Kluki privacy policy

20 October 2026

This policy explains how the Kluki app (iPhone, Android and web) processes personal data. For this website, see the website privacy policy.

1. Who is responsible

Alper Cengiz (AC App Studio), Hedemannstr. 30, 10963 Berlin, Germany · ben@alpercengiz.com. See also the Impressum.

2. Who Kluki is for

Kluki accounts are for adults (18+) with parental responsibility. Children don’t get an account and are not meant to use Kluki on their own. When you create a child profile, you provide information about your child as their parent. Please use a nickname and enter only what helps.

3. What data we process

Account: your email address and sign-in method (email and password, Sign in with Apple or Google). With Apple’s “Hide My Email” we only receive a relay address. Passwords are stored only as a hash by our hosting provider; the sign-in session is stored securely on your device (iOS Keychain, Android Keystore).

Child profiles: nickname, birth year, grade, country and federal state, school type, curriculum, subjects, interests, the learning-style details you choose (for example attention span, pace, how your child deals with mistakes, what motivates them) and optional school notes. From this, the AI writes a short summary of your child that helps it give fitting explanations.

Content you create: coaching and homework checks (subject, topic, the task as read from the photo, Kluki’s guidance, your feedback), exam plans, quizzes and results, calendar entries and reminders, archive entries (title, subject, date, note and grades read from a report card) and weekly reports.

Photos and videos: photos of homework, worksheets, topic lists and report cards are reduced in size on your phone and sent via our server to the AI provider only to create the answer. They are not saved on our servers. A copy is kept on your phone so you can look at it later. Child profile photos and activity photos or videos stay on your phone only and are never uploaded.

Plan and usage: your plan (free or Premium, end date, source such as trial, tester or store purchase), how many AI questions you have used, technical usage records (feature, AI model, token counts, error messages) for cost control and troubleshooting, the record of your AI consent (version and time), reports you send about AI answers, and feedback messages (text, app language, platform, app version).

Usage statistics: we count which parts of the app are used (for example “a quiz was played”, “a reminder was opened”), with the platform and app version, in our own database and linked to your account. Homework content, photos, names or details about your child are never recorded. The records are deleted after 13 months, and with your account. You can turn this off in Settings → Usage statistics.

Technical data: when the app connects to our servers, the hosting provider processes technical data such as IP address, time and device information to deliver the service and keep it secure. These logs are kept only for a short time.

Only on your phone: app language, selected child, reminder settings and the photo copies mentioned above. Reminders are local notifications created on your phone; we don’t use push notifications.

4. Purposes and legal bases

Providing your account and the app’s features: performance of the contract (Art. 6(1)(b) GDPR).

Sending tasks, photos and the child profile to the AI: your consent (Art. 6(1)(a) GDPR), which the app asks for before the first AI use. You can withdraw it at any time with effect for the future by emailing us or deleting your account; without it, the AI features can’t be used.

Kluki doesn’t need health information. If you choose to enter such information (for example about a learning difficulty in the school notes), it is processed only on the basis of your explicit consent (Art. 9(2)(a) GDPR) and only to tailor the explanations.

Security, abuse prevention, usage limits and cost control: our legitimate interest in a safe and affordable service (Art. 6(1)(f) GDPR).

Usage statistics to see which features help families and improve the app: our legitimate interest in a useful app (Art. 6(1)(f) GDPR). You can object at any time by turning them off in Settings.

Retaining records where the law requires it, for example tax law for purchases (Art. 6(1)(c) GDPR).

5. AI processing with Google Gemini

Kluki’s AI features use Google Gemini through Google Cloud Vertex AI (Google Cloud EMEA Limited, Dublin, Ireland). We use Google’s EU endpoint and a model for which Google commits to processing the data within the EU. Requests are sent from our servers, never directly from your phone.

For each request we send only what is needed: the photo(s) or text of that request, the child profile (nickname, approximate age, grade, country, state, school type, subjects, interests, learning style and school notes) and recent context such as the child summary, recent results, exams and latest grades. Your email address, profile photos and activity photos or videos are not sent.

Google processes this data as our processor under its data processing terms and does not use it to train its models. We have switched off Google’s data caching. Google may keep requests that its automated systems flag as possible abuse for up to 30 days to monitor abuse. Should Google’s affiliates outside the EU have access in individual cases (for example for support), this is covered by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

AI can make mistakes. Please check important answers.

6. Service providers

Supabase (Supabase Inc., USA): hosting, database, sign-in and server functions. Our servers are in Frankfurt, Germany (EU). Supabase acts as our processor under a data processing agreement; any access from outside the EU is covered by the EU Standard Contractual Clauses.

Google Cloud Vertex AI: AI processing, see section 5.

Apple and Google sign-in: only if you choose that sign-in method. Apple and Google then process data under their own privacy policies.

Resend (Resend Inc., USA): forwards feedback you send in the app, with your email address, to our inbox so we can reply. Transfers are based on the EU Standard Contractual Clauses.

Apple App Store and Google Play: deliver the app and process subscription payments under their own terms. We don’t receive your payment details.

We don’t pass your data to anyone else, and we don’t sell it.

7. No tracking

Kluki has no advertising, uses no advertising identifiers and contains no analytics, crash-reporting or advertising SDKs. We don’t track you across other apps or websites. The usage statistics in section 3 stay in our own database; no third party receives them.

8. How long we keep data

We keep your data as long as your account exists. When you delete an item (for example a child, an exam or a calendar entry), it is deleted. When you delete your account, your account and all child profiles and content are deleted from our database immediately, and the app removes the photo copies from your phone.

We keep only technical usage records without any link to you (for cost statistics) and, where the law requires it, purchase records for the legal retention period. Database backups are overwritten in regular cycles; deleted data disappears from them within a short time.

9. Deleting your account

In the app: Settings → Delete account. Without the app: see Delete your account.

10. Security

All connections are encrypted (TLS). Access rules in the database ensure that every family can only see its own data. Sign-in data is stored securely on your device, and you have to sign in again before deleting your account.

11. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on Art. 6(1)(f) GDPR, and to withdraw consent at any time with effect for the future (Art. 15–21 GDPR). To exercise your rights, email ben@alpercengiz.com. You can also complain to a supervisory authority, for example the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

12. Changes

If Kluki changes, we update this policy and the date below. We will tell you about important changes in the app.

20 October 2026