What We Collect
When you create an account and use the apps, we collect the following:
- Email address — to create your account, sign you in and reset your password.
- Name — so the app can address you. You can enter any name you like.
- User ID — a random number that keys every record tied to your account.
- User content — what you create yourself: focus sessions, goals, tasks, notes and study cards.
- Reading data (Odaklio Read) — the title, author and word count of texts in your library, where you left off, how long you read, and the results of your speed measurements.
- Text content (Odaklio Read) — the full text of the books and articles you import. It is stored in a private area only you can reach, and you can switch this off for each text separately.
- Product interaction — usage records such as which screen you used and when. These records are not anonymous; they are tied to your account.
- Notification token — an identifier stored so we can send notifications to your device, if you allow them. If you decline, it is never generated.
- Photos and audio — photos and recordings you choose to send, their transcripts and generated replies. Camera, photo selection and microphone permissions are requested when you use the relevant feature.
- Purchase information — the Apple or Google transaction reference, product, billing period, subscription status and expiry are linked to your account. We do not receive your card number or store password.
What We Don't Collect
These are deliberately absent. Some are technically available to us and still not collected:
- Location. The apps never ask for location permission.
- Advertising ID. We show no ads and hand no data to ad networks.
- Contacts and your device calendar. We do not request access to these.
- The highlights you save in Odaklio Read and your training session log. These stay on your device and are never sent to a server.
- The address you type when importing from a link in Odaklio Read. The page opens on your device and only the article body is kept; the address itself is never stored.
Chrome Extension
The Odaklio Chrome extension processes the following data to run its features. If you use it without signing in, most of it stays in your browser; once you sign in, it is stored against your account and synced with your phone.
- Account information — your email address and session. Your password is not stored in the extension; it goes straight to the authentication service. When you sign in with Google or Apple, we receive only the basic details needed to create your account (email, name) from that provider.
- Site time (web history) — the domain name, category, start and end time and duration of the site you visit while Chrome is open and in the foreground. The page address (URL) and page title are never sent to our servers. Incognito windows are never counted, and the names of sites you mark as private are not recorded.
- Highlights and notes (website content) — the text you highlight on a page, that page's address and title, the note you add to a highlight and the notes you save from a page. They are stored against your account, and your notes also show up in Notes on your phone.
- What is sent to Odi — the messages you write to Odi and, when you ask it to summarise, explain, translate or answer a question, the text you selected or the readable text of the page (up to roughly 24,000 characters). The extension never sends page content unless you ask. One-off summary, translation and explanation requests made from a page are not saved to your chat history.
- AI provider — to produce Odi's replies, this content is sent to the Claude model of our service provider Anthropic. When replying, Odi may use as context the app data you leave on under Odi permissions (such as focus sessions, tasks, habits and goals). Your raw site history and page addresses are not included. You can switch off Odi's access under Odi permissions in the web settings.
- What stays in your browser — your focus settings, the local copy of your protection groups, a day-by-day site-time summary for the last few weeks, and pending changes that have not yet reached the server.
How We Use Your Data
We use what we collect only for the following purposes:
- Running the app — signing you in, storing your data and syncing it across your devices.
- Tuning your speed targets and exercise suggestions to you, computed from your own measurements.
- Managing your account and answering support requests.
- Seeing which parts are not working, so we can fix the service.
- Running Odi — producing chat replies and doing the summaries, translations and explanations you ask for. To know and support you better, Odi keeps notes with a stated source, drawn from what you tell it and the app data you permit; you can see them in the Notebook on Odi's phone and correct them or have Odi forget them in the chat or in the Notebook. Odi may research its own questions from this data and prepare suggestions; a suggestion changes something in the app only if you approve it. Within your notification settings it may occasionally write to you on its own. These notes and assessments are used only to provide the service; they are never used for advertising or sold. Authorised members of our team may view them for support and quality purposes.
- Complying with legal obligations.
What You Control
You can change all of the following from inside the app, without asking us:
- Text sync — in Odaklio Read, press and hold a text in your library to stop its content being uploaded. Switching it off deletes the uploaded copy and keeps the text on that device only.
- Notifications — you can turn them off in your device settings; the notification token then goes unused.
- Reset history — you can clear your measurements and training progress without deleting your library.
- Chrome extension — you can pause or switch off site-time tracking, exclude sites from tracking or mark them private, and delete your highlights and notes.
- Odi permissions — you can switch off Odi's access to data such as screen time under Odi permissions in the web settings.
- Photos and audio — you choose what to send. You can revoke camera and microphone access in device settings. Revoking permission does not automatically delete content you previously sent.
- Account deletion — you can delete your account and your data from inside the app in one step.
Chrome Web Store User Data
The use and transfer of user data that the Odaklio Chrome extension receives from Chrome and from web pages adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use this data only to provide the extension's focus, site protection, time tracking, highlight, note and Odi features. We do not use it for advertising, sell it to data brokers, or use it to determine creditworthiness or for lending. We allow humans to read this data only with your explicit consent, for security reasons, to comply with the law, or in aggregated and anonymised form for internal operations.
Storage and Security
All data is encrypted in transit with HTTPS/TLS and stored encrypted on Supabase infrastructure. Every row is locked at the database level so only its owner can reach it. Texts you import are held in a private, non-public area and are read only through time-limited links issued to your own session.
How Long We Keep It
Your data is kept for as long as your account exists. When you delete your account, your reading records, library details, uploaded texts, profile, notes, highlights, site-time records and Odi chat history are permanently erased. The only thing left behind is a record that the deletion happened: the date, an optional reason you wrote, and an irreversible digest of your email address. That record does not contain the address itself and exists only so we can prove a deletion request was honoured.
Your Rights
Under GDPR, KVKK and similar regulations, you have the following rights:
- Access your data and request a copy of it
- Request that incorrect or incomplete data be corrected
- Have your account and your data deleted
- Request your data in a portable format
- Object to processing and withdraw consent you have given
Account and Data Deletion
You can delete your account from inside the app under Settings; the deletion is immediate and permanent. If you cannot reach the app, or you want a step-by-step walkthrough, see our deletion page: odaklio.com/en/account-deletion
Children's Privacy
Odaklio is not intended for children under 13, and we do not knowingly collect data from this age group. If we learn that someone under 13 has given us data, we delete the account.
Changes to This Policy
If we update this policy, we change the date on this page. If the kinds of data we collect or the purposes we use them for change, we will also tell you from inside the app.
Contact
If you have questions about this policy, your data or your rights, write to kduranoglu07@gmail.com.