Foldque
Foldque is a platform for education, question archiving, review, and collaboration through features selected by users. This Privacy Policy explains how personal data is processed when you use Foldque, under applicable data protection laws, including TĆ¼rkiyeās Personal Data Protection Law No. 6698 (āKVKKā) for users in TĆ¼rkiye and the GDPR where applicable.
1. What Data Do We Process?
- Account and Profile Data: Email address, username, user identifier (user_id), selected profile avatar, and information relating to account or membership status.
- User Generated Content (UGC): Questions, solutions, images, drawings, explanations, messages, and similar content that you upload or create. Such content may directly or indirectly contain personal data relating to you or another person.
- Visibility and Interaction Information: Choices relating to personal, limited-sharing, or public use of content; interactions with teams or other features; saves, views, and similar usage events.
- Analytics and Usage Data: In-app interactions, viewed screens, used features, and event records used to understand Service performance. Where necessary, these may be processed together with account-linked identifiers.
- Technical and Device Data: IP address, operating system, device model, app version, error/performance data, and device or advertising identifiers that may be processed by SDKs used in the Service.
- Purchase and Subscription Data: Product identifier, subscription status, purchase-verification token, and limited information necessary to verify transactions. Foldque does not directly receive your bank or payment-card details.
2. Visibility of User Content
Who can see User Content depends on the feature you use and the visibility or sharing setting you choose. Some content may be visible only to you; some may be shared with selected users or team members; content that you expressly publish publicly may appear on Foldqueās public web pages.
Content you publish publicly may be crawled, cached, and indexed by search engines. If your username or other public profile information is displayed with that content, it may also become associated with the content. Before making content public, check that it does not contain unnecessary personal data about you or another person.
Foldque does not intend to make content marked personal or limited-access publicly available except as necessary to provide the Service, perform a sharing action you initiate, maintain security and moderation, or comply with legal obligations.
Question and solution images: A core function of Foldque is to save and store question and solution images. Accordingly, question/solution images, drawings, and explanations you upload may be stored and processed to provide the features you select. Please do not include unnecessary personal data in this content. Before uploading, crop, blur, or otherwise conceal full names, faces, contact details, addresses, student numbers, signatures, government identification numbers, health information, or other personal or sensitive information relating to you or another person. Users must not upload or share another personās personal data without an appropriate lawful basis or permission. This does not remove Foldqueās obligations under applicable data protection law.
3. Why Do We Process Data?
- To create accounts, authenticate users, and manage accounts.
- To provide Foldque features such as question archives, solutions, drawings, review, teams, sharing, test/PDF generation, or similar functionality.
- To apply the visibility and sharing choices you make.
- To send notifications and perform interactions initiated by users.
- To secure the Service and prevent or investigate spam, abuse, fraud, and rights violations.
- To diagnose errors, analyze performance, improve the product, and measure service quality.
- To verify purchases and subscriptions and enable related entitlements.
- To comply with legal obligations and manage claims or disputes.
4. Service Providers and Data Sharing
We may use third-party service providers to operate core parts of Foldque. These providers may process data necessary for their functions under their own agreements and applicable data protection requirements:
- Supabase: Database, user authentication, event logging, and file/image storage infrastructure.
- Google AdMob and UMP: Advertising and privacy/consent management. Even where non-personalized advertising is selected, technical data may be processed for ad delivery, frequency capping, security, and invalid-traffic detection.
- Firebase Cloud Messaging (FCM): Push notifications.
- Sentry: Error tracking, crash analysis, and performance monitoring.
- Google Play Billing: In-app purchase and subscription verification.
User Content may also be shared with other users or made publicly available as a natural result of the sharing or public-publication features you choose. Where legally required, information may be disclosed to competent public authorities or other parties to the extent required by a valid legal process.
5. Error Tracking and Security (Sentry)
We use Sentry to identify crashes, performance issues, and technical errors. Technical controls are applied to reduce or mask unnecessary personal or sensitive data in error logs. Technical logs may nevertheless include device state, app version, operating system, a stable user identifier (user_id), and limited system-generated error text.
