Privacy notice

ufak AI, an independent research lab in Türkiye, is the data controller for ufakai.com, ufakzeka.com and chat.ufakzeka.com. Questions and requests: hello@ufakai.com.

ufakai.com and ufakzeka.com are static pages. They set no cookies. We count visits with Cloudflare Web Analytics on all three sites, chat included: a small script sends the page address, the page you came from, your browser and device type and the page load timings to Cloudflare. It uses no cookies and no fingerprinting; your IP address is used only to derive a country and is not stored. Your theme choice is kept in your browser only. Fonts load from Google Fonts, which means your browser sends its usual request headers to Google when it fetches them. The sites are served through Cloudflare, which processes connection data to deliver and protect them.

chat.ufakzeka.com is a research demo. When you use it we store:

• the messages you type and the answers the model gives, with the language and the time;
• your thumbs up or down votes, the reason you pick and any short note you type with it;
• a salted hash of your IP address, used for rate limits and abuse checks. The address itself is not stored;
• the version of the consent notice you accepted;
• if you sign in: your email, display name and avatar as provided by Google or GitHub, and a session cookie. Sign-in is optional.

Before your first message in a day, Cloudflare Turnstile checks that you are not a bot. Turnstile is provided by Cloudflare under its own privacy policy. A signed cookie then remembers the check for 24 hours.

Conversations you share with the share button become public pages readable by anyone with the link.

We use chat data to run the service, to keep it safe from abuse, and to study and improve the model. Conversations may be used, with personal data masked, to train the next model. Aggregate statistics such as counts and vote rates may appear in our reports.

The legal bases under KVKK are your consent for the training use, which you give by starting a chat after reading the notice, and our legitimate interest for security and rate limiting. You may withdraw consent at any time by asking us to delete your conversations.

The model is small and the chat is a research tool. Do not type names, phone numbers, addresses, identity numbers, bank details or health information, yours or anyone else's. Our export masks common patterns such as ID numbers, IBANs, emails, phones and card numbers, but masking is not perfect.

Data is stored on a server rented from Hetzner in Germany and passes through Cloudflare. That is a transfer outside Türkiye, which you accept when you start a chat.

Conversations are kept for up to 24 months, then deleted. Signed-in users can delete their own conversations at any time from the history page. Anyone can ask for deletion by email; we act within 30 days.

We sell your data to no one and share it with no one. Processors acting for us: Hetzner (hosting), Cloudflare (network, Turnstile, Web Analytics, access control), Google and GitHub (sign-in, only if you use it). We would disclose data only when the law requires it.

Under Article 11 of KVKK you can ask whether we process your data, what we hold, why, and to whom it went; ask for correction or deletion; object to automated results; and claim damages for unlawful processing. Write to hello@ufakai.com. We answer within 30 days. You can also complain to the Personal Data Protection Authority (KVKK).

The chat is not aimed at children under 13. If you believe a child has used it, tell us and we delete the data.

When this notice changes, the version date above changes and the chat asks for consent again.