Privacy Notice

This notice explains how Effy handles personal data. Effy is the seller’s legal business name and, for the data described here, the data controller— we decide why and how it is processed.

Controller and contact details

The data controller is Effy, the seller’s legal business name. You can contact us at support@effy.app.

1. Data we collect and why

• Account data (name, email, login credentials or Google sign-in identifier) — to create and secure your account. Legal basis: performance of a contract.
• Profile data (handle, bio, goals, study hours, photos, city, district and approximate coordinates) — to run partner matching and show your profile to other members. Legal basis: contract performance; consent for precise location.
• Content data (tasks, sub-tasks, spaces, shared sessions, messages, AI prompts and outputs) — to deliver planning, co-working and messaging features. Legal basis: contract performance.
• Usage and device data (feature usage, partner request counts, device identifiers, IP address, logs) — for security, fraud and abuse prevention, and product improvement. Legal basis: legitimate interests.
• Support messages — to answer your questions. Legal basis: legitimate interests.
• Marketing emails, where you opt in. Legal basis: consent, withdrawable at any time.

Payment card details are collected and processed by our Merchant of Record, Paddle, not by Effy. We only receive subscription status and identifiers.

2. Who we share data with

• Service providers / subprocessors: cloud hosting, database and storage, AI model providers used for briefings, breakdowns and match scoring, analytics and support tooling.
• Paddle, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Other members, for the profile fields, shared spaces and messages you choose to share.
• Professional advisers (legal, accounting) and authorities where required by law.

We do not sell your personal data.

3. International transfers

Our providers may process data outside your country, including in the EEA, UK and United States. Where data leaves the UK/EEA we rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.

4. Retention

We keep account, profile and content data while your account is active. After deletion we remove or anonymise it within 30 days, except records we must keep for legal, tax or fraud-prevention reasons (typically up to 10 years for invoices).

5. Your rights

Depending on where you live, you may request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent at any time. We respond within one month. You can also complain to your local data protection authority (in Türkiye, the KVKK Authority). Contact us at support@effy.app.

6. Security

We use appropriate technical and organisational measures: encryption in transit and at rest, row-level access controls so members only see data they are entitled to, private photo storage with expiring signed links, and least-privilege access for staff.

7. Cookies

We use essential cookies and local storage for sign-in sessions, theme preference and security. Analytics cookies, where used, help us understand feature usage; checkout may set cookies from Paddle. You can manage or clear cookies in your browser settings; blocking essential cookies will break sign-in.