6. Purchase and Subscription Records
Foldque may process limited information such as product identifiers, subscription status, and purchase-verification records for purchase verification, subscription management, entitlement, fraud prevention, and applicable financial or legal obligations. Payment-card or bank information is processed by payment providers such as Google Play and is not directly transmitted to Foldque.
7. Collection Methods and Legal Bases
Personal data may be collected automatically or partially automatically through app and web forms, content you upload, API calls, purchase verifications, device/app logs, cookies, or similar technologies. The applicable legal basis depends on the nature of the data, the userās location, and the specific processing activity.
| Data / Activity | Primary Purpose | Typical Legal Basis | Recipients / Processors |
|---|---|---|---|
| Account and profile | Registration, authentication, account management | Performance of a contract; legal obligation where applicable | Supabase |
| User Content | Store/process content and provide selected Foldque features | Performance of a contract; legitimate interests or other applicable bases depending on the activity | Supabase; users within the selected sharing scope |
| Publicly published content | Provide the public-publication feature selected by the user | Performance of a contract and other applicable bases consistent with the userās deliberate public disclosure, depending on applicable law | Internet users; search engines; infrastructure providers |
| Analytics and usage | Performance measurement and product improvement | Legitimate interests where permitted; consent where required | Supabase, Google, and relevant providers |
| Error and security records | Troubleshooting, security, abuse and fraud prevention | Legitimate interests; legal obligation; establishment, exercise, or defense of legal claims where applicable | Sentry and relevant infrastructure providers |
| Purchase / subscription | Verification and provision of membership features | Performance of a contract; legal obligation | Google Play |
This table is a general transparency summary. The legal basis for a particular processing activity depends on the specific activity and applicable law. Where consent is legally required, it will be requested separately; consent is not treated as a blanket prerequisite for processing that relies on another lawful basis.
8. Data Retention, Account Deletion, and Public Content
Data is retained for as long as reasonably necessary for the purposes for which it was collected and in accordance with applicable legal obligations. For details about account deletion and the status of content, see our Account and Data Deletion page.
If content was previously published publicly, search-engine or third-party caches and indexes may take time to update even after visibility on Foldque is removed. Foldque carries out applicable deletion or access-restriction actions within systems it controls.
Violation, security, fraud-prevention, intellectual-property notice, and dispute records may be retained for a limited period where reasonably necessary to comply with legal obligations or to establish, exercise, or defend legal claims.
9. International Data Transfers
Foldque uses global infrastructure and technology providers. Supabase, Google, Sentry, or other service providers may process or store data outside your country, including outside TĆ¼rkiye. Where personal data is transferred internationally, Foldque seeks to use transfer mechanisms and safeguards required by applicable data protection law.
10. Your Rights and How to Exercise Them
Depending on the law that applies to you, you may have rights to learn whether your personal data is processed, request information or access, learn the purposes of processing and recipients, request correction of inaccurate or incomplete data, request deletion or erasure where legal conditions are met, object to or restrict certain processing, and exercise other rights provided by applicable law. Users in TĆ¼rkiye may exercise the rights provided under Article 11 of the KVKK; users covered by the GDPR may have the rights provided by the GDPR, subject to applicable conditions and exceptions.
To submit a privacy request, contact privacy@foldque.com or support@foldque.com. We may request reasonable information to verify your identity and the account concerned. Requests are handled within applicable legal time limits.
11. Age Requirement
Foldque is designed for users aged 16 and older. Individuals under 16 should not create an account. If we become aware that an account or personal data relates to a person under 16, we may take appropriate action in accordance with applicable legal and security requirements.
12. Security
We apply reasonable technical and organizational measures designed to reduce the risk of unauthorized access, loss, misuse, or unlawful processing of personal data. No internet or storage system, however, can guarantee absolute security.
13. Changes to This Policy
We may update this Privacy Policy to reflect legal, technical, or product changes. Where a change materially affects user rights, we will provide notice through the app, website, email, or another appropriate method where required by applicable law.
14. Contact and Data Controller
Personal data is processed by Foldque as the data controller. For privacy questions or rights requests, contact privacy@foldque.com or support@foldque.com.