Edustoo - Your Digital Campus
Last Updated: January 09, 2026Our Privacy Commitment
We do NOT sell your personal data. Your Mental Support data is never used for advertising. Your private messages are never shared with advertisers. You can delete your data at any time.
1.1 This Privacy Policy ("Policy") describes how Edustoo ("Edustoo," "Company," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use the Edustoo mobile application ("App"), website located at www.edustoo.com ("Website"), and all related services, features, and functionality (collectively, the "Service").
1.2 By downloading, installing, accessing, or using any part of the Service, you acknowledge that you have read, understood, and agree to the collection, use, and sharing of your personal information in accordance with this Privacy Policy. If you do not agree to this Policy, please do not use the Service.
1.3 This Privacy Policy is incorporated into and forms part of our Terms of Service, available at www.edustoo.com/terms. Capitalized terms used but not defined in this Policy have the meanings assigned to them in the Terms of Service.
1.4 This Privacy Policy applies to all users of the Service worldwide. If you are located in a jurisdiction with specific data protection laws (such as the European Union, Turkey, or California), additional rights and protections may apply to you as described in Section 14 (Your Privacy Rights).
1.5 Scope of This Policy. This Privacy Policy covers:
1.6 Updates to This Policy. We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting a notice within the App and/or on the Website for at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy indicates when it was last revised. Your continued use of the Service after any changes constitutes your acceptance of the updated Policy.
1.7 Contact Us. If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Edustoo
Address: Özgür Sokak, Yeni Mahalle Mahallesi, No: 14, Daire: 1, Karabük, Safranbolu, Türkiye
Email: info@edustoo.com
2.1 Overview. We collect information that you provide directly to us, information collected automatically when you use the Service, and information from third-party sources. The types of information we collect depend on how you interact with the Service.
2.2 Account Registration Information. When you create an Edustoo account, we collect:
| Data Type | Required/Optional | Purpose |
|---|---|---|
| Email address | Required (for email registration) | Account creation, communication |
| Password | Required (for email registration) | Account security |
| Phone number | Required for social features | Verification, security |
| Google account info | Optional (if using Google Sign-In) | Authentication |
| Apple account info | Optional (if using Apple Sign-In) | Authentication |
When you register using Google Sign-In or Apple Sign-In, we receive your email address and basic profile information from the respective provider in accordance with their privacy policies.
2.3 Profile Information. After creating an account, you may provide additional information for your profile:
Your profile may be visible to other users depending on your privacy settings.
2.4 Individual Development Module Data. When you use the Individual Development features of the Service, we collect:
2.5 Social and Communication Data. When you use social features of the Service, we collect:
See Section 5 (Social Features and Messaging Data) for more details.
2.6 AI Interaction Data. When you use Mentor AI, we collect:
See Section 4 (AI Features and Data Processing) for more details.
2.7 Contact Sync Data. If you enable the Contact Sync feature, we access your device's contact list to help you find friends who use Edustoo. We do not store your contacts' phone numbers in plain text. Instead, we use cryptographic hashing to create anonymized identifiers for matching purposes only. You can disable Contact Sync at any time in your Settings.
2.8 Device and Technical Information. We automatically collect certain technical information when you use the Service:
Location Data
We do NOT access your precise GPS location. Any location data we use is derived only from your IP address, which provides only general location information (country and city level). The App does not request or access your device's GPS, and we do not track your physical movements.
2.9 Usage and Analytics Data. We collect information about how you interact with the Service:
2.10 Payment Information. When you purchase a Premium subscription, payment is processed by Apple (App Store) or Google (Play Store). Edustoo does NOT directly collect or store your payment card information. We receive only:
2.11 Communication Data. When you communicate with us, we collect:
Special Category Data
Data collected through the Mental Support feature may be considered sensitive personal information or special category data under certain privacy laws. We apply additional protections to this data.
3.1 Special Category Data. The Mental Support feature allows you to track your mood, maintain a personal journal, and reflect on your emotional well-being. Data collected through this feature may be considered sensitive personal information or special category data under certain privacy laws (including GDPR and KVKK).
3.2 Data Collected. Through the Mental Support feature, we collect:
3.3 How We Use Mental Support Data. Your Mental Support data is used to:
3.4 Data Protection for Mental Support. We implement additional safeguards for Mental Support data:
NOT Medical Data
As stated in our Terms of Service, the Mental Support feature is NOT a medical service. We do not provide medical advice, diagnosis, or treatment. If you are experiencing mental health issues, please consult a qualified healthcare professional.
