Contents
  1. 1. What does the app do?
  2. 2. Data we process
  3. 3. Purposes and legal bases
  4. 4. Special note on Gemini and the AI provider
  5. 5. Who data may be shared with
  6. 6. Retention and deletion
  7. 7. Security
  8. 8. Your rights and requests
  9. 9. Children and age limits
  10. 10. Changes to this policy
  11. 11. Contact
Privacy

Ödev Odak Privacy Policy

This is a translation of the Turkish original. If the two versions differ, the Turkish version prevails.

Effective date: 15 September 2026

Last updated: 29 September 2026

Data controller / publisher: Ödev Odak developer (GitHub: cbsoybas)

Contact: destek@odevodak.com

This Privacy Policy explains which personal data the Ödev Odak iPhone and iPad app (the “App”) processes, for what purposes and through which service providers. By using the App you acknowledge that you have read this text. Permissions and confirmations shown separately for optional features do not replace this text; separate consent is obtained before the relevant feature is used.

This text is not legal advice. Before publication, the data controller, contact details, retention periods and target user age should be checked against the actual app configuration and, where necessary, reviewed by a legal adviser.

1. What does the app do?

Ödev Odak lets you track homework on the device, optionally import it from Google Classroom, follow completion status, apply a personal focus limit to chosen apps and run an automatic completion check on homework photos you select.

The App does not conclusively verify that the homework was really done by the user, that the answers are correct, that a photo was just taken or that a photo shows every page of an assignment. The photo result is only an assisting assessment.

2. Data we process

2.1. Account and session information

When you sign in with Apple or Google, the following information may be processed to the extent the provider and the Supabase Auth configuration allow:

Session tokens are kept in the App’s secure Keychain storage. The Google access token obtained for the Google Classroom connection is kept in a separate Keychain entry tied to, but distinct from, your main Ödev Odak account. The Classroom account does not replace your main account and does not change which account the cloud backup belongs to.

2.2. Homework data

The following information that you enter manually, scan from a photo or import from Classroom may be processed:

When you add homework from a photo, the text is read on the device with Apple Vision wherever possible. You can change the recognized text or cancel the photo before saving.

2.3. Homework photos and the photo check

You start the photo check, you choose the photos to send, and you give explicit consent before pressing the send button. The App sends at most four photos per check. Photos and homework details may be transmitted over HTTPS to our own server function and to the configured third-party AI provider for the check.

In the current server implementation, photos are not added to the permanent homework backup, and the aim is that they are not written to disk outside the server’s temporary request memory. However, absolute control over network transmission, hosting logs, error records or the third-party provider’s own processing rules cannot be guaranteed. Do not show faces, student numbers, addresses, contact details or other personal information in photos.

2.4. Google Classroom data

When you connect Classroom, only the courses, assignments, due dates, descriptions, course names, Classroom links and your own submission statuses covered by the permissions you grant are retrieved. The App does not request data of teachers or other students that does not belong to you. Google’s data processing and privacy rules also apply: Google Privacy Policy.

While the App is open, Classroom syncs roughly every minute and whenever the App returns to the foreground. No continuous background sync happens while the App is fully closed. An assignment shown as turned in on Classroom counts as turned in in the App; if it was not verified with photos, this is shown separately.

2.5. Cloud backup

For signed-in users, a copy of the homework records may be kept in a homework_backups record tied to the user’s Supabase account. This backup contains homework metadata and statuses; photo check photos are not added to it. The backup belongs to the main Ödev Odak account, not to the Classroom account.

Supabase Auth, the database and RPC functions are used. For Supabase’s security and data processing documentation, see the Supabase Privacy Policy and the Supabase documentation.

2.6. Parent connection

When both accounts approve the optional parent connection, the following information may be shared:

Photos, Classroom access tokens and the app/category tokens chosen on the device are not sent to the parent. The parent connection can be ended; after that, new sharing and command sync stop.

2.7. Screen Time and device permissions

The app, category and web domain choices you make for focus mode are used on the device through Apple’s FamilyControls and DeviceActivity frameworks. The App does not aim to store the names or content history of these choices on the server. Camera, notification and Screen Time permissions are requested only to run the related feature.

2.8. Premium purchases

Ödev Odak Premium is offered on the App Store as a monthly or yearly auto-renewing subscription or as a one-time lifetime purchase. Apple takes the payment; your card or payment details are never sent to us.

