Privacy Policy

Effective Date: October 22, 2025
Last Updated: October 25, 2026

Update Summary (October 24, 2026 — Version 5)

• Province and district (chosen manually): You pick your province (and, optionally, your district) at sign-up and in your profile; the district is optional; the app does not ask for device location (GPS) and your exact location is never collected. Your profile and Find card show only your province. Your district is not shown to other users; it appears only as the meeting area ("district, province") on the page of an in-person event you create. Province and district are processed to suggest people in a common area and for in-person events (performance of the contract). Location cells (geohash) and distances are not processed.
• Minimum age 14: Koza is for people aged 14 and over; the birth year is checked at sign-up.
• Account deletion with a 14-day grace period: When you choose "Delete account", your account is hidden right away (not shown in Find, lists or search) and all your sessions are signed out. If you sign in again within 14 days your account comes back; after 14 days your account and related data are permanently deleted. The leaving reason you pick is kept with your account during this period and deleted with it.
• Notification preferences: Your per-type push notification preferences in Settings > Notifications are stored on your account.
• Clarifications (October 25, 2026): Notification preferences are managed in four groups (Matches, Messages, Events, Feed). When you sign out or turn off push notifications in Settings, this device's push token is deleted from our servers; your device's app language is stored with the token so notifications arrive in that language. Koza Plus payments are collected through the Apple App Store and subscription status is verified via RevenueCat; your payment details never reach us. Deleting your account does not cancel your App Store subscription. At permanent deletion after 14 days, the photos you uploaded are also removed from storage and any Sign in with Apple authorization is revoked. Automatic community membership is currently not applied. The KVKK request is under Settings > Help in the app.
• Session recording and analytics location (October 25, 2026): To improve the app, screen sessions may be recorded via PostHog; the text you type and all images are masked in recordings, and messaging, chat, profile, Liked You and notification screens are never recorded. PostHog usage analytics data is processed on servers in the USA.

Update Summary (September 24, 2026 — Version 4)

• Location is no longer processed: The app does not request location permission; city/district, location cells and distances are not collected, not used for matching and not shown on cards. You can ask us to delete previously stored city/district data via Settings > KVKK request. (Version 5 brings back province/district as a manual choice within the limits above.)
• Automatic community membership: Based on the education, goal and track you choose at sign-up, you are automatically added to a matching open community (the largest suitable one). This is part of providing the service; you can leave at any time.
• Find card: Your profile photos are shown to other users in Find; the avatar figure is used only as your profile picture. At least one photo is required.
• Consents at sign-up: The sign-up screen has two separate checkboxes: (1) accepting the Terms of Service and acknowledging the KVKK Privacy Notice and Privacy Policy, (2) explicit consent to international transfer. Marketing consent is not asked at sign-up; you can turn it on under Settings > KVKK and permissions.
• AI assistant shut down (September 27, 2026): The assistant screen was removed; no text is sent to an assistant. Anthropic is used only for automated content screening and match suggestions.

Update Summary (September 22, 2026 — Version 3)

Processing activities added or changed with this version (details in the KVKK Privacy Notice):

• AI assistant: Questions you type to the assistant and the chat history are sent to Anthropic (USA) to generate answers; they are not used for model training.
• Voice/video study rooms: Audio and video are streamed live through Cloudflare infrastructure; they are never recorded or stored.
• Tasks and notes: Tasks on the Today/Tasks screens are kept on our servers to sync across your devices.
• Chat attachments: Photos and files you share in messages are stored on Amazon Web Services.
• Communities: The communities and channels you join and unread counts are linked to your account.
• Find filters: Your filter preferences (goal, track, education, grade) stay on your device only.
• Consent record: Your acknowledgement and explicit consents (international transfer, marketing) are stored with date and version on your account; you can review them and withdraw marketing consent under Settings > Privacy > Privacy consents.