3.6 Consent. By using the Mental Support feature, you explicitly consent to the collection and processing of this sensitive data as described in this Policy. You may withdraw your consent at any time by discontinuing use of the Mental Support feature and deleting your Mental Support data through the App settings.
3.7 Retention. Mental Support data is retained while your account is active. Upon account deletion, this data is permanently deleted within thirty (30) days. You may also delete your Mental Support data independently at any time through your Settings without deleting your account.
4.1 Mentor AI Overview. Mentor AI is an artificial intelligence-powered feature that provides personalized educational guidance, study recommendations, and academic coaching. This feature is powered by Google Gemini, a third-party AI technology.
4.2 Technology Provider. Mentor AI is powered by:
| Provider | Service | Privacy Policy |
|---|---|---|
| Google LLC | Google Gemini (AI/NLP) | Link |
4.3 Data Sent to AI Provider. To provide personalized recommendations, the following data may be sent to Google Gemini for processing:
4.4 Data Anonymization. When sharing data with AI providers, we take steps to minimize personally identifiable information:
4.5 AI Data Retention.
AI Limitations
AI-generated content may contain errors or inaccuracies. Mentor AI is not a substitute for professional educators or advisors. You should not rely solely on AI advice for important decisions. See our Terms of Service for full disclaimers.
4.7 Your Control. You have the following controls over AI data:
5.1 Overview. The Service includes social and collaborative features that enable you to connect with other users, communicate, and collaborate on educational activities.
5.2 Phone Verification Requirement. Access to social features requires phone number verification. Your phone number is used to:
5.3 Friend Connections and Search. When you use friend features:
5.4 Group Workspaces. When you participate in Group Workspaces:
5.5 Duo Mode. When you use Duo Mode (one-on-one collaboration):
5.6 Messaging Data. When you send messages through the Service:
5.7 Message Storage and Retention.
No End-to-End Encryption
Messages transmitted through the Service are NOT end-to-end encrypted. Edustoo can access message content for service operation, content moderation, safety, legal compliance, and investigating reported violations. Do not share highly sensitive information (passwords, financial data, identification numbers) through messaging.
5.9 Voice Messages. When you send voice messages:
5.10 File Sharing. When you share files:
5.11 Blocking and Reporting. When you block or report a user:
5.12 Your Controls. You have the following controls over social data:
6.1 Overview. We use the personal information we collect for various purposes, all aimed at providing, maintaining, improving, and personalizing the Service.
6.2 Providing and Operating the Service. We use your information to:
6.3 Personalizing Your Experience. We use your information to:
6.4 Improving and Developing the Service. We use your information to:
6.5 Communicating with You. We use your information to send you:
6.6 Ensuring Safety and Security. We use your information to:
6.7 Legal Compliance. We use your information to:
6.8 Advertising (Free Tier Users). For users on the Free tier, we use information to display advertisements, personalize advertisements based on interests (unless you opt out), and measure ad effectiveness. See Section 9 for details.
6.9 Legal Basis for Processing (GDPR/KVKK). For users in jurisdictions where a legal basis is required (such as the European Union or Turkey), we process your personal information based on:
| Legal Basis | Examples of Processing |
|---|---|
| Contract Performance | Providing the Service, managing your account, processing subscriptions |
| Legitimate Interests | Improving the Service, analytics, fraud prevention, security |
| Consent | Marketing communications, personalized advertising, Mental Support data |
| Legal Obligation | Complying with laws, responding to legal requests |
6.10 Automated Decision-Making. The Service uses automated processing, including AI-powered features (Mentor AI), to provide personalized recommendations. These automated processes are based on data you provide and your usage patterns, do not make decisions with legal or similarly significant effects on you, are designed to assist and inform (not replace your judgment), and can be influenced by adjusting your data or settings.
We Do NOT Sell Your Data
We do NOT sell your personal information to third parties. We share your information only as described in this section, with appropriate safeguards in place.
7.2 Sharing with Other Users. Depending on your settings and how you use the Service, certain information may be visible to other users:
| Information | Visibility |
|---|---|
| Profile (name, username, picture, bio) | Public or Friends only (based on settings) |
| Learning progress and streaks | Based on your settings |
| Group messages and shared content | Group members |
| Duo messages and shared content | Your Duo partner |
| Friend list | You and optionally your friends |
7.3 Sharing with Service Providers. We share information with third-party service providers who help us operate and improve the Service. These providers are contractually obligated to use your information only for specified purposes, protect your information with appropriate security measures, not share your information without authorization, and delete or return your information when no longer needed. See Section 8 for a list of our key service providers.
