Jatta

Privacy Policy

Last updated:

This Privacy Policy explains what personal data the Jatta app collects, why we need it, who we share it with and how you can control it. It applies to the Jatta mobile app for iOS and Android and to the website https://jatta.app. We have tried to keep it short and in plain language.

Who we are

Jatta is developed and operated by an independent developer based in the Republic of Kazakhstan (“Jatta”, “we”, “us”). Jatta is published on the App Store and Google Play under the developer’s individual account.

We are the owner and operator of the personal data described in this policy. For any privacy question or request, write to support@jatta.app.

Data we collect

We only collect the data we need to run Jatta. You give us some of it directly, and some is created as you use the app.

Account

  • Your email address and name.
  • Your profile photo, if you upload one or your Apple or Google account provides one.
  • Your Apple or Google account identifier.
  • Whether your email is an Apple private-relay address (“Hide My Email”).

We do not receive or store your Apple or Google password.

Learning profile

  • App language and the language you are learning.
  • Your level (CEFR), interests and learning goal.
  • Your daily-minutes goal.
  • Reminder settings: whether reminders are on, their time and days.
  • Your time zone.

Learning activity

  • Video watch history and progress, favorites, followed channels and recent searches.
  • Saved words and decks, words you mark as known.
  • Flashcard review results and timing, daily practice stats.
  • XP, streaks, achievements and level estimates.
  • Notification preferences, including whether you allow marketing notifications, and your in-app notification feed.

Devices

You can use Jatta on up to 5 devices per account. For each device we store:

  • A device identifier generated by the app.
  • Device name, platform, operating system and app version.
  • A push-notification token.
  • The last IP address and the time of last activity.

Sessions and security

  • Sign-in sessions. A session expires after 60 days of inactivity.
  • Refresh tokens, which we store only as hashes.
  • A log of sign-in and security events, including IP address and user agent.

Support messages

If you email us, we keep your message and our reply. The in-app contact form (Profile → Contact support) pre-fills your device model and OS version to help us solve the problem; you can see this before sending.

What we don’t do

  • We do not use analytics, advertising or crash-reporting SDKs in the app.
  • We do not track you across other companies’ apps or websites.
  • We do not sell your personal data.
  • We do not process payments. Jatta is currently free, with no in-app purchases and no ads.
  • The app does not record audio. It only plays audio and uses your device’s built-in text-to-speech.

How we use your data

We use your data to:

  • Provide your account and sync your learning progress across your devices.
  • Personalize video recommendations and estimate your level.
  • Send reminders and service notifications, such as streak reminders. We send marketing notifications only if you turn them on. You can turn notifications off at any time in Profile → Notifications in the app or in your device’s settings.
  • Keep Jatta secure, for example by enforcing the device limit and keeping sign-in logs to detect and prevent fraud and abuse.
  • Answer your support requests.

We process your data on the basis of your consent, which you give when you accept this policy at sign-in, and to perform our agreement with you under the Terms of Use. Where the law requires, we also process data to meet our legal obligations.

Service providers

We share data only with providers that help us run Jatta, and only as much as they need.

  • Apple — Sign in with Apple and Apple Push Notification service.
  • Google — Google Sign-In and Firebase Cloud Messaging for push notifications.
  • Cloudflare — network protection, content delivery and storage of profile photos.
  • Hetzner Online — servers, database and private file storage in Germany (EU).

We may also disclose data if the law requires it, for example at the lawful request of a competent authority.

YouTube videos

Jatta shows real YouTube videos using the YouTube embedded player and YouTube API Services. When you watch a video, YouTube and Google may collect data according to their own policies.

By using Jatta, you agree to be bound by the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy.

Jatta does not own these videos. All video content belongs to its creators.

Cross-border transfer

Our servers are located outside Kazakhstan, mainly in Germany (EU), and our providers use global infrastructure. This means your personal data is transferred across borders.

In line with the Law of the Republic of Kazakhstan “On Personal Data and Its Protection”, you give your consent to this cross-border transfer when you accept this policy at sign-in. We transfer data only to providers that protect it with appropriate safeguards, such as contractual obligations, encryption and access controls.

Jatta Keyboard

The same Jatta account (Jatta ID) can be used in Jatta Keyboard, a separate app by the same developer. If you use both, account deletion and restoration, as well as subscription status, are synchronized between them.

How long we keep data

We keep your data while your account is active. When you delete your account:

  • Your account is deactivated immediately and you are signed out on all devices.
  • You can restore it by signing in again within 30 days.
  • After 30 days, your account and associated data are permanently deleted: profile, devices, sessions, learning data, words, decks and history.

Some data is kept after that:

  • Security sign-in logs, with the link to you removed, for up to 12 months.
  • Data we must keep by law, for as long as the law requires.
  • Backups, which are overwritten on their normal cycle within 30 days.

Full details are on the Delete your Jatta account page.

Deleting your account

In the app: go to Profile → Account → Delete account. You can optionally tell us why you are leaving.

Without the app: email support@jatta.app from your account’s email address with the subject “Delete my account”. We will verify your request and process it within 30 days.

If you signed in with Apple, we also revoke Jatta’s access to your Apple account when the account is deleted.

Your rights

You have the right to:

  • Access your personal data and get a copy of it.
  • Correct inaccurate data.
  • Delete your data.
  • Withdraw your consent. This does not affect processing done before you withdraw it; without consent we may not be able to provide the service.
  • Object to processing.
  • Complain to the competent authority for personal data protection in the Republic of Kazakhstan.

You can export your saved words as an Anki file in Profile → Export to Anki. For a full copy of your personal data, or to use any other right, email support@jatta.app.

If you are in the EU/EEA, you also have the rights under the GDPR, including data portability, restriction of processing and the right to lodge a complaint with your local data protection authority.

Children

Jatta is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has given us data, contact us and we will delete it. If you are under 18, please use Jatta with the consent of a parent or guardian.

Security

We protect your data with encryption in transit (TLS), hashed tokens, encrypted Apple tokens and strict access controls. No system is 100% secure, but we work to keep your data safe and to respond quickly to any issue.

Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date. If the changes are material, we will also let you know in the app.

Contact us

Back to home