Gecko privacy policy

 Gecko Privacy Policy

Effective Date: October 7, 2026

Last Updated: October 7, 2026

1. INTRODUCTION

Welcome to Gecko ("we," "our," or "us"). Gecko is a mobile application that helps you learn new languages (the "App"). We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use and share it, and what rights you have, including under the EU General Data Protection Regulation ("GDPR").

The App is operated by Fabian-Remus Plavat, based in Romania, who is the data controller for the information described in this Policy.

By using Gecko, you acknowledge the practices described in this Privacy Policy. If you do not agree, please discontinue use of the App.

2. INFORMATION WE COLLECT

Gecko does not require you to create an account, and we do not ask for your name, email address, phone number, or physical address. We do not access your microphone, contacts, photos, or precise location.

2.1 Information Collected Automatically

When you use the App, we and our third-party service providers may automatically collect:

- Identifiers: an anonymous user ID assigned by the App or by our service providers, and device identifiers, including your device's advertising identifier (IDFA) where you allow tracking, or other device-level identifiers.

- Purchase information: your subscription and purchase history in the App, such as which plan you purchased, trial status, and renewal or cancellation events. We do not receive or store your payment card details.

- Usage data: how you interact with the App, such as app launches, lessons started and completed, features used, and paywall views.

- Approximate location: a general location (such as country or city) derived from your IP address. We do not collect precise GPS location.

- Diagnostics: crash reports and performance data, such as launch time and responsiveness, used to find and fix problems.

2.2 Learning Progress

Your lesson progress and settings are stored on your device. Because the App does not use accounts, deleting the App may remove this progress from your device.

2.3 Information You Send Us

If you contact us for support, we receive your email address and the contents of your message so that we can respond.

3. HOW WE USE YOUR INFORMATION

We use the information described above to:

- Provide and operate the App, including unlocking premium features and managing your subscription;

- Understand how the App is used so we can improve lessons and features;

- Detect, diagnose, and fix crashes and performance problems;

- Measure the performance of our own advertising campaigns and understand how new users found the App; and

- Respond to your support requests and comply with legal obligations.

We do not use your information to make decisions that have legal effects on you.

4. LEGAL BASIS FOR PROCESSING

Where the GDPR applies, we rely on the following legal bases:

- Contract: to provide the App's features and process your subscription.

- Consent: for tracking and the sharing of device identifiers and events with advertising platforms (see Section 5). You can decline or withdraw consent at any time in your device settings.

- Legitimate interests: to understand aggregate usage, improve the App, and keep it secure and stable.

- Legal obligation: to comply with applicable law, such as tax and accounting requirements.

5. ADVERTISING, ATTRIBUTION, AND TRACKING

The Gecko App itself does not display third-party advertisements to you.

We do advertise Gecko on other platforms, and we use the Meta and TikTok SDKs to measure our own marketing. These SDKs may receive your device identifiers (including your advertising identifier where you allow tracking), your approximate location derived from your IP address, install information, purchase and subscription events, and in-app events such as lessons completed and paywall views. The platforms use this information to attribute installs and conversions to our campaigns, measure and optimize our advertising, and, in accordance with their own privacy policies, for their own purposes.

This sharing is considered "tracking" under Apple's rules. On iOS, we will ask for your permission through Apple's App Tracking Transparency prompt before enabling it. If you decline, we will not use your advertising identifier for tracking. You can change your choice at any time in your device settings:

- iOS: Settings > Privacy & Security > Tracking.

- Android: Settings > Privacy > Ads, where you can delete or reset your advertising ID.

We do not sell your personal information for money. Under some laws, such as those of California, sharing information with advertising platforms for the purposes above may be considered "sharing" for cross-context behavioral advertising. You can opt out using the device settings above or by emailing us at the address in Section 14.

Meta's privacy policy is available at https://www.facebook.com/privacy/policy and TikTok's at https://www.tiktok.com/legal/privacy-policy.

6. SERVICE PROVIDERS AND THIRD-PARTY SDKS

We use trusted third-party providers that process information on our behalf or for their own stated purposes:

- Firebase (Google): analytics, crash reporting, and performance monitoring.

- PostHog: product analytics to understand how the App is used.

- RevenueCat: subscription and purchase management.

- Superwall: paywall presentation and paywall analytics.

- Meta and TikTok: advertising attribution and measurement (see Section 5).

- Apple App Store and Google Play: payment processing and subscription billing.

These providers are bound by their own privacy policies and, where they act as our processors, by data protection agreements with us.

7. SHARING YOUR INFORMATION

We do not sell, trade, or rent your personal information. We share it only:

- With the service providers listed in Section 6;

- If required by law, court order, or governmental authority; and

- In the event of a merger, acquisition, or sale of assets, in which case your information may be transferred and we will notify you of any such change.

8. INTERNATIONAL DATA TRANSFERS

Our service providers may process information in countries outside your country of residence, including outside the European Economic Area (EEA), such as the United States. Where we transfer personal data from the EEA to a country that has not been recognized by the European Commission as providing an adequate level of protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-U.S. Data Privacy Framework. You may request further information about these safeguards by contacting us at the email address in Section 14.

9. DATA RETENTION

We keep analytics, purchase, and diagnostic information only as long as needed for the purposes described in this Policy, or as required by law (for example, tax and accounting records). You can request deletion of your data at any time by contacting us (see Section 10). We will delete or anonymize the data we control within 90 days of a verified request, and will ask our service providers to do the same, except where we are required to retain certain data to comply with legal, tax, or accounting obligations or to resolve disputes.

Because Gecko does not use accounts, we may ask you for information that helps us locate your data, such as the device identifier or the details of your purchase.

10. YOUR RIGHTS

If the GDPR applies to you, you have the right to:

- Access: request a copy of the personal data we hold about you;

- Correction: request correction of inaccurate or incomplete data;

- Deletion: request deletion of your personal data;

- Portability: request your data in a portable format;

- Objection and restriction: object to, or request restriction of, certain processing;

- Withdraw consent: withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal; and

- Complain: lodge a complaint with your local data protection supervisory authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), https://www.dataprotection.ro.

Residents of other jurisdictions, such as California and other US states, may have similar rights under applicable local law, including the right to know, delete, and correct personal information and to opt out of sharing for targeted advertising. To exercise any of these rights, contact us at the email address in Section 14. We will not discriminate against you for exercising your rights.

11. CHILDREN'S PRIVACY

Gecko is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16, or under such other minimum age as required by the law of your country of residence. If we become aware that a child under the applicable minimum age has provided us with personal data, we will take steps to delete it promptly. If you believe a child has used the App, please contact us.

12. DATA SECURITY

We use industry-standard technical and organizational measures to protect your information against unauthorized access, loss, or misuse. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this document and, where required by law, notify you through the App. Your continued use of the App after changes are posted means you accept the updated policy.

14. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy, including exercising your data protection rights, please contact us at:

Gecko Support

Fabian-Remus Plavat

Romania

Email: plavatfabian@gmail.com

(c) 2026 Gecko. All rights reserved.