Privacy notice

ufak AI, an independent research lab in Türkiye, is the data controller for ufakai.com, ufakzeka.com, chat.ufakzeka.com, karar.ufakzeka.com and kulak.ufakzeka.com, and for the research data described below. Questions and requests: hello@ufakai.com.

ufakai.com and ufakzeka.com are static pages. They set no cookies. We count visits with Cloudflare Web Analytics on all our sites, the chat and both demos included: a small script sends the page address, the page you came from, your browser and device type and the page load timings to Cloudflare. It uses no cookies and no fingerprinting; your IP address is used only to derive a country and is not stored. Your theme choice is kept in your browser only. On all our sites, the chat and both demos included, fonts load from Google Fonts: when your browser fetches them, Google receives your IP address and your browser’s usual request headers. The sites are served through Cloudflare, which processes connection data to deliver and protect them.

chat.ufakzeka.com is a research demo. When you use it we store:

• the messages you type and the answers the model gives, with the language and the time;
• your thumbs up or down votes, the reason you pick and any short note you type with it;
• a salted hash of your IP address, used for rate limits and abuse checks. The address itself is not stored;
• the version of the consent notice you accepted;
• if you sign in: your email, display name and avatar as provided by Google or GitHub, and a session cookie. Sign-in is optional.

Before your first message in a day, Cloudflare Turnstile checks that you are not a bot. Turnstile is provided by Cloudflare under its own privacy policy. A signed cookie then remembers the check for 24 hours.

Conversations you share with the share button become public pages readable by anyone with the link.

We use chat data to run the service, to keep it safe from abuse, and to study and improve the model. Conversations may be used, with personal data masked, to train the next model. Aggregate statistics such as counts and vote rates may appear in our reports.

The legal bases under KVKK are your consent for the training use, which you give by starting a chat after reading the notice, and our legitimate interest for security and rate limiting. You may withdraw consent at any time by asking us to delete your conversations.

The model is small and the chat is a research tool. Do not type names, phone numbers, addresses, identity numbers, bank details or health information, yours or anyone else’s. Our export masks common patterns such as ID numbers, IBANs, emails, phones and card numbers, but masking is not perfect.

Data is stored on a server rented from Hetzner in Germany and passes through Cloudflare. That is a transfer outside Türkiye, which you accept when you start a chat.

Conversations are kept for up to 24 months, then deleted. Signed-in users can delete their own conversations at any time from the history page. Anyone can ask for deletion by email; we act within 30 days.

karar.ufakzeka.com is a research demo of ufakzeka-karar, a decision model. The text and the questions you send are held in the server’s memory only while the request waits in line and the model computes the answer, and are then discarded. They are not written to disk or to any log.

For each request the server writes one log line with the time, the HTTP status and a short code for it (such as busy or queued), the number of questions and the time the answer took. The line holds no text and no IP address. Log lines are kept for 90 days, then deleted.

To apply the rate limit, the server counts requests per IP address over a window of 10 minutes. To keep your place in line, it also holds the address while your request waits, and for 15 seconds after a reply that keeps your place. The address and the request times are kept in memory only and are never written to disk.

The demo runs on the same server as the chat, rented from Hetzner in Germany. This means the data is transferred abroad. Requests reach it through a Cloudflare tunnel, and Cloudflare processes connection data, your IP address included, to deliver and protect the page.

Before your first request in a day, Cloudflare Turnstile checks that you are not a bot, as in the chat. Turnstile is provided by Cloudflare under its own privacy policy. A signed cookie then remembers the check for 24 hours; it holds only its expiry time and a signature, not your IP address. The demo sets no other cookie. Visits are counted with Cloudflare Web Analytics, as on our other sites (see The websites). The record that you have read the notice shown before the first use, the threshold you set in the demo’s Code and JSON tab and, if you switch it, your theme choice are kept in your browser only. A share link carries your text inside the link itself, after the # sign, which browsers do not send to the server; anyone who has the link can read the text.

Do not type personal data into the demo, yours or anyone else’s.

