Privacy Policy

Söz for Business and Söz for Education connection requests

When you submit a connection request, we receive your name, organisation, contact details, selected solution and learning focus. You may also provide the group size and a comment. We store the page language and path, the referring domain and campaign tags when available.

Requests are stored in Cloudflare D1. A notification containing the request may be delivered to the Söz work inbox through Cloudflare. We use this information to reply and help connect your organisation. The form does not request participant lists or student records. To correct or delete a request, write to hello@getsoz.com using the contact provided in your request.

Who this policy covers

This policy applies to the Söz mobile app, its widgets, and the Söz website. Söz is provided by Emirbek Busurmankulov. Privacy contact: hello@getsoz.com. In this policy, “Söz”, “we”, and “us” refer to that provider.

Söz does not require an account and we do not sell personal data. On Android, Google Mobile Ads may process data for ad delivery, measurement, and fraud prevention as described below; Söz does not independently track you across apps and websites owned by other companies.

Information stored for learning

The app stores the information needed to personalize lessons and preserve your progress.

• The optional name and avatar you choose in settings.
• Your optional age range, learning motivation, level, selected interests, daily goal, reminder preferences, app language, and appearance choices.
• Learning and practice progress, review schedule, saved and reported words, streaks, quests, milestones, test history, completed collections, and daily activity.
• Pronunciation preview usage, widget content, and app setup and customization preferences.

Where learning data is kept

Learning progress is stored in the app’s private storage on your device and is not uploaded to a Söz account or learning-profile server. Photo-sticker requests use a separate service as described below.

On Apple devices, Söz may mirror key progress data to your private iCloud key-value store so it can be restored on another device or after reinstalling. Apple associates that data with your Apple Account, not with a Söz account.

On Android, device backup or device-to-device transfer may include allowed Söz preferences and the local Room learning database under your Google Account and device settings. Google, not Söz, provides and controls that system backup.

The widget reads a limited snapshot through the app’s shared storage so it can show a word outside the main app.

Purchases and Pro access

If you buy Söz Pro through the App Store, Apple processes the purchase, subscription renewal, Family Sharing eligibility, cancellation, and refund handling. We do not receive your payment card details.

The app uses StoreKit to read whether your Apple Account has an active Söz Pro entitlement and may cache an active Pro flag on your device and in app-group storage so paid features can respond quickly. StoreKit transaction information, such as product ID, subscription status, renewal, expiration, revocation, and Family Sharing state, is used to provide, restore, or troubleshoot paid access.

If you allow optional analytics, Söz records the selected plan and purchase or restore outcome. A completed purchase event includes the product ID, numeric price, currency and number of learned words; a revenue event includes the amount and currency. These Mixpanel events do not include a StoreKit transaction ID, receipt, payment card details or Apple Account credentials. Separately, the photo-sticker service verifies signed Apple purchase proofs to determine Pro access, as described below.

The Android app does not sell Söz Pro through Google Play. It can show native ads in the learning feed, and an optional rewarded video unlocks Söz Pro for 3 hours. No payment-card details are involved in that Android reward.

Photo stickers on iOS

On iOS, Söz first tries to identify the selected object on your device and match it to its built-in vocabulary. Local cutout and recognition do not send your photo to Google. If this does not provide a reliable match and you have explicitly allowed cloud recognition, Söz sends a resized PNG cutout through its gateway to Google Vertex AI using Gemini for object recognition and Kyrgyz, Russian and English names. Embedded EXIF and GPS metadata is removed, but personal information visible in the picture may remain. Avoid sensitive images. You can review and correct suggestions before saving.

New sticker saves need an internet connection, including manual and on-device recognition. For these saves, the gateway receives an operation identifier, word identifier and image hash, without the image or manually entered name. To authenticate the installation, prevent replay and enforce creation limits, the service also processes App Attest installation identifiers, cryptographic attestations and assertions, challenges and counters. Signed Apple purchase proofs are checked with Apple server APIs to determine current Pro access.

