google, and/or RevenueCat. Refunds, cancellations, and subscription management are generally handled by the App Store or Google Play according to their policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you through the app, website, or other reasonable means. The updated policy will be effective when posted, unless otherwise stated.

15. Contact

If you have questions about this Privacy Policy or your personal data, contact:

Flapp Bilisim A.S.
Istanbul, Turkey
Email: support@flapp.ist
Website: https://www.flapp.ist