Bulut Privacy Policy
Last updated: November 9, 2026

Bulut is an iOS app for learning English through puzzles. You don’t need an account to use it, and we keep the data we hold about you to a minimum. Bulut is intended for people aged 13 and over.

WHO WE ARE

Bulut is run by Caner OBALI (“we”). We are responsible for the data described here. You can reach us at canerobal@gmail.com.

WHAT WE STORE ON OUR SERVER

The first time you open Bulut, the app connects to our server anonymously and creates a small profile for you. The profile contains:

User ID: a random technical identifier created automatically.
Bulut ID: your random code, such as BLT-7K2Q.
Nickname: optional, up to 20 characters. Only stored if you add one.
Native language: the language used for translations (currently Turkish).
Level: the English level you chose, from A1 to C2.
Dates: when your profile was created and last updated.
Session data: tokens that keep your anonymous connection active.

Like most online services, our hosting provider also processes technical data when the app connects, such as your IP address and request logs. This is used to run and protect the service.

Please don’t put your real name or anything sensitive in your nickname.

FEEDBACK YOU SEND US

If you choose to send feedback from the Me tab, we store your topic, your message, the app version and your device model. The message is connected to your profile so we can look into it. Please don’t include personal information in your message.

PUZZLES YOU FINISH

When you finish a puzzle, Bulut sends us a record of it so we can see how many people play, how many puzzles they finish and how the games are working. Each record contains the level, unit, puzzle number, game, stars earned, number of correct answers, total number of items, time taken, and the date and time you played. The record is connected to your profile. It does not include the words you saw or the answers you gave. If you are offline, the record waits on your phone and is sent later.

WHAT STAYS ON YOUR PHONE

The following is stored only on your device and is not sent to us:

Which words you know, are learning or have met
Hints used
Your streak and drops
Settings such as accent, reminder, sound and vibration

Pronunciations are played with the speech voices built into iOS.

WHAT WE DON’T COLLECT

Bulut does not collect your name, email address, phone number, location, contacts, photos or microphone audio. It does not use the advertising identifier, and it does not track you across other companies’ apps or websites. Bulut currently has no ads, third-party analytics tools or in-app purchases.

HOW WE USE YOUR DATA

We use the data on our server only to give you a Bulut ID, keep your profile, operate the app, respond to and review your feedback, understand how Bulut is used so we can improve it, and protect the service. We rely on the need to provide the app you asked to use and on our legitimate interest in keeping it secure and improving it. We do not sell your data or use it for advertising.

DAILY REMINDERS

If you allow notifications, Bulut schedules a daily reminder on your phone. Reminders do not come from our server. You can turn them off in the Me tab or in iOS Settings.

WHO HANDLES YOUR DATA

We use Supabase to host the database and anonymous connection. Supabase processes this data on our behalf, and its servers may be located outside your country, including outside Turkey. Apple distributes the app through the App Store under its own privacy terms. We don’t share your data with anyone else unless the law requires it.

HOW LONG WE KEEP IT, AND HOW TO DELETE IT

We keep your profile and puzzle records until you delete them. To delete them, open the Me tab and choose Delete my account. After you confirm twice, your Bulut ID, nickname and puzzle records are removed from our server, and your progress and nickname are removed from your phone. The app then starts fresh with a new Bulut ID. If our server can’t be reached, nothing is deleted and you can try again.

Feedback you sent is kept to help us improve Bulut, but when you delete your account its connection to you is removed, so it can no longer be linked to you.

Removing the app from your phone deletes your progress, but it does not delete your profile or puzzle records on our server. Use Delete my account first, or email us your Bulut ID and we will delete them. Technical logs and backups held by our hosting provider may remain for a limited time before they are removed.

YOUR RIGHTS

Depending on where you live, including under the GDPR and Turkey’s Personal Data Protection Law (KVKK), you may have the right to access, correct, delete or object to the use of your data, and to complain to your data protection authority. You can change your nickname and level in the app. For anything else, email us with your Bulut ID, because that code is how we find your profile.

SECURITY

Data travels between the app and our server over encrypted connections. Your session is kept in the iOS Keychain, and each user can read and change only their own profile. No system is perfectly secure, but we work to protect the little data we hold.

CHILDREN

Bulut is intended for people aged 13 and over, and we do not knowingly collect personal information from children under 13. The app does not ask for your age. If you are a parent or guardian and believe a child under 13 has used Bulut or entered personal information as a nickname, contact us and we will delete the profile.

CHANGES TO THIS POLICY

If Bulut changes what it collects, for example by adding advertising, third-party analytics or purchases, we will update this page before that version is released and change the date at the top.

CONTACT

Caner OBALI
canerobal@gmail.com