The legal basis under KVKK for the log and the rate limit is our legitimate interest in running the demo and keeping it safe from abuse. The text you send is processed only to give you the answer you asked for.

kulak.ufakzeka.com is a research demo of ufakzeka-kulak, a speech recognition model. The model runs in your browser. The page downloads the model files from kulak.ufakzeka.com itself, which Cloudflare serves, and your browser may keep them in its cache for later visits. No model file is downloaded before you accept the notice shown on the first visit.

When you press Start, your browser asks for permission to use the microphone; Stop turns it off. Your voice is processed in your browser only. The audio and the text the model writes are not recorded, not stored and not sent anywhere, and there is no server that receives them. The text stays on the page until you clear it or leave the page; Copy text puts it on your clipboard only when you press it.

The demo sets no cookies. The record that you have read the notice and, if you switch it, your theme choice are kept in your browser only. Visits are counted with Cloudflare Web Analytics, as on our other sites (see The websites), and fonts load from Google Fonts. Cloudflare processes connection data, your IP address included, to deliver and protect the page.

What you say never reaches us, so we hold nothing of it to delete.

Our research uses texts and speech recordings that others have published. This covers HakemBench, our benchmark of Turkish decision questions, the training data of ufakzeka-karar and the speech recordings and transcripts ufakzeka-kulak was trained on, among them YouTube recordings collected by YODAS and YODAS v3, whose authors say they took only videos published under a Creative Commons licence. The sources are listed in the HakemBench dataset card, in the ufakzeka-karar model card and in the ATTRIBUTION.md file of the ufakzeka-kulak model repository.

In HakemBench, the names of living persons are masked in every text, public figures included; people who have died are named where the text names them. Parliament sentences are public record and can be traced to their source, so there the masks reduce the data but do not make it anonymous. In the training texts taken from web pages, email addresses, links, phone numbers, IBANs, national identity numbers, user handles and names next to a greeting or a form of address are masked. Masking does not catch every case.

The published HakemBench files hold only the texts listed in its dataset card. The training texts taken from other sources and the recordings ufakzeka-kulak was trained on are not published.

The legal basis under KVKK is our legitimate interest in research. The source texts and recordings were public before we used them.

If a text or a recording is about you, holds your voice or you hold rights in it, write to hello@ufakai.com and name the text, the item or the recording. We answer within 30 days. When we accept a request, we remove it from future releases of HakemBench and from the training data of future models. Model weights that are already released cannot be changed, and copies of a released version that others have downloaded are outside our control.

We sell your data to no one and share it with no one. The processors acting for us are Hetzner (hosting of the chat and the karar demo), Cloudflare (hosting of the static sites and the kulak demo, network and tunnel, Turnstile, Web Analytics, access control) and Google and GitHub (sign-in, only if you use it). Google also receives your IP address when your browser loads the fonts, as described above. The services used for research data are described in that section. We would disclose data only when the law requires it.

Under Article 11 of KVKK you can ask whether we process your data, what we hold, why, and to whom it went; ask for correction or deletion; object to automated results; and claim damages for unlawful processing. Write to hello@ufakai.com. We answer within 30 days. You can also complain to the Personal Data Protection Authority (KVKK).

The chat is not aimed at children under 13. If you believe a child has used it, tell us and we delete the data.

When this notice changes, the version date above changes. When a change concerns the chat or one of the demos, that service asks for consent again.

Version 2026-10-23 added kulak.ufakzeka.com to the scope and the section on the kulak demo, added the speech recordings ufakzeka-kulak was trained on to the research data, named Cloudflare as the host of the static sites and the kulak demo, and extended the rule above to the demos. What the chat and the karar demo process, why and for how long are as in version 2026-10-01, so neither asks for consent again.

Version 2026-10-01 added karar.ufakzeka.com and the research data to the scope, added the sections on the karar demo and on research data, and stated that visits to the karar demo are counted with Web Analytics as on the other sites, that the karar demo checks visitors with Turnstile as the chat does, and that Google receives your IP address when fonts load. It also changed the rule above, so the chat now asks for consent again only when a change concerns the chat. What the chat stores, why and for how long are as in version 2026-09-09, so the chat does not ask for consent again.