Privacy policy

This is a translation of the German Datenschutzerklärung. In case of any discrepancy, the German version prevails.

This privacy policy applies only to the website kapya.org. Our apps have their own privacy policies, which we link on the respective app page or in the app, for example for UniGoo! at unigoo.app/gizlilik.

1. Controller

2. Summary

• We do not use cookies or tracking, and we do not use any analytics or advertising services.
• The website does not load any content from third parties, not even fonts. There is no contact form and no registration.
• Personal data is only processed when the website is technically accessed and when you send us an email.

3. Hosting and accessing the website

The website is delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When the website is accessed, Cloudflare processes technically necessary data, in particular your IP address, date and time, the requested address, the browser type (user agent) and the referrer URL. This is necessary to deliver the website and to protect it against attacks and misuse.

The legal basis is our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with Cloudflare (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; the transfer to the USA is based on the adequacy decision of the European Commission (Art. 45 GDPR). Cloudflare stores these log data only briefly; we do not evaluate them in relation to individuals ourselves.

4. Contact by email

If you send us an email, we process your details in order to answer your enquiry (Art. 6(1)(b) GDPR for enquiries concerning a contract or one of our apps, otherwise Art. 6(1)(f) GDPR). The email is forwarded via Cloudflare to our mailbox at Google Ireland Limited. Processing in the USA is possible in this context; Google is certified under the EU-US Data Privacy Framework. We delete your message once it has been dealt with, unless statutory retention obligations apply (six years for business correspondence, Section 257 of the German Commercial Code, HGB).

5. Links to other services

The website links to our apps and, where applicable, to the App Store or Google Play. Data is only transferred to the respective service once you follow a link; the privacy provisions of that service then apply.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal email to info@kapya.org is sufficient.

Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

7. No automated decision-making

We do not make automated decisions and do not create profiles (Art. 22 GDPR).

Last updated: October 2026