Premium is linked to the Ödev Odak account you purchase it with and unlocks on devices where you sign in with that account. For this, your account’s identifier is passed to Apple as a purchase marker (appAccountToken) during purchase. After the purchase, the transaction information signed by Apple is sent to our server, its signature is verified, and the following is stored with your account in Supabase: App Store transaction ID, product, environment (production or test), purchase date and, for subscriptions, the expiry date. The fact that Premium is active and, if applicable, the subscription expiry date are added to your session information.

For renewals, expirations, refunds or cancellations, Apple sends signed notifications to our server through App Store Server Notifications. When a subscription renews, the expiry date is updated; Premium is turned off when a purchase expires or is refunded. A refunded purchase cannot be linked to another account.

2.9. Ads

Users without Premium may see ads through Google AdMob (Google Mobile Ads SDK). Ad requests are sent as non-personalized ads, with the under-age treatment flag and a general content rating; the App never asks for permission to track you across apps. Where required, your consent is collected with Google’s User Messaging Platform, and privacy options are available in the App. Google may process device and usage information under its own policies to serve ads, count them and prevent abuse. No ads are requested once Premium is on.

2.10. Widgets, Live Activity and app icon

Home Screen and Lock Screen widgets show a short summary of today’s homework (subject, title, completion status, streak count) by storing it in the shared app area (App Group) on the device. While the focus timer runs, the countdown on the Lock Screen and in the Dynamic Island (Live Activity) is created on the device. Badges, exam countdowns and your chosen theme and app icon are stored only on this device. This information is not sent to the server.

Data is processed for the following purposes, on the legal basis required by applicable local law:

Whether you use the optional photo check, Classroom, cloud backup, parent connection and focus permission features is up to you. If you don’t grant permission, that feature doesn’t work; basic homework tracking remains available on the device.

4. Special note on Gemini and the AI provider

The provider used for the photo check may be Google Gemini or another suitable provider, depending on the App’s server configuration at the time. Before photos are sent, the provider’s name and the purpose of sending are shown clearly in the App.

The current Gemini API Additional Terms require the person using the API to be 18 or older and prohibit using the API client as a service directed at, or likely to be accessed by, people under 18. Therefore:

  1. When starting the photo check with Gemini, you must declare that you are 18 or older and authorized to use this feature.
  2. This declaration is not an ID, face or biometric age verification. The App does not claim that Gemini conclusively verifies your age from a photo.
  3. If you are under 18, or unsure whether you meet the age requirement, do not use the Gemini-based photo check.
  4. Before the Gemini API is used in a distribution aimed at children or students under 18, the provider’s current terms must be reviewed again; if necessary, the feature must be disabled or a suitable provider used.

Current Gemini terms: Gemini API Additional Terms. Content sent to the provider is also subject to Google’s relevant terms and privacy documents. Adding a technical text to the Terms of Use does not change the provider’s age or audience requirements.

5. Who data may be shared with

Data may be transferred to the following parties only as far as the function requires:

Data is not shared to build advertising profiles and is not sold. A provider not used in the actual configuration should not be treated as an active service in this text.

6. Retention and deletion

Deleted data may not disappear immediately and physically at the same moment from backups, logs or legal record systems; these records are kept only as long as necessary and then deleted or anonymized.

7. Security

HTTPS is used in transit, Supabase Auth for sessions and the Keychain for session information on the device. We aim to restrict access to the user’s own account and to open family data only to an approved connection. No system on the internet can guarantee absolute security; protecting your device, your Apple/Google account and your credentials is your responsibility.

8. Your rights and requests

Under applicable law you may have the right to access, correct and delete your personal data, to restrict or object to processing, to data portability and to withdraw consent. To make a request, write to destek@odevodak.com. We may ask you to confirm that you own the account before fulfilling the request.

9. Children and age limits

The App’s basic homework list and the Gemini photo check are not subject to the same age and service terms. The 18+ declaration above is mandatory for the Gemini feature. If the App will be used by people under 18, the parent connection, Apple’s child account rules, Google Classroom school policies and the current terms of the AI provider used must be considered separately. This document does not permit a user under 18 to use the Gemini service.

10. Changes to this policy

We may update this policy when the service, providers or legislation change. The current version is published in the App and on the Privacy Policy page. For significant changes, an in-app notice or renewed consent may be requested under applicable law.

11. Contact

For privacy questions, data requests and deletion requests:

Data controller: Ödev Odak developer (GitHub: cbsoybas)

Contact: destek@odevodak.com

Privacy policy URL: https://www.odevodak.com/en/privacy/