The gateway application does not store uploaded images, generated names or purchase proofs in its database or application logs. It stores installation authentication records, creation counters, operation and word identifiers, image hashes, quota dates, holds and save receipts. Saved-operation receipts and daily quota records currently have no automatic expiry. Deleting a local sticker does not delete those server records; contact hello@getsoz.com for privacy requests.

Google Cloud and Vertex AI may separately retain operational or abuse-monitoring data under their applicable terms and configuration. We do not promise zero retention. The configured global processing location does not guarantee processing in a single country or region.

Sticker images, names and pending saves are stored in protected files on your device, excluded from device backup, and do not automatically sync to iCloud. Deleting a sticker removes it from the active album but keeps a recoverable local copy without automatic expiry. Revoking cloud-recognition consent in Söz settings stops new sticker creation and pending-save recovery; saved stickers remain available. Exported or shared copies are handled by the destination you choose.

Privacy-friendly analytics

Optional Mixpanel analytics is off until you make an explicit choice in Söz. This choice does not turn off the first-party gameplay events described in the Илбирстин сапары section. On Android, nothing is sent to Mixpanel before that answer. A short list of early onboarding events may be held only in memory: it is replayed with its original time after opt-in or discarded after refusal, and is never written to disk.

If you allow analytics, we use Mixpanel as our only product-analytics provider to understand whether core flows work and which features need improvement. Analytics can include an anonymized installation identifier; app, operating system, and device information; a timestamp; onboarding choices such as language, motivation, level, topic count, and daily goal; and product interactions such as sessions, practice and test outcomes, saved-word counts, notification permission results, customization choices, share channel, paywall and purchase-flow outcomes, and limited diagnostic details.

When you use the in-app word-report action, the analytics event includes the dictionary word ID, Kyrgyz and Russian entries, category, part of speech, selected report reason, app language and version, vocabulary version, selected voice, and whether audio is available. The report does not include free-form text or the optional profile name.

We do not intentionally send your name, age range, email address, payment-card details, advertising identifier, precise location, contacts, photos, answer text, or the contents of your personal communications to Mixpanel. Analytics uses a random installation identifier created on your device: it is not an Apple or Google Account, advertising identifier, or vendor identifier. Mixpanel automatic events and session replay are disabled. Mixpanel is configured not to use the connection IP for geolocation, and it processes analytics data on servers in the European Union.

Android advertising and privacy choices

The Android app contains Google-served advertising. A native ad can appear inside the learning feed, and an optional rewarded video unlocks Söz Pro for 3 hours. Advertising and the optional Mixpanel analytics described above are separate choices.

Google Mobile Ads may process the device IP address, including to estimate approximate location; advertising or app-set identifiers; interactions with the app and ads; and diagnostic information for advertising, analytics, and fraud prevention. Söz does not request precise location for advertising.

Söz uses Google’s User Messaging Platform (UMP) to request and retain privacy choices required for your region. Söz requests those choices after you finish onboarding and does not request an advertisement before then. Where Google makes a privacy-options form available, you can reopen it from Profile → Settings → Advertising privacy.

The optional age range is used locally to choose age-appropriate ad treatment. The 13–17 range and a skipped age both receive conservative under-age protections. Söz does not send the selected age range to Mixpanel.

Permissions and device features

• Notifications are optional. If allowed, Söz schedules learning reminders on your device. You can change this permission in system settings.
• On Apple devices, you choose the photo used for a sticker through the system picker, or take a photo after allowing camera access. Söz does not scan your entire photo library. Photo Library add access is requested when you choose to export an image. Camera and Photos permissions can be changed in system Settings. Spotlight indexing can make collections discoverable in on-device search.
• On Android, the boot-completed signal is used only to restore a local reminder after a restart. Home screen and, on compatible devices, lock-screen widgets read a limited local snapshot.
• System sharing is used only after you choose a share action and is handled by the destination app or operating system.

