Privacy Policy

Vickie: Learn to Code

Last updated: 6 October 2026

This policy explains what data the Vickie: Learn to Code mobile app (the “App”) and the vickie.app website collect, what we use it for and who we share it with.

Who Vickie is for

Vickie is a learning app for a general audience. It is not directed to children under 13. If you are under 18, use the App with the permission of your parent or guardian.

Data we collect

• Account details. If you sign up with email, we store your name, your email address and a one-way hash of your password. If you sign in with Apple or Google, we receive the name, email address and account identifier that service shares with us. Your display name, which you can change in Settings, is shown on the leaderboard and to your friends.
• Use without an account. You may be able to try the App without creating an account. You are then given a random identifier; your progress is kept under it and can be reached from that device only, and we receive no name or email address. When you create an account, that identifier becomes your account and your progress stays where it is. A record used without an account is closed after 30 days without any use: its session, the push token of its device and its time zone are deleted, and the learning records stay separated from anything that identifies a person, as with account deletion.
• Learning data. The courses you are enrolled in, the lessons you complete, the number of mistakes in a lesson, the time it took and, if you leave a lesson unfinished, the step you left at; your XP, streak, hearts, coins, league, quests, badges and Tower results; the look of your character and what you buy in the in-app shop.
• Onboarding answers. Your answers to the questions we ask on first launch, such as your learning goal, experience level, area of interest and daily goal.
• Friends. Your friend code, your friends list and your friend requests.
• The code you write. Code you write in coding exercises is sent to our own code-running server so that it can be run and its result shown. It is sent there without being linked to your account and kept there for at most 30 days; in our database we keep only the time of the run, the programming language and the outcome.
• Device and session data. Your operating system, app version, language, time zone, time of last use and the push token of your device, which is needed to send notifications. To keep your sign-in secure, your IP address and device information are kept in the session records.
• Usage and error data. Events about how you use the App (for example starting, finishing or leaving a lesson, opening the subscription screen) and crash reports. These are collected with Google’s Firebase Analytics and Crashlytics. Those services also process the device model, the operating system version, an approximate location derived from your IP address and the installation identifier of the app. We do not add your name, your email address or your account number to analytics events.
• Ad measurement. We promote Vickie with Google Ads and measure how many people those ads bring to the App. For this, Firebase Analytics passes the install, some steps in the App (for example finishing a second lesson) and, through RevenueCat, purchases with their amounts to Google Ads, together with the device’s advertising ID. On Android measurement is on by default; on iOS it happens only if you allow tracking across apps. If you do not, Apple’s identifier-free measurement (SKAdNetwork) still works. This information is not used to show you personalised ads. You can turn measurement off with the “Ad measurement” switch in the App’s Settings. On Android you can reset or delete your advertising ID in the device settings; on iOS you can withdraw the permission under Settings > Privacy & Security > Tracking.
• Purchases. If you buy a Premium subscription or a coin pack, the App Store or Google Play processes the payment; we never see your card details. We use RevenueCat to keep track of your subscription. It processes your account number, the product you bought, its date and price, your store country and the store’s transaction identifiers.
• Ads. The App only has rewarded ads that you choose to start (for example to earn a heart or coins). They are served by Google AdMob and are not personalised: they are not selected from your interests or history, and that stays so on iOS even if you allow tracking. Google still processes data such as the IP address and device identifiers to serve the ad, limit how often it is shown and prevent fraud. We record in our own database which ad was shown when and whether the reward was given.
• Website visits. Visits to vickie.app are measured with Google Analytics. It uses cookies and processes technical information about your browser, an approximate location derived from your IP address and the link you arrived from.
• Support messages. When you write to us, we keep your email address and your message so that we can answer.

We do not collect location (GPS), contacts, photos, camera or microphone data, and we do not ask for special categories of data such as health data or identity numbers.