Update Summary (July 23, 2026 — Version 2)

The app evolved into the "Koza : StudyBuddy" experience that helps you find people nearby to study with. With this version we process:

• Location (city/district + coarse cell) — removed in Version 4: To suggest study buddies and study spots near you, we process only your city/district and a coarse ~2.4 km location cell (geohash). Your exact location is never stored or shown to other users; cards show only district/city and an approximate distance.
• Profile and matching data: Photos (1-6), birth date (for age-band safety), education, goals, subjects, interests and study preferences (who you want to study with, what you are looking for, study habits) are processed to generate match suggestions.
• Usage analytics: Screen views, time spent on screens, tap interactions and masked screen session recordings (typed text and images are masked; messaging and profile screens are not recorded) are processed via PostHog, and error logs via Sentry, to improve the experience.
• Ad measurement: AppsFlyer and the TikTok Business SDK measure ad campaign performance. The device advertising identifier (IDFA) is processed only if you allow it (App Tracking Transparency prompt).
• Subscriptions: Koza Plus payments are collected through the Apple App Store; your payment details never reach us. Subscription status is verified via RevenueCat.
• Invite program: If you enter an invite code at sign-up, your account is associated with the inviting user (to grant them in-app credits).

Details of these items apply in the relevant sections below; in case of conflict, this update summary prevails.

1. Introduction

At Koza Academy, we respect your privacy and consider the protection of your personal data one of our highest priorities. This Privacy Policy explains how we collect, use, and protect your information when you use our website, https://koza.social, and our services.

Koza Academy is a social learning platform where people can meet to discover each other and learn together by creating public or private meets and servers.

This policy has been prepared in accordance with the Law on the Protection of Personal Data No. 6698 (KVKK) and related legislation.

2. Data Controller Information

Company Title: KOZA LLC
Address: 30 N GOULD ST STE 53021, SHERIDAN, Wyoming 82801, United States
Email: team@koza.social
EIN: 352909233
Web: https://koza.social

3. Information We Collect

3.1 Account and Identity Information

Mandatory Information:

• First name, last name
• Email address
• Date of birth
• Gender (Female, Male)
• Password (stored in encrypted form)

Optional Information:

• Username
• Display name
• Profile picture
• Bio/About me

3.2 Education Information (Optional)

• School/Institution Name
• School Type: High School, University, Bootcamp, Self-Taught, Professional, Other
• Education Level: Student, Graduate, Master's Degree, Professional
• Department/Field
• Graduation Year

3.3 Talent and Skill Information (Optional)

Skills:

• Skill name
• Level (Beginner, Intermediate, Advanced, Expert)
• Years of experience

Languages:

• Language name
• Proficiency level (Native, Fluent, Intermediate, Beginner)

3.4 Social Media Accounts (Optional)

• GitHub
• LinkedIn
• X (Twitter)
• Instagram
• YouTube
• Portfolio website
• Other platforms

3.5 Interests and Passions (Optional)

• Interests: Topics you are interested in
• Hobbies: Your leisure activities
• Reason for Using the Platform:
  • To learn new skills
  • To share knowledge
  • Networking
  • To find a study partner
  • Hobby

3.6 Learning Preferences (Optional)

Learning Goals:

• Topics you want to learn

Topics You Want to Teach:

• Areas where you want to share your knowledge

Study Preferences:

• Quiet environment, Group study, With music, Timed, Note-taking, Flashcards, Pomodoro technique, etc.

Learning Style:

• Visual, Auditory, Reading-Writing, Kinesthetic, Practical

Preferred Format:

• Video, Text, Voice Chat, Workshop, Q&A

3.7 Availability Information (Optional)

• Weekly Study Commitment: Low, Medium, High
• Available Days: Monday to Sunday
• Preferred Time Slots: Morning, Afternoon, Evening, Night

3.8 Communication Preferences (Optional)

• Preferred communication methods: Text, Voice, Video, Asynchronous

3.9 Matching Preferences (Optional)

Ideal Partner Characteristics:

• Experience level (Beginner, Intermediate, Advanced)
• Preferred age range
• Other preferences

Motivation Factors:

• Certificates, Badges, Community, Flexibility, Real Projects, Progress Tracking

3.10 Location Information

As of Version 5 (October 24, 2026) only the province and district you choose manually are processed: the app does not request device location (GPS) and no exact location, location cell or distance is collected. Your profile and Find card show only your province; your district is not shown to other users except as the meeting area ("district, province") of an in-person event you create. You can change them under Settings > Location. You can request deletion of city/district data stored by earlier versions via Settings > Help > Data protection request (KVKK).

