Privacy Policy
This is a convenience translation. The legally binding version is the German privacy policy (Datenschutzerklärung) at zekino.app/datenschutz.
Protecting children's data is Zekino's highest priority. We collect as little data as possible (principle of data minimisation, Art. 5(1)(c) of the EU General Data Protection Regulation (Datenschutz-Grundverordnung, GDPR/DSGVO)).
1. Controller
Hasan Bekar, Çamlık Mh., Selçuklu Cd. No 20C, 34912 Pendik, İstanbul, Türkiye, hello@zekino.app (see also the legal notice (Impressum)).
2. What data we process
Parent account: email address (login), name, password (stored as a hash only), language, subscription status. Child profiles: only a first name or nickname and the year of birth — no email address, no photo, no exact date of birth, no postal address. Learning progress: answered exercises, level assessments. Parent check: answers and (optionally) the email address for the report (only after confirmation/double opt-in).
3. Purposes & legal bases
Provision of the learning support service and performance of the contract (Art. 6(1)(b) GDPR); the report is sent only with consent (point (a)). There is no advertising directed at children; the children's area is free of advertising and purchases.
4. Hosting & processors
Hosting in the EU (Hetzner Online GmbH, Germany). Email delivery via Migadu (Migadu.com, Switzerland). Payment processing via Paddle (Paddle.com Market Ltd.) — payment data is processed there, not by us. Data processing agreements (Art. 28 GDPR) are in place with all service providers.
5. Storage period
Account data is kept until the account is deleted. After account deletion, all associated child and progress data is irrevocably removed.
6. Your rights
Access (Art. 15), rectification (Art. 16), erasure (Art. 17), data portability (Art. 20) and objection (Art. 21). You can trigger deletion and data export directly in the parent area under “Settings”. You also have the right to lodge a complaint with a supervisory authority.
7. Cookies
We only use technically necessary cookies (login session, active child profile, language setting) — no tracking, no advertising cookies.