Privacy policy

1. Introduction

Kurd Apps ("we", "our", or "us") respects your privacy and is committed to protecting your data. This policy explains what information our mobile application Kurd Apps / کورد ئەپس (the "App") collects, how we use it, how long we keep it, and the choices you have.

2. User profiles

The App creates a unique profile for each user to provide personalized features and history. This profile is linked to your device and you have multiple authentication options:

• Email and password: you can create an account using your email address and a password.
• Google Sign-In: you can authenticate using your Google account.
• Anonymous access: you can use the App without providing any email, password, or other identifiers.

Regardless of your sign-in method, you can view, manage, and delete your profile data at any time through the profile page within the App. If you choose anonymous access, your data will still be saved but will only be associated with your device rather than an email or Google account.

3. Information we collect

A. Authentication data. If you choose to create an account with email/password or sign in with Google, we store your email address and authentication details. For Google sign-in, we receive your email and Google profile ID. We do not receive or store your Google password. If you use anonymous authentication, we generate and store a unique identifier for your device only.

B. Device or other IDs. PostHog generates an analytics identifier that may be based on the Android Advertising ID, Android ID, or a randomly generated UUID. We do not collect IMEI, MAC address, or precise location.

C. Usage data. We log anonymous events such as screen views, button taps, and feature votes to understand how the App is used.

D. Diagnostics. Vercel automatically records crash logs, request duration, memory usage, and other performance metrics for up to 24 hours to help us debug and ensure stability.

E. Translation data. Your translation inputs and outputs are stored in a secure database to provide you with a history of your translations. This data is associated with your unique device identifier and can be accessed through your profile page.

F. KurdGPT chat history. Your chat conversations with KurdGPT are stored in a secure database to provide a continuous conversation experience. Research insights generated through deep research are also saved to improve service quality.

G. Generated images. Images created through the text-to-image feature are stored in an encrypted database and associated with your profile. These images are retained to provide you with access to your previously generated content and for content moderation purposes.

H. Content flags. When you flag generated images as inappropriate, this feedback is stored to help us improve our content filters and enforce our content policies.

I. Voice recordings. When you use the microphone feature, we capture your raw audio to transcribe your voice using ElevenLabs. The transcribed text is then automatically inserted into the input text field of the respective mini app. Raw voice recordings are stored in our secure AWS S3 bucket solely for transcription purposes and are automatically deleted after 60 days.

J. Advertising data. To serve relevant ads and keep our service free, we may collect limited advertising identifiers and usage patterns. This includes anonymous device identifiers, general location (country/region level), app usage patterns, and ad interaction data. We do not collect precise location data or personally identifiable information for advertising purposes.

4. How we use your information

• To translate text, answer chat questions, and generate images as requested.
• To transcribe voice recordings into text when you use the microphone feature.
• To provide core App functionality, including feature voting.
• To monitor stability, debug issues, and improve performance.
• To understand feature adoption and prioritise future improvements (analytics).
• To maintain your personal history of translations, chats, generated images, and voice transcriptions.
• To moderate generated images and ensure compliance with safety policies.
• To prevent the generation of sexual or inappropriate content through our text-to-image feature.
• To comply with app store policies, including the ability to flag inappropriate content.
• To serve relevant advertisements and keep our service free for all users.
• To measure ad performance and improve ad targeting while maintaining user privacy.

5. Legal basis (EU/EEA)

We process your data under legitimate interest (analytics and performance), contractual necessity (to provide the features you request), and consent (camera and microphone access). You may withdraw consent for the camera or microphone at any time via your device permissions. We also process data to comply with legal obligations related to content moderation and app store requirements.

6. Sharing of information

We do not sell your personal data. However, to keep our service free for all users, we work with advertising partners who may receive limited, anonymized data for ad serving purposes. We use a small number of service providers who process data on our behalf:

• PostHog (EU data centre) — product analytics.
• Vercel Inc. — cloud hosting for the App API (24 h log retention).
• AWS S3 — encrypted storage for generated images and user data.
• Secure database provider — storage for translation history, chat logs, and research reports.
• Advertising partners — anonymous advertising identifiers and usage patterns to serve relevant ads while keeping the service free.

7. Data retention

• Authentication data: email addresses and account information are retained until you delete your account. For anonymous users, device identifiers are retained until you uninstall the App or request deletion.
• Device IDs and usage analytics: retained until you uninstall the App or request deletion.
• Diagnostics: auto-deleted within 24 hours.
• Translation history: stored until you delete it through your profile page.
• KurdGPT chat history: stored until you delete it through your profile page.
• Generated images: stored until you delete them through your profile page.
• Content flags: retained for moderation purposes and to improve our filters.
• Raw voice recordings: stored in our AWS S3 bucket for transcription and automatically deleted 60 days after recording. Transcription text is stored until you delete it through your profile page. To request earlier deletion of voice recordings, contact us at sales@trisof.com.

8. Data security

All data is transmitted over HTTPS. Access to backend systems is restricted and audited. S3 buckets and databases are private and encrypted at rest. Internal access to logs, translations, chats, voice recordings, and images is limited to personnel with a need-to-know for debugging or moderation.

9. Content moderation

Our text-to-image generator implements strict filters to prevent the creation of sexual, violent, or otherwise inappropriate content. While we strive for perfect filtering, no system is infallible. If you encounter inappropriate content, please use the "Flag" button available on all generated images. Flagged content is reviewed by our moderation team and used to improve our filtering systems.

Generation of sexual or adult content is strictly prohibited and violates our Terms of Service. Repeated attempts to generate such content may result in restricted access to the App's features.

10. Your choices and rights

• Authentication choices: you can create an account with email, use Google sign-in, or use the App anonymously.
• Account management: for authenticated users, you can change your password or switch authentication methods through the profile page.
• Account deletion: you can delete your account and all associated data through the profile settings.
• Profile management: access your profile page within the App to view, manage, or delete your data.
• Selective deletion: delete individual translations, chat sessions, or generated images through your profile.
• Complete data deletion: delete all your data at once through the profile settings page.
• Analytics opt-out: you can disable analytics with a VPN or request deletion.
• Camera permissions: disable camera access in your device settings at any time.
• Microphone permissions: disable microphone access in your device settings at any time.
• Voice recording deletion: to delete voice recordings, email us at sales@trisof.com.
• Content flagging: flag any inappropriate content using the flag button on generated images.
• Advertising preferences: you can limit ad tracking through your device's privacy settings (iOS: Settings > Privacy & Security > Tracking; Android: Settings > Privacy > Ads). Note that disabling ads may affect our ability to keep the service free.

11. Children's privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us.

12. Changes to this policy

We may update this policy from time to time. Material changes will be notified in-app or via email (if provided). The "last updated" date at the top reflects the latest version.

13. Contact us

For questions or requests, email sales@trisof.com. We respond within 24 hours.

14. Revenue and support

We keep Kurd Apps free for all users through two main revenue sources: advertisements and voluntary donations.

Advertisements: we display relevant ads within the App to generate revenue that covers our operational costs. This advertising revenue is our primary way of keeping the service completely free while maintaining high-quality features and performance.

Donations: we also have a "Support us" button on the profile page for users who wish to contribute voluntarily. Donations help us cover server costs, third-party provider fees, and the costs of services like ElevenLabs. We process all donations through Stripe, leveraging Apple Pay on iOS, Google Pay on Android, and standard card payments for a seamless experience. When you donate, you receive no additional content or features in the App; your contribution is purely voluntary and supports our company's ongoing operation.

15. Related pages

To remove data you have already created, follow the data deletion guide.