7.4 Sharing with AI Providers. To provide Mentor AI functionality, we share certain data with Google (Gemini). See Section 4 for details.
7.5 Sharing with Advertising Partners (Free Tier). For Free tier users, we share limited information with advertising partners (Google AdMob) to display advertisements. See Section 9 for details and opt-out options.
7.6 Sharing for Legal Reasons. We may share your information when we believe in good faith that disclosure is necessary to:
7.7 Sharing in Business Transfers. If Edustoo is involved in a merger, acquisition, bankruptcy, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
7.8 Sharing with Your Consent. We may share your information with third parties when you have given us explicit consent to do so.
7.9 Aggregated and Anonymized Data. We may share aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you for research, analytics, industry benchmarking, improving educational methodologies, and business development purposes.
7.10 What We Do NOT Share. We do NOT:
8.1 Overview. The Service relies on various third-party service providers to deliver functionality, process data, and enhance user experience. This section lists our key third-party service providers.
8.2 Authentication and Infrastructure:
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Firebase Authentication | Google LLC | User login and identity | Link |
| Cloud Firestore | Google LLC | Database and data storage | Link |
| Firebase Storage | Google LLC | File and media storage | Link |
| Firebase Cloud Messaging | Google LLC | Push notifications | Link |
8.3 Analytics and Performance:
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Firebase Analytics | Google LLC | Usage analytics | Link |
| Firebase Crashlytics | Google LLC | Crash reporting | Link |
8.4 AI and Machine Learning:
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Google Gemini | Google LLC | Mentor AI functionality | Link |
8.5 Subscription and Payments:
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| RevenueCat | RevenueCat, Inc. | Subscription management | Link |
| Apple App Store | Apple Inc. | iOS payments | Link |
| Google Play Store | Google LLC | Android payments | Link |
8.6 Advertising (Free Tier Only):
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Google AdMob | Google LLC | Advertisement display | Link |
8.7 Authentication Providers:
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Google Sign-In | Google LLC | Social login | Link |
| Apple Sign-In | Apple Inc. | Social login | Link |
8.8 Firebase Services (Google). Firebase is our primary infrastructure provider. All Firebase services are provided by Google LLC and are subject to Google's Privacy Policy. Firebase services are hosted on Google Cloud Platform servers, which may be located in various regions worldwide.
8.9 Data Processing Agreements. Where required by law, we have entered into data processing agreements with our third-party service providers that include limitations on purposes, security requirements, assistance with data subject requests, breach notification obligations, and data deletion provisions.
8.10 Third-Party Links. The Service may contain links to third-party websites or services that are not owned or controlled by Edustoo. This Privacy Policy does not apply to those third-party services. We encourage you to review their privacy policies.
8.11 Changes to Third-Party Providers. We may add, remove, or change third-party service providers from time to time. Material changes will be reflected in updates to this Privacy Policy.
9.1 Advertising on Free Tier. If you use the Free tier of the Service, you will see advertisements provided by Google AdMob. Advertising helps us offer the Service for free to users who choose not to subscribe to Premium.
9.2 Types of Advertisements. You may see:
9.3 Personalized Advertising. By default, advertisements may be personalized based on:
9.4 Advertising Data Shared. When displaying personalized ads, the following data may be shared with Google AdMob:
We do NOT share:
9.5 Opting Out of Personalized Advertising. You have the right to opt out of personalized advertising:
How to Opt Out
On iOS: Settings > Privacy & Security > Tracking > Disable "Allow Apps to Request to Track"
On Android: Settings > Google > Ads > Enable "Opt out of Ads Personalization"
In the App: Settings > Privacy > Disable Personalized Ads (if available)
9.6 Non-Personalized Ads. If you opt out of personalized advertising, you will still see advertisements, but they will be generic and not based on your interests, based only on general context (such as your country), and less relevant to your personal preferences.
9.7 Ad-Free Experience. Premium subscribers enjoy an ad-free experience. By subscribing to Edustoo Premium, all advertisements are removed from the Service.