Website and messages

The website stores your language choice in your browser. It does not use advertising cookies. When you follow a link to the App Store or Google Play, we store an anonymous event containing the selected store, page, button placement, language, referrer origin and explicit UTM campaign fields. The referring origin and explicit UTM fields are kept in sessionStorage in the current browser tab and used for attribution for up to 30 minutes so internal navigation does not replace the source. Closing the tab clears this storage. We do not assign a visitor identifier or store a name, email address, IP address or full referrer URL with this event.

If you join early access, we receive the name, email address, platform, optional learner profile, page, referrer, and campaign parameters you submit. We use this information to manage beta invitations and send important Söz product updates. If you contact us by email, we receive your address and the information you include so we can answer you. Do not send sensitive information in a support message.

Илбирстин сапары game

When you play Илбирстин сапары, the game sends first-party gameplay events directly to Söz. These events can include the game language and mode, limited gameplay counters such as answered words, accuracy, and obstacle hits, and only the origin of the referring page rather than its full URL.

Gameplay events are stored in Cloudflare D1. The public leaderboard has been retired: the current game no longer asks for a nickname or posts results to the board, and read or write requests from older cached clients are rejected. Your personal best stays on your device. New gameplay events do not send a numeric score; some older events with a score remain in Cloudflare D1. Historical leaderboard entries have been removed from the active D1 database. Earlier database states may remain recoverable through Cloudflare Time Travel for up to seven days. For privacy questions, email hello@getsoz.com with “Privacy” in the subject line.

Service providers and disclosure

We use Cloudflare to host and protect the website and to store anonymous store-link events, early-access submissions, Илбирстин сапары gameplay events in Cloudflare D1 and temporary database recovery states; Apple services for app distribution, StoreKit purchases, App Attest device authentication, purchase verification, iCloud sync, and platform features; Google Cloud for the sticker gateway and its security and quota records, and Vertex AI with Gemini for consented photo recognition; Google Play and Android platform services for distribution, optional device backup, notifications, widgets, and sharing; Google Mobile Ads and UMP for Android advertising and regional privacy choices; and Mixpanel for optional product analytics using EU data residency. These providers process data under their own terms and privacy commitments. We may also disclose information when required by law, to protect users and the service, or as part of a business transfer with appropriate safeguards.

Retention, security, and your choices

Device learning data remains until you clear it or remove the app. iCloud or Android system backups may remain under your Apple, Google, and device settings. The local Pro-access cache remains until it is refreshed, expires, is revoked, or you remove app data; Apple keeps App Store purchase records under its policies. Anonymous store-link events, early-access details and support messages are retained only as long as reasonably needed for their stated purposes and legal obligations. Analytics is retained according to our operational settings and Mixpanel’s policies. No automatic deletion period is set for Илбирстин сапары gameplay events; some older events with a numeric score remain in Cloudflare D1. The active leaderboard table is empty. Earlier database states may remain available in Cloudflare Time Travel for up to seven days.

We use reasonable technical and organizational safeguards, but no storage or transmission method is completely secure. You can control optional permissions, stop future Mixpanel events in Söz settings, manage Android advertising privacy where the option is available, remove local app data, and manage platform backups. See Privacy Choices for practical steps.

Children and international use

Söz is a general-audience educational product and is not designed for children under 13. It does not knowingly request contact details from children or provide messaging or account-based social features. The former nickname leaderboard for Илбирстин сапары is no longer publicly available; its active table is empty, but earlier database states may remain available during the recovery window. If a parent or guardian believes a child sent us personal information, contact us so we can review and delete it where possible.

Service providers may process data in countries other than yours. Where applicable, we rely on the provider’s safeguards and applicable legal mechanisms.

Your rights and policy updates

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing. Because Söz has no account, we may be unable to identify device-only data remotely. Email hello@getsoz.com and we will explain what we can verify and do.

We may update this policy when the app, providers, or legal requirements change. The effective date on this page will be updated, and material changes may also be announced in the app or on the website.