Privacy Policy

At a glance

• NetLev is for students aged 13 and over (14 and over in South Korea).
• Your private and group chats and your mistake notebook live on your device. Our servers only pass chat messages along and delete them once they are delivered.
• We do not show ads inside NetLev and we do not use your study data for advertising.
• If you have any question about your data, write to support@naolev.com.

Who we are and what this policy covers

NetLev is provided by NAOLEV TEKNOLOJİ TİCARET LİMİTED ŞİRKETİ, a company registered in Türkiye, at Turgut Özal Mah. Tonguç Baba Cad. Kiptaş Konutları C2 Blok No: 17 C İç Kapı No: 3, Esenyurt, İstanbul, Türkiye ("NaoLev", "we", "us"). We decide why and how your personal data is used, so we are the "controller" of it. You can reach us at support@naolev.com.

This policy covers NetLev accounts for the SAT, the ACT, language exams, other exams and school or university courses, wherever you created them. NetLev accounts for the Turkish exams YKS, LGS and KPSS and teacher, parent and institution accounts follow our Turkish privacy policy at naolev.com/privacy.html.

What we collect

Your account

• Email address and password. Your password is stored by our sign-in provider in a protected, hashed form; we cannot see it.
• If you sign in with Apple or Google: the email address and name that Apple or Google shares with us. If you choose Apple's "Hide My Email", we receive a relay address instead.
• Display name, username, and, if you add them, a profile photo and a short "about" text.
• Your app language, your device's time zone and whether you signed up through the Türkiye app store or another store. We read the store's country on your device only to make this choice; we do not store the country itself.
• Your settings, for example notification preferences, who can see your profile photo and whether friend requests are declined automatically.

Your age

When you sign up, we ask for your birth month and year, never your full date of birth. We use them to check that you are old enough to use NetLev, and we store them with your account so we can show that we checked. If you are too young, we do not create an account and we do not keep what you entered.

Where the law requires it, for example in some US states, we also ask Apple or Google for the age range linked to your store account, and they may show you a screen asking whether to share it. We receive only the range, never your date of birth or any ID, and we keep only the result of the check on your device. If the store says you are below the minimum age, we do not create an account. If it says you are a minor, or you choose not to share, we apply the rules described in Children and teens.

Your study data

• The study track you chose (for example SAT, ACT, a language exam, another exam or school courses) and your plan for it, such as your target score, your exam date and your latest score.
• Study sessions and reviews you log: date, duration, number of questions, the resource you used and an optional note.
• Practice and official test results you enter, with section scores and an optional note.
• Your resources and your progress in them, including the names of resources you add yourself.
• Goals, to-dos, timers and timed study sessions, including group study sessions.
• Net-Leveling progress: XP, NL points, streak, rank, rank history for the last 10 active days, and daily totals of questions, minutes and tests.

Chats and community

• Messages, photos, files and reactions you send in public chat rooms, group chats and private chats.
• Friend requests, your friends list and the people you block.
• Reports you send or receive: who reported whom, the category, the description and the reported content.
• Ideas you send through the announcements suggestion box, with your account type, store and app language, and your answers to announcement polls.
• Records created by our safety tools, for example how many times the automatic filter stopped a message and until when you cannot post in public chat rooms (see Automated safety checks).

Data that stays on your device

• Private and group chat history is stored in an encrypted database on your phone or tablet, protected by a key kept in your device's secure storage. If you delete the app or lose your device, this history cannot be recovered.
• Mistake notebook and quick-review answers are stored only on your device. If you turn on backup, a copy is saved in your own iCloud Drive or in a hidden app folder of your own Google Drive. We cannot open these backups.
• Answer choices in question photos are read on your device with Apple Vision or Google ML Kit. The photo does not leave your device for this. On Android, Google ML Kit may send Google technical diagnostics, such as device type, feature version and error codes, but never the photo or the text it read.
• App restriction settings are stored on your device. A copy of the restriction type, schedule and the names of the Android apps you chose is kept with your account so it can be restored. On iPhone, the apps you pick stay with Apple's Screen Time and are not sent to us.

Purchases

You pay through the App Store or Google Play. We never see your card or bank details. We and our subscription service RevenueCat receive the product, the price, the currency, the store, the purchase and renewal dates, trial status, cancellations and refunds, linked to your account ID.

Device and technical data

• IP address, device model, operating system, app version and language, sent automatically when the app talks to our servers.
• A push notification token for your device, and the notifications we send you inside the app.
• Security checks from Apple App Attest or DeviceCheck and Google Play Integrity, which confirm that requests come from the real NetLev app.
• Short-lived counters that stop abuse, for example how many times an IP address or account tried a sign-up step in a day.

We do not collect your precise or approximate location, your contacts or your browsing history, and we do not use analytics or crash-reporting SDKs.

