Privacy Policy
This Privacy Notice for Mert Kuetuekoglu (doing business as Genau App) — "we", "us", or "our" — describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our Services, including when you:
- Visit our website at https://genauapp.io/, or any website of ours that links to this Privacy Notice
- Download and use our mobile application (Genau App), or any other application of ours that links to this Privacy Notice
- Use Genau App — an online educational platform designed to assist users in expanding their German vocabulary, particularly in preparation for TELC exams
- Engage with us in other related ways, including any sales, marketing, or events
1. What information do we collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. The personal information we collect may include:
- Names
- Email addresses
- Phone numbers
- Job titles
- Usernames
- Passwords
- Contact or authentication data
- Contact preferences
- Billing addresses
- Debit/credit card numbers
Sensitive information
When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information: information revealing race or ethnic origin, and student data.
Payment data
The Services provided are free of charge for the Beta version. We may collect data necessary to process your payment if you choose to make purchases. All payment data is handled and stored by PayPal (Europe) S.à r.l. et Cie, S.C.A.
Social media login data
We may provide you with the option to register with us using your existing social media account details, like your Facebook, X, or other social media account.
Application data
If you use our application(s), we may also collect: geolocation information from your mobile device; access to Bluetooth, camera, contacts, microphone, reminders, calendar; device ID, model, manufacturer, operating system, browser information, IP address; push notification tokens.
Information automatically collected
Log and usage data (IP address, device information, browser type, timestamps, pages viewed, searches), device data (hardware model, operating system), and precise or imprecise location data.
2. How do we process your information?
We process your personal information for a variety of reasons, including: facilitating account creation and authentication; responding to user inquiries; sending administrative information; enabling user-to-user communications; requesting feedback; sending marketing communications (where opted in); delivering targeted advertising; protecting the Services through fraud monitoring; identifying usage trends; measuring marketing effectiveness; protecting an individual's vital interest.
3. What legal bases do we rely on?
The GDPR and UK GDPR require us to explain the valid legal bases we rely on:
- Consent — you have given us permission to use your personal information for a specific purpose
- Performance of a contract — necessary to fulfill contractual obligations
- Legitimate interests — to achieve our legitimate business interests while respecting your rights
- Legal obligations — compliance with legal requirements
- Vital interests — to protect your vital interests or those of a third party
4. When and with whom do we share your information?
We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us. The categories of third parties include: Affiliate Marketing Programs, AI Platforms, Ad Networks, Cloud Computing Services, Communication & Collaboration Tools, Data Analytics Services, Data Storage Service Providers, Payment Processors, Performance Monitoring Tools, Social Networks, User Account Registration & Authentication Services, Website Hosting Service Providers.
We may also share information during business transfers, with affiliates (parent company, subsidiaries, joint ventures), with business partners, and with other users where you share information in public areas.
5. Do we use cookies and other tracking technologies?
Yes. These help us maintain security, prevent crashes, fix bugs, save preferences, and assist with site functions. See the Cookie Policy for the detail.
Google Analytics
We use Google Analytics (Google Ireland Limited) to analyze user interactions. Google Analytics uses cookies to collect data such as device information, browser type, IP address (anonymized within the EU), referrer URL, pages visited, and time spent. You can opt out: Google Analytics Opt-out. Legal basis: Art. 6(1)(a) GDPR — consent via our cookie banner.
Hotjar
We use Hotjar (Hotjar Ltd., Malta) to understand how users interact with our website: mouse movements, clicks, scroll behavior, session recordings, heatmaps, device type, screen resolution, browser type, language, country-level geolocation. All data is pseudonymized. Hotjar Opt-out. Legal basis: Art. 6(1)(a) GDPR — consent via our cookie banner.
6. Do we offer AI-based products?
Yes. We provide AI Products through third-party service providers including Anthropic, OpenAI, and Google Cloud AI. Your input, output, and personal information will be shared with these providers to enable your use of AI Products. Features: natural language processing, AI insights, AI translation. To opt out of AI data processing, contact us.
7. How do we handle your social logins?
If you register using a third-party social account (Facebook, X), we receive certain profile information including your name, email, friends list, and profile picture. We use this only for purposes described in this Privacy Notice.
8. How long do we keep your information?
We keep personal information only for as long as necessary for the purposes in this Privacy Notice, unless a longer retention period is required by law. When we no longer have a legitimate business need to process your information, we will delete or anonymize it.
9. How do we keep your information safe?
We have implemented appropriate technical and organizational security measures. However, no electronic transmission is 100% secure. You should only access the Services within a secure environment.
10. Do we collect information from minors?
We do not knowingly collect data from, or market to, children under 18. If we learn that personal information from users under 18 has been collected, we will deactivate the account and delete such data. Contact: mertkutukoglu@genauapp.io.
11. What are your privacy rights?
In some regions (EEA, UK, Switzerland), you have rights including: access and a copy of your personal information; rectification or erasure; restriction of processing; data portability; objection to processing; not to be subject to automated decision-making.
If you are located in the EEA or UK and believe we are unlawfully processing your information, you have the right to complain to your data protection authority. You can withdraw consent at any time; this will not affect processing lawfulness before withdrawal.
12. Controls for Do-Not-Track features
Most web browsers include a Do-Not-Track ("DNT") feature. No uniform technology standard for recognizing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals.
13. Do we make updates to this notice?
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date. We encourage you to review this notice frequently.
14. How can you contact us about this notice?
If you have questions or comments, you may contact our Data Protection Officer (DPO):
Mert Kuetuekoglu
Data Protection Officer
Kantstraße 73
10627 Berlin, Germany
mertkutukoglu@genauapp.io
15. How can you review, update, or delete the data we collect from you?
Based on the applicable laws of your country, you may request access to the personal information we collect, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent. Contact us for a data subject access request.