9.8 Personalization of Content (Non-Advertising). Separately from advertising, we personalize your experience within the Service based on your learning progress and goals, usage patterns and preferences, interaction with Mentor AI, and mood patterns (for holistic recommendations). This personalization is a core feature of the Service and is not related to advertising.
10.1 Overview. We use cookies and similar tracking technologies to collect information, provide functionality, and analyze usage of the Service.
10.2 What Are Cookies? Cookies are small text files stored on your device when you visit a website. Similar technologies include:
10.3 Cookies on Our Website. When you visit www.edustoo.com, we may use:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential cookies | Enable basic functions like navigation and secure access | Session |
| Functional cookies | Remember your preferences and settings | Persistent |
| Analytics cookies | Understand how visitors interact with the website | Persistent |
| Advertising cookies | Deliver relevant advertisements (if applicable) | Persistent |
10.4 Technologies in Our Mobile App. The Edustoo mobile app uses:
| Technology | Purpose | Provider |
|---|---|---|
| Firebase Analytics SDK | Usage analytics, event tracking | |
| Firebase Crashlytics SDK | Crash reporting, diagnostics | |
| AdMob SDK (Free tier) | Advertisement display | |
| RevenueCat SDK | Subscription management | RevenueCat |
10.5 How We Use These Technologies. We use cookies and tracking technologies to:
10.6 Your Choices. You can control cookies and tracking technologies in several ways:
Browser Settings (Website): Most browsers allow you to block or delete cookies through settings. Blocking essential cookies may affect website functionality.
Mobile Device Settings:
Analytics Opt-Out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. In-app analytics can be limited through your device settings.
10.7 Do Not Track Signals. Some browsers send "Do Not Track" (DNT) signals to websites. Currently, there is no industry standard for how to respond to these signals. The Service does not currently respond to DNT signals. However, you can use the opt-out mechanisms described above to limit tracking.
11.1 General Retention Principle. We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.
11.2 Retention Periods.
| Data Type | Retention Period | Notes |
|---|---|---|
| Account Information | While account is active + 30 days after deletion request | Permanently deleted after 30-day period |
| Profile Information | While account is active | Deleted with account |
| Individual Development Data | While account is active | Deleted with account |
| Mental Support Data | While account is active OR until user deletes | Can be deleted independently |
| AI Chat History | While account is active OR until user deletes | Can be deleted through Settings |
| Messages (Group/Duo) | While account is active and connection exists | May remain visible to others after your deletion |
| Shared Files | While account is active and connection exists | Subject to storage limits |
| Usage Analytics | Up to 26 months | Aggregated and anonymized |
| Crash Reports | Up to 90 days | Used for debugging |
| Payment Records | As required by law (typically 5-10 years) | For tax and legal compliance |
11.3 Account Deletion. You can delete your account at any time:
Upon requesting account deletion:
11.4 Data That May Be Retained After Deletion. Even after account deletion, we may retain:
11.5 Deleting Specific Data. You can delete certain data without deleting your entire account:
11.6 Data Portability. Before deleting your account, you can request a copy of your data:
12.1 Our Commitment. We take the security of your personal information seriously. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.
12.2 Technical Security Measures.
| Measure | Description |
|---|---|
| Encryption in Transit | All data transmitted between your device and our servers is encrypted using TLS/SSL |
| Encryption at Rest | Sensitive data is encrypted when stored on our servers |
| Secure Authentication | Support for secure login methods including Google Sign-In and Apple Sign-In |
| Access Controls | Strict access controls limit employee access to personal data |
| Firebase Security Rules | Database access is protected by security rules that restrict unauthorized access |
| Regular Security Reviews | We regularly review and update our security practices |
12.3 Organizational Security Measures. We also implement:
12.4 Your Responsibilities. You also play a role in protecting your data:
12.5 Data Breach Notification. While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you and relevant authorities without undue delay as required by applicable law (within 72 hours where required by GDPR).
12.6 Reporting Security Issues. If you discover a security vulnerability or suspect unauthorized access to your account, please contact us immediately at info@edustoo.com. We appreciate responsible disclosure and will work to address any issues promptly.
13.1 Global Operations. Edustoo is operated from Turkey and uses service providers located in various countries around the world. By using the Service, you acknowledge that your personal information may be transferred to, stored, and processed in countries other than your country of residence.