What we use the data for

• To give you the lessons, your progress, your streak, your league and your friends
• To manage and secure your account and to send account emails (verification, password reset)
• To run the code you write and show you its result
• To send reminder notifications if you allowed them (such as a streak reminder or a league result). You can turn notifications off on the App’s Settings screen or in your device settings.
• To process subscriptions and purchases
• To measure and improve the App: which lessons are completed, where learners struggle, and errors
• To show ads and to measure the results of our own promotion (for example which ad or link an install came from)
• To prevent abuse and to meet our legal obligations

We do this because it is needed to provide the service to you (performance of a contract), to keep the App secure, to improve it and, on Android, to measure our ads (legitimate interest), on the basis of your permission where permission is asked, such as notifications and ad measurement on iOS, and to meet our legal obligations. You can withdraw a permission at any time.

We do not sell your data. We do not use your data to show you personalised ads and do not share it with anyone for that purpose.

What other users see

Your name, your character and game details such as your XP, streak, number of completed lessons and rank are shown to other users in the league table, the Tower ranking and friends lists. Your email address is never shown or sent to another user. When you sign up with email you do not have to enter your real name in the name field.

Service providers

Your data is processed on our behalf by the services we use to run the App:

• Supabase: database, accounts and sessions
• Google Firebase (Analytics, Crashlytics) and Google Analytics: usage measurement and crash reports
• Google Ads: measuring our own ad campaigns
• Google AdMob: serving ads
• RevenueCat, the Apple App Store and Google Play: subscriptions and purchases
• Expo together with Apple’s and Google’s push services: delivering notifications to your device
• Sign in with Apple and Google: authentication, if you sign in that way
• The infrastructure provider that hosts our code-running server

Some of these services process data on servers outside Türkiye and outside your own country. Apart from them, we share your data only when the law requires it.

Children

Vickie is not directed to children under 13 and we do not knowingly collect personal data from them. If we learn that a child under 13 has created an account, we delete the account and its data. If you are a parent or guardian and believe your child has given us data, write to [email protected].

How long we keep data

• We keep your account and learning data for as long as your account exists.
• Sign-in records (sign-ins, sign-outs and session renewals; they contain your email address and sometimes your IP address) are kept for 90 days.
• Analytics records tied to an installation of the app are kept in Google Analytics for at most 14 months, and crash reports in Crashlytics for 90 days. Aggregate statistics that are not tied to a person may be kept longer.
• We keep purchase records for accounting and disputes for the periods the law requires.

Deleting your account and data

You can delete your account inside the App: Profile, Settings, then Permanently delete account at the bottom of the page. If you use the App without an account, the link in the same place deletes your progress and data. If you cannot open the App, write to [email protected] from the email address of your account. All the steps are on the Data Deletion page.

When you delete your account:

• Your name, email address, password, your Apple or Google sign-in link and your session records (including the IP address) are deleted.
• Your friend code, friendships, league entry, the look of your character, your device’s push token, your time zone and the records of notifications sent to you are deleted. No further notification is sent to you.
• The account can never be signed in to again; your progress, XP, streak and coins cannot be restored.
• Lesson and usage statistics (such as completed lessons and onboarding answers) are kept, separated from everything that identifies you. You cannot be reached through these records.
• Purchase records, and analytics and crash records, stay with the services concerned until the periods above run out.

Your rights

Depending on the law where you live (KVKK in Türkiye, the GDPR in the European Union), you have the right to access your data, to have it corrected or deleted, to object to its processing and to receive a copy of it. To use these rights write to [email protected]; we answer within 30 days. You also have the right to complain to the data protection authority of your country.

Data security

Data is encrypted in transit and access to the database is limited by per-account authorisation. Even so, no system is completely secure; if a breach happens we will make the notifications the law requires.

Changes to this policy

If this policy changes, the new version is published on this page and the date above changes.

Contact

The party responsible for your data is the developer named on the App’s App Store and Google Play pages. Questions: [email protected]