• Favorite Study Places: preferences such as library, cafe, home, school (not a location; shown only as a common point in matching)

3.11 Privacy Settings

Profile Visibility:

• Public, Friends Only, Private

Section-Based Privacy: You can set separate privacy settings for each information category:

• Personal Information
• Education Information
• Skills and Talents
• Social Media Accounts
• Interests and Passions
• Learning Preferences
• Availability Information
• Communication Preferences
• Matching Preferences

3.12 Account Management Information

• Account status (Active/Inactive)
• Banned account status
• Reason for ban (if any)
• Ban end date (if any)
• Account creation date
• Last update date
• Platform tour completion status
• Email verification status
• User role

3.13 Automatically Collected Information

Technical Data:

• IP address
• Browser type and version
• Device information (model, operating system)
• Screen resolution
• Time zone settings

Usage Data:

• Pages visited
• Time spent on pages
• Click behaviors
• In-platform activities
• Created meets and servers
• Meets and servers you have joined
• Explore page usage behavior

Cookies and Similar Technologies: For detailed information, please review our Cookie Policy.

4. How We Use Your Information

4.1 Provision of Platform Services

• To create and manage your account
• To display your profile information
• To enable you to discover users on the Explore page
• To recommend suitable users to you
• To allow you to create public and private meets
• To provide the ability to create and manage servers
• To manage your participation in meets and servers
• To provide in-platform messaging

4.2 Matching and Discovery

Using the information we collect to:

• Recommend suitable users based on skill levels
• Provide recommendations based on interests and goals
• Consider overlaps in study hours and availability
• Ensure compatibility based on communication styles
• Suggest matches based on learning styles
• Display personalized content on the Explore page

4.3 Meet and Server Management

• To ensure public meets are discoverable
• To ensure the security of private meets
• To manage server members
• To control participation permissions
• To moderate meets and servers

4.4 Communication and Information

• To send account and platform updates
• To send meet invitations and notifications
• To send server notifications
• To respond to your support requests
• To make important platform announcements
• To send marketing emails (with your consent)

4.5 Platform Improvement and Personalization

• To improve the user experience
• To offer you personalized content and recommendations
• To analyze platform performance
• To develop new features
• To analyze usage trends

4.6 Security and Legal Obligations

• To prevent fraud and abuse
• To ensure platform security
• To comply with legal regulations
• To enforce our Terms of Use
• To resolve legal disputes
• To manage account banning procedures

5. Legal Basis for Processing Data

We process your personal data based on the following legal grounds:

Your Explicit Consent:

• Marketing communications
• Optional profile information (education, skills, interests, etc.)
• Sharing of social media accounts

Performance of a Contract:

• Account creation and management (name, email, password)
• Meet and server services
• Platform usage services
• Discovery and matching features

Legal Obligation:

• Regulation of online publications (Law No. 5651)
• Legal reporting

Our Legitimate Interest:

• Ensuring platform security
• Preventing fraud
• Improving service quality
• Enhancing user experience

6. Who We Share Your Information With

6.1 Sharing Within the Platform

With Other Users:

Depending on your profile privacy settings, the following information may be visible to other users:

Public Profile:

• Profile picture
• Name/Username
• Bio
• Skills and experience levels
• Education information
• Interests
• Learning goals
• Social media links

Public Meets:

• When you create a public meet, the meet's name, description, and your profile information (according to your privacy settings) will be visible on the Explore page.

Servers:

• On servers you create or manage, server members can see your profile information (according to your privacy settings).

Note: You can change your privacy settings at any time.

6.2 Service Providers

We share information only when necessary and securely with the following service providers:

• Cloud Hosting: Server and data storage services
• Email Services: Notification and communication emails
• Analytics Tools: Platform usage analysis (anonymized)
• Video/Audio Infrastructure: Services required for the meet feature
• Customer Support Tools: Managing support requests
• Security Services: Fraud detection and prevention

6.3 Legal Requirements

We may share your information in the following situations:

• When there is a legal obligation
• In case of a court order or official request
• When necessary to protect our legal rights
• In case of violation of platform rules

6.4 Business Transfer

In the event of a company merger, acquisition, or sale of assets, your data may be part of the transferred assets. You will be notified in such a case.

