Privacy policy

Who is responsible

Context is built and operated by Nafru, based in Turkey. Nafru is the data controller for the purposes of this policy. Use the channels on the contact page with any questions.

Data that stays on your device

Your notes, tasks, files, vault records and nightly backups are stored only on the device you use them on. Because sync ships switched off, none of it reaches our servers unless you explicitly turn sync on.

Data processed when you create an account

• Email address — for sign-in, verification and account recovery
• Session and device information — to detect security events
• Subscription status — to determine your plan
• School email and role (student/teacher) if you choose the Education plan

When you turn sync on

Turning sync on stores the selected workspace's contents on our servers in encrypted form and synchronises them between your devices. Settings show which workspace is being synced. Turning sync off stops synchronisation, and you can request deletion of the server-side copy.

Payment

We neither see nor store your card number. Payments are processed by iyzico in Turkey and by Paddle elsewhere. Only the subscription state and an invoice identifier reach us.

Artificial intelligence

AI help is off by default. When enabled, only note content relevant to your question is sent to the provider you selected, and the answer names the note it used. Vault records are outside that scope and are not read unless you open them.

Cookies and measurement

This marketing site sets no advertising or tracking cookies and loads no third-party analytics. Fonts are served from our own origin, so opening a page makes no request to any third party, Google included. The one exception is the contact page: it loads Cloudflare Turnstile to keep the form free of spam, and Cloudflare sees your IP address and browser details while it runs. Your theme and language choices are kept in your browser's local storage and are never sent to a server.

Retention

Account data is kept for as long as your account exists. If you delete your account, associated data is deleted within a reasonable period; invoice records we are legally required to keep are retained for the period the applicable law requires.

Your rights

Under Turkish Law No. 6698 (KVKK) and, where it applies, the GDPR, you may ask whether your data is processed, request a copy, ask for correction or erasure, object to processing, and seek redress for damage. Write to us through the contact page to exercise any of these.

Changes

This policy changes with the product. For a material change we email the address on your account and update the date above.