13.2 Countries Where Data May Be Processed.
| Provider | Location |
|---|---|
| Firebase/Google Cloud | United States, European Union, and other regions |
| Google Gemini | United States |
| RevenueCat | United States |
| Apple | United States, Ireland |
13.3 Safeguards for International Transfers. When transferring data internationally, we implement appropriate safeguards:
(a) For transfers from the European Economic Area (EEA), United Kingdom, or Switzerland:
(b) For transfers from Turkey:
13.4 Google and Firebase. Our primary infrastructure provider, Google (Firebase), participates in various data protection frameworks and provides contractual commitments for data protection. Google's data processing terms are available at https://cloud.google.com/terms/data-processing-terms.
13.5 Your Consent. By using the Service, you consent to the transfer of your personal information to countries outside your country of residence, including countries that may have different data protection laws. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
14.1 General Rights. Regardless of where you are located, we provide all users with the following rights:
| Right | Description | How to Exercise |
|---|---|---|
| Access | Request a copy of your personal data | Email or in-app data export |
| Correction | Request correction of inaccurate data | Update in Settings or email us |
| Deletion | Request deletion of your data | Settings > Delete Account or email us |
| Data Portability | Receive your data in a portable format | Email info@edustoo.com |
| Withdraw Consent | Withdraw consent for optional processing | Adjust Settings or email us |
| Opt-out of Marketing | Stop receiving promotional communications | Unsubscribe link or Settings |
If you are located in Turkey, you have additional rights under the Kişisel Verilerin Korunması Kanunu (KVKK - Law No. 6698):
Veri Sorumlusu (Data Controller)
Edustoo
Özgür Sokak, Yeni Mahalle Mahallesi, No: 14, Daire: 1
Safranbolu, Karabük, Türkiye
Email: info@edustoo.com
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
14.5 Exercising Your Rights. To exercise any of your privacy rights:
We will respond within the timeframe required by applicable law (typically 30 days). We may need to verify your identity before processing your request.
14.6 Appeals. If we deny your request, you have the right to appeal by contacting us at info@edustoo.com with "Privacy Appeal" in the subject line.
14.7 Authorized Agents. You may designate an authorized agent to make requests on your behalf. We may require verification of both your identity and the agent's authorization.
Age Requirement: 13+
The Service is intended for users who are at least 13 years of age. We do not knowingly collect personal information from children under 13.
15.1 Age Requirement. The Service is intended for users who are at least 13 years of age. By using the Service, you represent and warrant that you are at least 13 years old.
15.2 No Collection from Children Under 13. We do not knowingly collect, maintain, or process personal information from children under the age of 13. The Service is not directed to children under 13.
15.3 Discovery of Underage Users. If we become aware that we have collected personal information from a child under 13, we will:
15.4 Reporting Underage Users. If you believe that a user is under the age of 13, please report this to us immediately at info@edustoo.com. We will investigate and take appropriate action.
15.5 Users Between 13 and 18. If you are between 13 and 18 years old:
15.6 Parental Requests. Parents or legal guardians of users between 13 and 18 may request access to their child's personal information, request correction, request deletion, or withdraw consent. To make such requests, please contact us at info@edustoo.com with proof of your relationship to the user.
15.7 App Store Age Ratings. The Service is rated 13+ on the Apple App Store and Google Play Store, reflecting that it is not intended for children under 13.
16.1 Changes. We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.
16.2 Notification of Changes. If we make material changes to this Privacy Policy, we will notify you by:
16.3 What Constitutes Material Changes. Material changes include, but are not limited to:
16.4 Effective Date. Changes will become effective at the end of the seven (7) day notice period, unless a longer period is required by applicable law. Your continued use of the Service after the effective date constitutes your acceptance of the updated Policy.
16.5 Review. We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting your information.
16.6 Previous Versions. Previous versions of this Privacy Policy may be available upon request by contacting info@edustoo.com.
17.1 Questions and Concerns. If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:
Özgür Sokak, Yeni Mahalle Mahallesi, No: 14, Daire: 1, Safranbolu, Karabük, Türkiye
17.2 Data Protection Inquiries. For specific inquiries related to:
17.3 Response Time. We will acknowledge your inquiry within 48 hours and provide a substantive response within:
17.4 Supervisory Authorities. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority:
(a) Turkey:
Kişisel Verileri Koruma Kurumu (KVKK)
Website: www.kvkk.gov.tr
(b) European Union:
Contact your local Data Protection Authority. A list is available at:
https://edpb.europa.eu/about-edpb/about-edpb/members_en