Privacy Policy

Last updated: 2026-11-06

Who we are

Doodlo is an app of short video lessons. It is provided by Enes Kirca (“we”, “us”), who is responsible for your information. This policy explains what Doodlo collects, why, who it is shared with, and the choices you have.

What we collect

• Account: when you sign in with Apple, an identifier from Apple and, if you choose to share them, your email address (which may be Apple’s private relay address) and your name. We also keep a token from Apple, stored encrypted, so we can ask Apple to revoke Doodlo’s access when you delete your account, and the type of device and system version you signed in on.
• Profile and preferences: your username and mascot avatar, language, time zone, the age range and education stage you tell us, your interests and other onboarding answers, your reminder time and your weekly review day. We do not ask for your date of birth, gender or photos.
• What you create and do: the topics and questions you ask to create lessons and the lessons made from them, lessons you publish, likes, “not interested” choices, reports and blocks, quiz answers, review cards and your review history, streaks, badges and titles.
• Friends and challenges: your friends and friend requests, weekly league points and results, invitations (who invited whom), and challenges with their scores. When a challenge is played on the web, we keep only how many times it was tried and the best score, not the answers.
• Usage: which lessons were shown to you, how long you watched and whether you finished; and, without linking it to your account, which onboarding steps were completed on your device.
• Notifications: if you allow them, a push token for your device.
• Purchases: whether you have Doodlo Pro and its period, which we learn from Apple through RevenueCat. Apple handles payment; we never see your card details.
• Technical: IP addresses and the addresses of the requests the app makes (which can include what you search for), which our web server records in its access logs to run Doodlo and protect it against abuse; and error and crash reports (what went wrong, the app screens and requests just before it, device and app details, and your account id) that go to an error tracker we run on our own server.

How we use it

• To run Doodlo for you: create your lessons, build your feed and search, schedule reviews and reminders, and keep your streak, badges, friends, league and challenges.
• To keep Doodlo safe: check lessons before they are published, handle reports, enforce blocks and prevent abuse.
• To provide Doodlo Pro and the lesson credits that come with it.
• To understand what works and improve Doodlo.

We use your information to provide Doodlo under our Terms of Use (contract), to keep it safe and improve it (our legitimate interests), to send you notifications with your permission (consent), to measure our ads (consent if you allow tracking, otherwise our legitimate interest in knowing which ads work), and where the law requires it.

We do not sell your information and we do not show ads inside Doodlo. We use your advertising identifier only if you allow tracking, as described in the next section.

Our ads and how we measure them

We advertise Doodlo on Meta’s platforms (Facebook and Instagram). To learn which ads bring people to Doodlo, the app asks you from version 1.3 on whether you allow tracking, if you are 18 or older.

• If you allow it: Meta’s SDK starts. Meta receives that the app was opened and that you finished the onboarding, with your device’s advertising identifier (IDFA), an anonymous app id and device and app details such as the model and system version. RevenueCat collects your device’s identifiers and IP address and sends Meta your free trials and subscriptions with them. This lets Meta match your use of Doodlo with the ads you saw on its platforms.
• If you do not allow it: Meta’s SDK still starts, without your advertising identifier (IDFA). Meta receives that the app was opened and that you finished the onboarding, with an anonymous app id and device and app details such as the model and system version; requests to Meta also carry your IP address. RevenueCat sends Meta your free trials and subscriptions with that anonymous app id. We use this to measure our ads. Saying no does not stop it.
• If you are 13 to 17, or we do not know your age: the app does not ask, does not start Meta’s SDK and does not give RevenueCat anything for Meta.
• Apple’s own ad attribution (SKAdNetwork) can also count an install from an ad, without identifying you.
• We do not send Meta your name, your email address, your questions and lessons, or your onboarding answers.

