Kodavena

Odak Privacy Policy

Last updated: 13 September 2026

This text explains how your personal data is processed when you use the Odak: Pomodoro & Student Chat mobile application (“Odak” or “the app”). It is prepared as a notification text under the Turkish Data Protection Law No. 6698 (KVKK) and also as a privacy notice under the European Union General Data Protection Regulation (GDPR).

1. Data controller

Odak is developed and published by Şamil Altun under the Kodavena brand. For the purposes of this text, the data controller is Şamil Altun. You can reach us at samilaltun1997@gmail.com.

2. In brief

  • We do not show ads, we do not track you in other apps and sites, and we do not sell or rent your data.
  • We do not use analytics or advertising tools in the app.
  • The timer, tasks and statistics work without creating an account; in that case your data stays only on your device.
  • Community features such as leaderboards, chat, study buddies and online status require you to sign in with Google or Apple. When you sign in, the data described below is stored on our servers.
  • Your about text, Instagram username and daily focus statistics are visible only to people you accept as study buddies.

3. Data that stays only on your device

The following are not sent to our servers and are stored only on your device: your tasks, notes and daily plan; your timer and notification settings; your chosen background; the profile and focus history you create until you sign in; the countdown on the lock screen and Dynamic Island (Live Activity) and session-end notifications. Notifications are scheduled on your device; we do not collect a device identifier (push token) to send notifications. You can remove this data by deleting the app.

4. Data processed when you sign in

a) Account information: When you sign in with Google, Google sends us your email address, a unique identifier for your account, your name and a link to your profile photo. When you sign in with Apple, Apple sends us a unique identifier for your account and your email address; if you choose to hide your email, a relay address created by Apple is sent. We never see your Google or Apple password. This information is kept only in your account record and is not used in your public profile. If you have no profile on your device, your profile shows a temporary name consisting of “User” and a short code unique to your account until you choose a name; no profile photo is added.

b) Profile: name, username, country, about text, your Instagram username if you add it, your profile photo if you choose one, your XP and level, your daily focus target. When you sign in, your profile and XP on your device are transferred to your account.

c) Focus sessions: the session start time, its planned duration, the completed minutes and the end time. This information is used to calculate leaderboards and community statistics, to determine your right to write in chat (at least 25 minutes of focus in the last 24 hours), to show statistics to your study buddies and to prevent cheating. Your task names and notes are not added to these records.

d) Chat: the messages you write in public rooms (Türkçe and English), their send times and the room information; when you accept the chat rules.

e) Blocking and reports: the users you block; when you report a message, the report reason, a copy of the reported message and the identity of the account that wrote the message; when you report a profile, the report reason and a copy of the profile's current name, username, about text and Instagram username.

f) Online status: while the app is open and you are signed in, your name, profile photo and whether you are focusing at that moment are transmitted live to other users' apps. This information is not stored permanently.

g) Profile photo: when you select a photo, only the photo you select is uploaded; we do not access the other photos in your gallery. We do not use the camera or microphone.

h) Technical logs: our infrastructure provider keeps technical records such as IP address, request time and device/app information for a limited period for the secure operation of the service.

i) Study buddies: the friend requests you send and receive, accepted friendships and their times. To prevent abuse, a record of the requests you send (to whom and when) is kept for one week. Your study buddies can see the total daily focus minutes and number of sessions calculated from your focus sessions; they cannot see the start and end times of your sessions.

5. Information visible to other users

Because Odak is a community app, the following information can be seen by other users: your name, username, country, profile photo, level, XP and daily focus target; your focus minutes in leaderboards; the messages you write in chat rooms; your online and focus status. Someone who knows your exact username can find you in the app. Your about text, Instagram username, daily focus statistics and achievements are visible only to people you accept as study buddies. Profile photos are served over a public link. Do not write information you do not want to share in these fields.

6. Purposes and legal bases for processing

  • Creating your account; providing your profile, leaderboards, chat and study buddies: performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6/1-b).
  • Ensuring security, preventing abuse and cheating, reviewing reports and enforcing community rules: our legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6/1-f).
  • Fulfilling our legal obligations and responding to requests from authorities: legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6/1-c).
  • Establishing, exercising or defending a legal claim, such as keeping report records: KVKK Art. 5/2-e; GDPR Art. 6/1-f.

7. Service providers and international transfers

We do not sell your data. To provide the service we work only with the following providers:

  • Supabase: database, authentication, file storage and live connection infrastructure. Your data is stored on servers in Germany (Frankfurt, European Union); Supabase uses Amazon Web Services infrastructure for these servers.
  • Google: the “Sign in with Google” service and Google Play, where the Android app is distributed.
  • Apple: the “Sign in with Apple” service and the App Store, where the iPhone app is distributed.

Because the servers are located outside Turkey, your personal data is transferred abroad. This transfer is carried out in accordance with the conditions set out in Article 9 of KVKK and in the GDPR.

8. Retention periods

  • Your account information, profile, focus sessions, messages, blocks and study buddy relationships: until you delete your account. Messages that violate community rules may be removed earlier. A friendship or request is deleted immediately when you end the friendship, cancel or decline the request, or one of you blocks the other.
  • Record of the friend requests you send: one week.
  • Message reports (including a copy of the reported message): may be kept for as long as necessary for the safety of the community and possible legal claims, even if the relevant message or account is deleted.
  • Profile reports: until the reporting or reported account is deleted.
  • Technical logs: for the short periods set by our infrastructure provider.
  • Data that stays only on your device: until you delete the app.

9. Deleting your account and data

You can delete your account at any time in the app via Profile > Settings > Delete my account. This action immediately and permanently deletes your account, profile, profile photo, focus sessions, messages, study buddy relationships and requests, your blocks, the reports you made and the reports made about your profile; it cannot be undone. The report records made by others about your messages, as described in section 8, and data that stays only on your device are excluded. If you cannot access the app, you can request deletion by writing from the email address linked to your account to samilaltun1997@gmail.com; we will process your request within 30 days at the latest.

10. Your rights

Under Article 11 of KVKK and the GDPR, you have the right to learn whether your personal data is processed, to request information and a copy if it has been processed, to learn the purpose of processing and whether it is used in line with that purpose, to know the third parties to whom it is transferred, to request the correction of incomplete or incorrectly processed data, its deletion or the restriction of its processing, to request that these actions be notified to the third parties to whom the data was transferred, to object to processing, to receive your data in a portable format and to demand compensation for damage you suffer due to unlawful processing. You can correct or delete most of your information directly in the app. For other requests, write from the email address linked to your account to samilaltun1997@gmail.com; we will process your request within 30 days at the latest. You may also file a complaint with the Personal Data Protection Board or, if you live in the European Union, with your country's data protection authority.

11. Children

Odak is not designed for children under 13 and these persons are not allowed to create an account. If we learn that a user under 13 has created an account, we will delete the account and its data. If you are under 18, you must use the app with the permission of a parent or legal guardian and should accept study buddy requests only from people you actually know.

12. Security

Connections between the app and our servers are encrypted (HTTPS/TLS). Row-level security rules are applied in the database; so each user can access only the data they are permitted to. No system is completely secure, but we take reasonable technical and administrative measures to protect your data.

13. Changes

We may update this policy. For significant changes, we will notify you in the app or on this page and change the “Last updated” date at the top of the page.

14. Contact

For your questions, requests and complaints: samilaltun1997@gmail.com

Terms of UseSupportDelete Account