VahaiPrivacy Policy
Last Updated: September 15, 2026
This policy explains what Vahai collects when you turn your study material into practice questions, why we collect it, who we share it with, and the control you have over it.
1. Who We Are
Vahai is an AI-powered study application operated by Clarif Bilişim ve Danışmanlık A.Ş., a company registered in Türkiye with the registered address at Sivas ("Vahai", "we", "us"). We are the data controller for the personal data described in this policy. For anything relating to your data, contact us at hello@clarif.co.
2. What Vahai Does
You add a source — a PDF, a Word or PowerPoint file, a spreadsheet, a photo of your notes, an audio or video recording, a YouTube link, a web page, a Google Doc, or text you type yourself. Vahai reads that source, uses artificial intelligence to generate practice questions from it, and grades your answers by meaning rather than by exact wording. Fennec, our in-app AI tutor, explains what you missed and cites the exact page, timestamp, or passage the answer came from. Understanding this flow explains most of what follows: the study material you add is the core of the data we process.
3. Information We Collect
3.1 Information you provide
- Account information — name, email address, and profile photo, received from Apple Sign-In, Google Sign-In, or supplied by you during email registration. You may also use the app as a guest, in which case we create an anonymous account identifier instead.
- Onboarding answers — education level, study goals, subjects, preferred study habits and similar preferences you select during setup. We record these even before you create an account, and link them to your account if you later sign up.
- Study sources you upload — documents (PDF, DOC/DOCX, PPT/PPTX, XLS/XLSX), images, audio and video recordings, and the links you paste (YouTube, web pages, Google Docs). We also store the text extracted from those sources.
- Content you write in the app — deck and folder names, your own notes, answers you type during study sessions, messages you send to the AI tutor, question reports, time capsule notes, and support messages.
- Promo and referral codes you enter or share.
3.2 Information generated by using Vahai
- Generated study material — the questions, answer keys, explanations, source citations and study notes our AI produces from your sources.
- Study activity — study sessions, individual answer attempts and outcomes, similarity scores for written answers, mastery levels, XP, level, streak history, and daily usage counters.
- Subscription data — your subscription and trial status, plan, and transaction confirmations received from Apple, Google and our subscription provider. We never receive or store your payment card details.
- Product analytics — which screens and features you use, when generation succeeds or fails, and similar interaction events.
3.3 Information collected automatically
- Device and technical data — device model, operating system version, app version, language and region, a device identifier we generate, IP address, and crash and performance diagnostics.
- Push notification token, if you allow notifications.
- Advertising identifier (IDFA on iOS, Advertising ID on Android) — collected only where permitted and, on iOS, only if you grant permission through Apple's App Tracking Transparency prompt. If you decline, we do not access it.
4. How and Why We Use Your Information
| Purpose | Data used | Legal basis (GDPR / KVKK) |
|---|---|---|
| Generate questions, notes and explanations from your sources; grade your answers | Uploaded sources, extracted text, your answers, tutor messages | Performance of our contract with you |
| Run your account, library, streak, XP and subscription | Account data, study activity, subscription status | Performance of our contract with you |
| Personalise your experience based on your onboarding answers | Onboarding answers, study activity | Performance of our contract; your consent where required |
| Enforce daily usage limits and prevent abuse of our AI costs | Usage counters, device identifier, IP address | Our legitimate interest in protecting the service |
| Diagnose crashes and improve reliability and product decisions | Technical data, diagnostics, analytics events | Our legitimate interest; your consent where required |
| Send push notifications (study reminders, product news) | Push token, study activity | Your consent |
| Measure advertising and attribution | Advertising identifier, analytics events | Your consent (ATT prompt on iOS) |
| Meet legal, tax and accounting obligations | Subscription and transaction records | Compliance with a legal obligation |
5. Artificial Intelligence Processing
To generate questions, notes, explanations, and tutor replies, and to grade written answers by meaning, we send your source material and the relevant parts of your study content to Google's Gemini API, which processes it on our behalf under its API terms. Large media files are stored in Google Cloud Storage and may be uploaded to Google's file-processing API so that the model can read them.