You can change your answer at any time in iOS Settings → Privacy & Security → Tracking; this decides whether your advertising identifier is used. Meta handles what it receives under its own privacy policy: https://www.facebook.com/privacy/policy

Lessons made with AI

Lessons are created with AI. The topic or question you write, any style description you add, and your age range and education stage (so the lesson fits your level) are sent to Anthropic, which writes and checks the lesson; ElevenLabs turns its narration into speech. Before a lesson is published, an automatic check by Anthropic reviews its content. To pick your first lessons, your onboarding answers (your interests, goals, what you find hard, the styles you like, your daily goal, your education stage and what you wrote about your curiosity) are sent to Anthropic. To find lessons that match what you search for, the text of lessons and what you type in search are sent to OpenAI. We do not send your name, email address or account id with any of this.

Please do not put personal information in anything you write in Doodlo, such as your questions, searches, style descriptions or your curiosity answer.

Who can see what

• Your lessons are not shown to anyone else unless you publish them. A published lesson is visible to everyone, with your username and avatar, and can be shared by link. You can unpublish it at any time; people who added it to their memory keep its quiz questions until you delete the lesson.
• If you are 18 or older, other Doodlo users can open your profile, which shows your username, avatar, published lessons and their total views.
• Your title, badges and streak are visible to your friends. Your weekly league points are visible to your friends unless you hide them.
• When you answer someone’s challenge in the app, they see your score. If you are 18 or older, they also see your username and, if you are not friends yet, get a friend request from you.
• If you are 13 to 17, you cannot publish lessons or have a public profile.
• Invite and challenge pages opened from a shared link do not show your name or username.

Service providers

We share information with providers that run parts of Doodlo for us:

• Apple: Sign in with Apple, App Store purchases and delivering notifications.
• Expo (650 Industries): sending notifications to your device; it receives your device’s push token and the notification’s text.
• RevenueCat: keeping track of your subscription; it receives your account id and your purchases from Apple, and passes data to Meta as described above.
• Meta Platforms: measuring our ads, as described above.
• Anthropic: writing and checking lessons and picking your first lessons, as described above.
• ElevenLabs: turning lesson narration into speech.
• OpenAI: turning lesson texts and what you type in search into meaning vectors, to find related lessons.
• Cloudflare: storing and delivering lesson videos and images, and keeping our database backups (in Europe).
• Hetzner Online: hosting our servers and database in the European Union.

Some of these providers are in the United States, so your information may be processed outside your country. We may also disclose information when the law requires it.

How long we keep it

• We keep your information while your account exists. Watch history and league point records are deleted after 90 days.
• When you delete your account (Profile → Settings → Delete account), we delete your account and the information linked to it, including your published lessons and their statistics, delete your subscription record at RevenueCat, and ask Apple to revoke Doodlo’s Sign in with Apple access. Lesson videos and images are removed from storage shortly afterwards, and copies left in our database backups and in temporary working files on our servers are deleted within 30 days. Deleting your account does not cancel a subscription; cancel it in your Apple Account settings. What Meta has already received stays under Meta’s privacy policy.
• Our web server’s access logs, which include IP addresses and request addresses, are deleted after 14 days.
• Records of IP addresses kept to limit abuse are deleted within 48 hours.

Your rights

Depending on where you live (for example under the GDPR in the European Union or KVKK in Türkiye), you can ask to access, correct or delete your information, to receive a copy of it, and to object to or restrict some uses. You can delete your account at any time in the app. For anything else, contact us: support@doodlo.app. You also have the right to complain to your data protection authority.

Children

Doodlo is not for children under 13. If we learn that a child under 13 has an account, we delete it. If you believe this has happened, contact us: support@doodlo.app.

Security

Information travels encrypted (HTTPS). Apple tokens are stored encrypted, sign-in sessions are stored only as hashes, and access to our systems is limited. No system is perfectly secure, but we work to protect your information.

Changes and contact

If we change this policy, we will post the new version here and update the date above, and tell you in the app when the change is significant.

Contact: support@doodlo.app