IMPORTANT: We do not sell your personal data to third parties.

7. International Transfer of Your Data

Our company is registered in the United States, and some of our service providers are located abroad. In this case, your data is transferred:

• With security measures stipulated by the KVKK
• Using standard contractual clauses
• With permission obtained from the Personal Data Protection Board when deemed necessary

Countries to which your data may be transferred include the United States and European Union countries.

8. Data Retention Period

We retain your data for the following periods:

After the retention periods expire, your data is securely deleted or anonymized.

9. Your Rights

Under the KVKK, you have the following rights:

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether it is used accordingly
• To know the third parties to whom it is transferred domestically/abroad
• To request correction of incomplete or incorrectly processed data
• To request the deletion or destruction of data
• To request notification of correction/deletion operations to third parties
• To object to results arising from analysis by automated systems
• To demand compensation for damages due to unlawful processing

10. How to Exercise Your Rights

Application Methods:

Email: team@koza.social
Mail: 30 N GOULD ST STE 53021, SHERIDAN, Wyoming 82801, United States
Application Form: https://koza.social/kvkk-basvuru

Self-Service via the Platform:

You can perform the following actions yourself from your account settings:

• Edit your profile information
• Delete your optional information
• Change your privacy settings
• Download your data
• Close your account

Required Information for Application:

• Identity verification information (T.C. ID number or passport number)
• Your contact information
• A detailed description of your request

Response Time: Your request will be answered free of charge within 30 days at the latest. If the process requires an additional cost, the fee in the tariff determined by the KVKK may be applied.

11. Data Security

The measures we take to ensure the security of your data:

Technical Measures:

• SSL/TLS encryption (HTTPS)
• Password hashing (bcrypt)
• Secure server infrastructure
• Firewalls
• Regular security tests
• Secure backup systems
• Two-factor authentication (optional)
• SQL injection and XSS protection
• Meet encryption (for private meets)

Administrative Measures:

• Employee privacy training
• Data access controls
• Confidentiality agreements
• Data breach response plans
• Regular security audits

12. Minors

12.1 Minimum Age Requirement

Our platform serves users aged 14 and over (Version 5, October 24, 2026).

Users Under 14:

• Registration of users under 14 is not permitted; the birth year is checked at sign-up.
• If detected, the account will be immediately closed, and the data will be deleted.

Users 14 and Over:

• All users aged 14 and over can access all features of the platform.
• All users are obliged to comply with our Terms of Use.

13. Cookies

We use cookies on our website to improve the user experience.

Types of Cookies We Use:

• Strictly Necessary Cookies: Required for the platform to function.
• Functionality Cookies: To remember your preferences.
• Analytical Cookies: To analyze platform usage.
• Marketing Cookies: To show you personalized content (with your consent).

You can manage your cookie settings from your browser or platform settings.

For detailed information, please review our Cookie Policy.

14. Third-Party Links

Our platform may contain links to third-party websites (especially social media profiles). We are not responsible for the privacy practices of these sites. Please review the privacy policies of these sites.

15. Changes to the Policy

We may update this Privacy Policy from time to time. When significant changes occur:

• The updated version will be published on our website.
• The "Last Updated" date will be changed.
• An email notification will be sent (for significant changes).
• A notification will be displayed within the platform.

We recommend that you review the policy regularly.

16. Contact

For questions about our privacy policy or your personal data:

Email: team@koza.social
Address: 30 N GOULD ST STE 53021, SHERIDAN, Wyoming 82801, United States
Support: https://koza.social/destek

17. Filing a Complaint

You can submit your complaints regarding your personal data:

1. First, to us via the contact information above.
2. Then, you can apply to the Personal Data Protection Authority:

Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu)
Web: https://www.kvkk.gov.tr
Email: kvkk@kvkk.gov.tr
Address: Nasuh Akar Mah. Ziyabey Cad. 1407. Sok. No:4 06520 Balgat-Çankaya/Ankara
Phone: +90 312 216 50 50

---

This Privacy Policy was last updated on July 23, 2026.

At Koza Academy, we value your privacy and are committed to protecting your data with the highest security standards.

By using our platform, you accept this Privacy Policy.