Advertising measurement

We advertise NetLev on Meta platforms (Facebook and Instagram). To learn which ads lead adults to install NetLev and subscribe, we use the Meta App Events SDK, and RevenueCat can pass purchase events to Meta. This starts only after you sign up, and only if all of these are true:

• you are 18 or older;
• you did not sign up in South Korea;
• on iPhone and iPad, you allowed tracking in Apple's "Allow apps to track" prompt;
• "Ad measurement" is on in Profile settings › Privacy & security. It is on by default for adults, except for accounts created through the Türkiye app store, where it stays off unless you turn it on.

When it is on, Meta receives app events (such as app opens, sign-up and purchases with their amount and currency), your device's advertising identifier, an anonymous Meta ID, your account ID, and technical data such as IP address and device model. We never send Meta your study data, chats, name or email. If you are under 18, signed up in South Korea or turned it off, nothing is sent. If you downloaded NetLev from the Türkiye app store, the app may send Meta an app-open event the first time you open it, before you create an account; our Turkish privacy policy explains this.

Separately, on iPhone and iPad the app tells Apple once, the first time you open it, that it was installed. This uses Apple's SKAdNetwork: if you installed NetLev from an ad, Apple may later tell that ad network, in aggregate and with a delay, that the ad led to an install, without any information that identifies you or your device. We do not receive or send any personal data for this, and it does not need your tracking permission.

What other people can see

NetLev is a community, so some information is visible to other students by design:

• Your profile: display name, username, "about" text, account type, rank and profile frame, and your photo if your photo setting allows it. For SAT accounts, your target score and exam date (not your latest score). Your study totals for today (questions, minutes and tests).
• World Ranking: the top 200 students are listed for everyone in the app with display name, photo (if your photo setting allows it), rank, XP and streak. If you are not in the top 200, only you see your own position.
• Chats: messages you post in a public chat room are visible to everyone in that room. Group and private messages are visible to the people in that chat.
• Group study rooms: while you are in a room, other signed-in students see your display name, username and photo (if your photo setting allows it).

Please do not share personal details such as your address, phone number or school name in public places.

Why we use your data and our legal bases

When we rely on legitimate interests, we have weighed them against your rights. You can object at any time (see Your rights).

Automated safety checks

Before a message is sent in a public chat room, the app checks it on your device against a list of abusive words in 7 languages. If it matches, the message is not sent and the matching part is highlighted so you can edit it. If you keep trying, posting in public chat rooms is paused for a short time that grows with repeated attempts, from 1 minute up to 24 hours. You can still read chats and react, and private and group chats are not affected.

The filter does not decide anything about your account beyond these short pauses. Suspensions and bans are decided by people on our moderation team. If you think the filter or a moderator got it wrong, write to support@naolev.com and a person will review it.

Who we share data with

We do not sell your personal data. We share it only with:

Google, RevenueCat, Resend and Cloudflare act on our instructions. Apple, Google (as store operators) and Meta also use data under their own privacy policies. If NaoLev is ever merged or sold, your data may move to the new owner, who must keep honouring this policy.

International transfers

NaoLev is based in Türkiye, our main servers are in the European Union, and some of our service providers are in the United States and other countries. So your data may be processed outside your country. When we transfer data, we use the safeguards the law requires, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework for EEA data, the UK addendum for UK data, and the standard contracts set by Türkiye's Personal Data Protection Authority for data sent abroad from Türkiye. You can ask us for details at support@naolev.com.

How long we keep data

What happens when you delete your account

You can delete your account in the app: open the Profile tab, tap Menu, then choose My account › Delete account. If you cannot use the app, follow the steps at naolev.com/legal/en/delete-account.html.

When you delete your account we erase your profile, photo, study data, goals, to-dos, Net-Leveling progress, friends, chat memberships, notifications and suggestion box entries, and your login. On the device you use, the app also erases your chat history and your mistake notebook, including its iCloud or Google Drive backup if it is reachable. Messages you already posted in public rooms stay there until they reach the room's retention limit, and the app no longer shows your name or photo next to them. We keep only what the law or safety requires, as listed in How long we keep data. Deleting your account does not cancel a subscription; cancel it in the App Store or Google Play first.

Your rights

Depending on where you live, you can ask us to:

• tell you what data we have about you and give you a copy;
• correct data that is wrong;
• delete your data;
• restrict or object to how we use it;
• give your data to you or another service in a portable format;
• withdraw a consent you gave, at any time, without affecting what we did before.

Most of your data can be viewed, changed or deleted directly in the app. For anything else, email support@naolev.com from the address linked to your account. We may ask you to confirm your identity. We answer within the time your local law sets: for example 10 days in South Korea, 15 days in Brazil, 30 days in Türkiye and 1 month in the EEA and UK. Exercising your rights is free.

