Kodavena

Odak Privacy Policy

Last updated: 20 September 2026

This text explains how your personal data is processed when you use the Odak mobile application (“Odak” or “the app”). It is prepared as a notification text under the Turkish Data Protection Law No. 6698 (KVKK) and also as a privacy notice under the European Union General Data Protection Regulation (GDPR).

1. Data controller

Odak is developed and published by Şamil Altun under the Kodavena brand. For the purposes of this text, the data controller is Şamil Altun. You can reach us at samilaltun1997@gmail.com.

2. In brief

  • We do not show ads, we do not track you in other apps and sites, and we do not sell or rent your data.
  • We do not use analytics or advertising tools in the app.
  • The timer, tasks and statistics work without creating an account; in that case your data stays only on your device.
  • Community features such as leaderboards, chat, study buddies and online status require you to sign in with Google or Apple. When you sign in, the data described below is stored on our servers.
  • Your about text, Instagram username and daily focus statistics are visible only to people you accept as study buddies.

3. Data that stays only on your device

The following are not sent to our servers and are stored only on your device: your tasks, notes and daily plan; your timer and notification settings; your chosen background; the profile and focus history you create until you sign in; the countdown on the lock screen and Dynamic Island (Live Activity) and session-end notifications. Session-end notifications are scheduled on your device. You can remove this data by deleting the app.

4. Data processed when you sign in

a) Account information: When you sign in with Google, Google sends us your email address, a unique identifier for your account, your name and a link to your profile photo. When you sign in with Apple, Apple sends us a unique identifier for your account and your email address; if you choose to hide your email, a relay address created by Apple is sent. We never see your Google or Apple password. This information is kept only in your account record and is not used in your public profile. If you have no profile on your device, your profile shows a temporary name consisting of “User” and a short code unique to your account until you choose a name; no profile photo is added.

b) Profile: name, username, country, about text, your Instagram username if you add it, your profile photo if you choose one, your XP and level, your daily focus target. When you sign in, your profile and XP on your device are transferred to your account.

c) Focus sessions: the session start time, its planned duration, the completed minutes and the end time. This information is used to calculate leaderboards and community statistics, to determine your right to write in chat (at least 25 minutes of focus in the last 24 hours), to show statistics to your study buddies and to prevent cheating. Your task names and notes are not added to these records.

d) Chat: the messages you write in public rooms (Türkçe and English), their send times and the room information; when you accept the chat rules.

e) Blocking and reports: the users you block; when you report a message, the report reason, a copy of the reported message and the identity of the account that wrote the message; when you report a profile, the report reason and a copy of the profile's current name, username, about text and Instagram username.

f) Online status: while the app is open and you are signed in, your name, profile photo and whether you are focusing at that moment are transmitted live to other users' apps. This information is not stored permanently.

g) Profile photo: when you select a photo, only the photo you select is uploaded; we do not access the other photos in your gallery. We do not use the camera or microphone.

h) Technical logs: our infrastructure provider keeps technical records such as IP address, request time and device/app information for a limited period for the secure operation of the service.

i) Study buddies: the friend requests you send and receive, accepted friendships and their times. To prevent abuse, a record of the requests you send (to whom and when) is kept for one week. Your study buddies can see the total daily focus minutes and number of sessions calculated from your focus sessions; they cannot see the start and end times of your sessions.

j) Notifications: When someone sends you a friend request or your request is accepted, a notification record (recipient, sender, notification type and time) is created regardless of whether you have allowed notifications. If you have allowed notifications and notifications are turned on in the app, your device's notification identifier (push token), device type (iOS or Android) and the app's language are stored. When the notification identifier is created, your device's Apple or Google notification identifier, the app's installation identifier on this device and the app identifier are sent to Expo; Expo stores the notification identifier. The text of each notification (for example, the name of the person who sent the request) and the link to the screen that opens when you tap the notification (which may contain the account identifier of the person who accepted the request) are sent to Expo's notification service, and from there to Apple's or Google's notification infrastructure. To check whether the notification was delivered, the send number given by Expo is stored together with your notification identifier for at most one day.

5. Information visible to other users

Because Odak is a community app, the following information can be seen by other users: your name, username, country, profile photo, level, XP and daily focus target; your focus minutes in leaderboards; the messages you write in chat rooms; your online and focus status. Someone who knows your exact username can find you in the app. Your about text, Instagram username, daily focus statistics and achievements are visible only to people you accept as study buddies. Profile photos are served over a public link. Do not write information you do not want to share in these fields.