We do not sell your content, and we do not use it to train our own models. AI output can be incomplete or incorrect; it is study support, not authoritative instruction, and you should verify anything that matters against your original source. Our provider applies its own safety filters, so some content may be refused.
6. When We Share Information
We do not sell your personal data. We share it only with service providers that process it on our behalf, under contract, for the purposes described above:
| Provider | Purpose |
|---|---|
| Google (Gemini API, Cloud Storage, Firebase Authentication) | AI generation and grading, media storage, sign-in |
| [database and application hosting provider] | Hosting our servers and database |
| Adapty, together with Apple and Google billing | Subscription management and purchase validation |
| OneSignal | Push notifications |
| Sentry | Crash and error diagnostics |
| PostHog, and where enabled Firebase Analytics, Amplitude and Mixpanel | Product analytics |
We may also disclose data where required by law or legal process, to protect our rights or the safety of users, and in connection with a merger, acquisition or sale of assets.
Decks you choose to share. If you create a share link for a deck, anyone with that link who is signed in to Vahai can see the deck's name, its questions, and your display name, and can copy it into their own library. Sharing is entirely your choice and a deck is never shared unless you create a link for it.
7. International Transfers
Our service providers operate in several countries, so your data may be processed outside your country of residence, including outside Türkiye and the European Economic Area. Where we transfer personal data internationally we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and, for transfers from Türkiye, the mechanisms permitted under KVKK.
8. How Long We Keep Your Data
| Data | Retention |
|---|---|
| Account, decks, questions, uploaded sources, notes, tutor conversations, study history | Until you delete the item or your account |
| Everything associated with a deleted account | Deleted within 30 days of your request |
| Subscription and transaction records | Retained as long as tax and accounting law requires, even after account deletion |
| Diagnostic and analytics data | Retained according to each provider's retention settings, then deleted or anonymised |
| Aggregated, anonymised statistics that cannot identify you | May be kept indefinitely |
9. Your Rights
Depending on where you live — and in particular under the GDPR and, in Türkiye, under Article 11 of the KVKK — you have the right to learn whether we process your personal data and to access it, to have inaccurate data corrected, to have your data deleted, to restrict or object to certain processing, to receive your data in a portable format, to withdraw consent at any time without affecting processing already carried out, and to request that we notify third parties to whom your data was transferred about any correction or deletion.
You can delete your account and its data directly in the app under Profile → Edit Profile → Delete Account, or follow the steps on our account deletion page. For any other request, write to hello@clarif.co; we respond within 30 days. If you believe we have not handled your request properly, you may lodge a complaint with your local data protection authority — in Türkiye, the Personal Data Protection Authority (KVKK).
10. Permissions and Choices
- Camera and photo library — used only when you actively take or select a photo to turn into questions. We never access them in the background. You can revoke access in your device settings.
- Files and documents — we read only the files you explicitly pick.
- Push notifications — can be turned off in the app or in your device settings.
- Tracking (iOS) — you can allow or refuse it at the App Tracking Transparency prompt, and change your answer later in your device settings.
11. Children's Privacy
Vahai is intended for students aged 13 and over. If you are under 18, you must have the consent of a parent or legal guardian. We do not knowingly collect personal data from children under 13; if we learn that we have, we delete it promptly. Parents and guardians can contact us at hello@clarif.co.
12. Security
We protect your data with encryption in transit and at rest, authenticated access to every endpoint, and access controls on our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
13. Changes to This Policy
We may update this policy. Material changes will be announced in the app or by email, and the "Last Updated" date above always reflects the current version. Continuing to use Vahai after a change means you accept the updated policy.
14. Contact
Questions, concerns or data requests: hello@clarif.co