Information for specific regions

European Economic Area, Switzerland and the United Kingdom

NetLev is not currently offered through the App Store or Google Play in the European Economic Area or the United Kingdom. If you use it there, the legal bases in Why we use your data are those of Article 6 of the GDPR and the UK GDPR: we rely on legitimate interests for safety, moderation and keeping chat connection records, and ad measurement stays off unless you turn it on. You can complain to the data protection authority where you live or work. In the UK, that is the Information Commissioner's Office, and you can first raise a complaint with us at support@naolev.com.

United States

In the last 12 months, we collected these categories of personal information: identifiers, customer records, commercial information (purchases), internet or other electronic activity (app interactions), audio-visual information (photos you upload), and inferences such as your rank. We collected them from you, your device and the app stores, for the purposes described above. We do not sell personal information. We do not "share" personal information for cross-context behavioral advertising of anyone under 18. For adults, Meta ad measurement can count as "sharing" under some state laws: you can turn it off any time with "Ad measurement" in Profile settings › Privacy & security or by not allowing tracking on iPhone. Residents of California and other states with privacy laws can use the rights in Your rights, appoint an authorized agent, and appeal a refusal by replying to our answer. We will not treat you differently for using your rights.

Brazil

NetLev is not currently offered through the App Store or Google Play in Brazil. If you use it there, we process your data under the Brazilian General Data Protection Law (LGPD), on the legal bases above (contract, legitimate interest, legal obligation and consent). You can contact our data protection channel at support@naolev.com and complain to the National Data Protection Authority (ANPD). Data of adolescents is processed in their best interest, and we never use it for advertising.

South Korea

• Minimum age: NetLev accounts are not available to people under 14 who sign up in South Korea, so we do not need a legal guardian's consent.
• Privacy officer: NaoLev Data Protection Team, support@naolev.com.
• Destruction: when data is no longer needed, we delete electronic files permanently so they cannot be restored.
• Transfers abroad: to provide NetLev, the data in What we collect is sent over encrypted connections, when you use the app, to the recipients in Who we share data with: Google (European Union and United States), RevenueCat (United States), Resend (United States) and Cloudflare (global network). They keep it for the periods in How long we keep data. These transfers are needed to run the service; if you do not want them, you can stop using NetLev and delete your account. Ad measurement is not used for accounts created in South Korea.
• You can complain to the Personal Information Protection Commission or the Korea Internet & Security Agency.

Türkiye

NaoLev is the data controller under Turkish Personal Data Protection Law No. 6698 (KVKK). Under Article 11, you may learn whether your data is processed, request information, learn the purpose, know the recipients in Türkiye and abroad, request correction or deletion, object to results of solely automated analysis and claim compensation for unlawful processing. Send your request in writing or from your registered email to support@naolev.com; we reply within 30 days. If you are not satisfied, you can complain to the Personal Data Protection Board. Accounts created through the Türkiye app store can also read our Turkish KVKK notice at naolev.com/legal/tr/kvkk.html.

Canada and Australia

You can contact our person responsible for privacy, the NaoLev Data Protection Team, at support@naolev.com. Your data may be processed outside your country, as explained in International transfers, and may be accessible to authorities there. You can complain to the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec or the Office of the Australian Information Commissioner.

Children and teens

NetLev is for students aged 13 and over, and 14 and over in South Korea. When you sign up, we ask for your birth month and year without suggesting an answer. If you are too young, we do not create an account, we do not keep what you entered, and the device cannot try again for 24 hours. If we learn that an account belongs to someone under the minimum age, we delete it. Parents and guardians can contact us at support@naolev.com.

If you are under 18: your study data is never used for advertising, ad measurement is always off for you, and only people you have accepted as friends can message you privately or add you to a group. If someone makes you uncomfortable, block and report them, and talk to an adult you trust.

Notifications and emails

We send push notifications about your study, chats and account, and only if you allow them on your device. You can choose which ones you receive in Profile settings › Notifications. We send emails only for your account: verifying your address, changing your email, resetting your password and warning you before an inactive account is deleted. We do not send marketing emails.

How we protect your data

We use encrypted connections, access rules that only let you and authorised systems reach your private data, app integrity checks, encrypted storage of chat history on your device, and limited, logged staff access. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Changes to this policy

We update this policy when NetLev or the law changes. The effective date is at the top. If a change matters to you, we tell you in the app before it takes effect. Each language version says the same thing; if they ever differ, the version in your app's language applies to you, and for accounts created through the Türkiye app store the Turkish version applies.

Contact

NAOLEV TEKNOLOJİ TİCARET LİMİTED ŞİRKETİ, Turgut Özal Mah. Tonguç Baba Cad. Kiptaş Konutları C2 Blok No: 17 C İç Kapı No: 3, Esenyurt, İstanbul, Türkiye. Email: support@naolev.com.