6. Purposes and legal bases for processing

  • Creating your account; providing your profile, leaderboards, chat and study buddies: performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6/1-b).
  • Ensuring security, preventing abuse and cheating, reviewing reports and enforcing community rules: our legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6/1-f).
  • Fulfilling our legal obligations and responding to requests from authorities: legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6/1-c).
  • Establishing, exercising or defending a legal claim, such as keeping report records: KVKK Art. 5/2-e; GDPR Art. 6/1-f.

7. Service providers and international transfers

We do not sell your data. To provide the service we work only with the following providers:

  • Supabase: database, authentication, file storage and live connection infrastructure. Your data is stored on servers in Germany (Frankfurt, European Union); Supabase uses Amazon Web Services infrastructure for these servers.
  • Google: the “Sign in with Google” service, Android notifications and Google Play, where the Android app is distributed.
  • Apple: the “Sign in with Apple” service, iPhone notifications and the App Store, where the iPhone app is distributed.
  • Expo (650 Industries, Inc.): the notification service that forwards notifications to Apple's and Google's notification infrastructure.

Because the servers are located outside Turkey, your personal data is transferred abroad. This transfer is carried out in accordance with the conditions set out in Article 9 of KVKK and in the GDPR.

8. Retention periods

  • Your account information, profile, focus sessions, messages, blocks and study buddy relationships: until you delete your account. Messages that violate community rules may be removed earlier. A friendship or request is deleted immediately when you end the friendship, cancel or decline the request, or one of you blocks the other.
  • Record of the friend requests you send: one week.
  • Notification identifier: deleted when you sign out (if your device is not connected to the internet at that time, the next time you open the app), when you turn off notifications in the app, when you turn off Odak's notifications in your phone's settings and open the app, when another account signs in on the device, when you delete your account, when the device can no longer receive notifications, or when the app is not opened for 90 days.
  • Notification records: at most one week. Send numbers: at most one day.
  • Message reports (including a copy of the reported message): may be kept for as long as necessary for the safety of the community and possible legal claims, even if the relevant message or account is deleted.
  • Profile reports: until the reporting or reported account is deleted.
  • Technical logs: for the short periods set by our infrastructure provider.
  • Data that stays only on your device: until you delete the app.

9. Deleting your account and data

You can delete your account at any time in the app via Profile > Settings > Delete my account. This action immediately and permanently deletes your account, profile, profile photo, focus sessions, messages, study buddy relationships and requests, your blocks, your notification identifiers and notification records, the reports you made and the reports made about your profile; it cannot be undone. The report records made by others about your messages, as described in section 8, and data that stays only on your device are excluded. If you cannot access the app, you can request deletion by writing from the email address linked to your account to samilaltun1997@gmail.com; we will process your request within 30 days at the latest.

10. Your rights

Under Article 11 of KVKK and the GDPR, you have the right to learn whether your personal data is processed, to request information and a copy if it has been processed, to learn the purpose of processing and whether it is used in line with that purpose, to know the third parties to whom it is transferred, to request the correction of incomplete or incorrectly processed data, its deletion or the restriction of its processing, to request that these actions be notified to the third parties to whom the data was transferred, to object to processing, to receive your data in a portable format and to demand compensation for damage you suffer due to unlawful processing. You can correct or delete most of your information directly in the app. For other requests, write from the email address linked to your account to samilaltun1997@gmail.com; we will process your request within 30 days at the latest. You may also file a complaint with the Personal Data Protection Board or, if you live in the European Union, with your country's data protection authority.

11. Children

Odak is not designed for children under 13 and these persons are not allowed to create an account. If we learn that a user under 13 has created an account, we will delete the account and its data. If you are under 18, you must use the app with the permission of a parent or legal guardian and should accept study buddy requests only from people you actually know.

12. Security

Connections between the app and our servers are encrypted (HTTPS/TLS). Row-level security rules are applied in the database; so each user can access only the data they are permitted to. No system is completely secure, but we take reasonable technical and administrative measures to protect your data.

13. Changes

We may update this policy. For significant changes, we will notify you in the app or on this page and change the “Last updated” date at the top of the page.

14. Contact

For your questions, requests and complaints: samilaltun1997@gmail.com

Terms of UseSupportDelete Account