Privacy Policy

1 · Summary

Nenni is a mobile app that helps you keep track of your baby’s daily care (feeding, sleep, diapers, growth, vaccines, postpartum mood). This policy explains in plain language which data is processed when you use the app and what rights you have over it. The detailed notice under the Turkish data protection law (KVKK), which is the same as the notice inside the app, is the Privacy Notice (KVKK); the two do not contradict each other.

2 · Who we are

Nenni is provided by an individual developer, Mahmut Uğur Çeker, who lives in Türkiye and is the data controller; it is not a company or legal entity. To use your rights or ask anything about your data, write to hi@mugurc.com. Because the controller is in Türkiye, the Turkish data protection law (KVKK) applies to everyone who uses Nenni, whichever country you live in; the law of your country may apply as well (see section 10).

3 · Data we collect

Most data comes from you: what you enter in the app. Some comes from your device (for example the notification token), and the name and role of a caregiver comes from the person who invited them.

• Account: your email address, if you link one (for signing in and recovering your account). If you don’t, your account is anonymous and stays tied to your phone; there is still a random account ID on our server.
• Baby profile: name, date of birth, gender, measurements (weight, length, head circumference) and a profile photo, if you add one.
• Care entries (health data): feeding, sleep, diapers, solids, vaccines, medication and doses, fever, growth, health notes, appointments, your postpartum mood journal and your Edinburgh scale result.
• Optional voice logging: your voice recording and its text, only if you use voice logging or a voice health note. The audio file of a voice health note stays on your phone.
• Optional AI features: if you use the Assistant, the questions you write, recent messages and the answers you get; for the Assistant and sleep analysis, your baby’s age, gender and a summary of entries; sleep analysis results; a usage counter to prevent misuse.
• Subscription: your Nenni+ purchase status.
• Notifications: your notification token, your notification preferences (quiet hours, time zone, language) and the information needed for the lock-screen timer, including your baby’s name.
• Caregiver sharing: the name, role and access of the people you invite, who added which entry, invite codes.
• Location (optional): if you search for a nearby health center (in Türkiye, a Family Health Center, ASM), your location at that moment — used only for the search; it is not sent to our servers and not stored. Only an approximate (rounded) version goes to the map provider.
• Device & usage: operating system, language, app version; for AI features, a usage counter and cost record (no content); aggregate usage measures for your account (the date it was opened, the time and number of entries, whether a baby was added, notification permission — not the content of your entries); when you gave consent, and the version and language of the text.
• If you give consent, also:usage events (the screens you open, operating system, app version and your phone's region setting, e.g. TR) and app error summaries (under a random install ID on your device; not linked to your name or account), weekly aggregate statistics, whether your marketing consent is on or off with your email address, and your advertising ID for ad measurement.

If you don’t give the explicit consent for your baby’s health data and for cloud backup, we cannot provide the app, because they are what the service is. Everything else (voice, AI features, analytics, research, marketing, ad measurement, location) is optional.

4 · Why we use it, and the legal basis

• Providing the service (showing your entries, backing up and syncing them between your phones, sharing with the caregivers you invite, reminders, verifying your subscription): it is necessary to perform the contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)).
• Health data (special-category data): your explicit consent (KVKK Art. 6; GDPR Art. 9(2)(a)). Voice logging, the AI features, analytics, research, marketing, ad measurement and transfers abroad also rely on your explicit consent.
• Security, preventing misuse and aggregate usage numbers (for example how many accounts keep using the app; they never include the content of your entries): our legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).

You can withdraw any consent at any time, without affecting what was done before. Your data is never sold, and no decision with legal or similarly significant effect on you is made solely by automated means. The AI features produce information and suggestions; they do not diagnose.

5 · Sharing and transfers abroad

We use Supabase for our cloud infrastructure; your data is stored on servers in Frankfurt, Germany (EU). Because the controller is in Türkiye, that is a transfer abroad under Turkish law as well. The following receive information only when you use the feature concerned, and only what is listed:

• OpenAI (USA): if you use voice logging or a voice note, your audio and its text, only for that action, to be transcribed. The audio is not stored on our server.
• Anthropic (Claude, USA): if you use the Assistant, your questions and recent messages, your baby’s age and gender and a summary of the last 7 days of entries (counts and averages, the highest fever, the latest measurement and its percentile, overdue vaccines, the names of medications in use); for sleep analysis (Nenni+), sleep and feeding statistics for the last 14 days. Your baby’s name and your notes are not sent, but everything you type in a question is, so don’t type names.
• RevenueCat (USA): to verify your subscription; when the app opens, a random subscription ID for your device and device information (including IP address); after you sign in, your account ID and subscription status. Apple and Google process the purchases.
• Apple, Google and Expo (USA): your notification token for notifications. In caregiver notifications, your baby’s name, the type of entry and its duration or amount are passed through Expo to the Apple/Google notification services; in the lock-screen timer, your baby’s name and the timer information go to your devices through the Apple notification service. When the app checks for an update, a random install ID and the app version go to Expo.
• Meta (USA): only with iOS tracking permission and marketing consent, your advertising ID and general app events (install, open, purchase). Your health and entry data never go into this measurement.
• OpenStreetMap Overpass (abroad): if you search for a nearby health center (in Türkiye, an ASM) and allow location access, an approximate version of your location (latitude/longitude rounded to 3 decimals, about 110 m) and the search radius go to the map service as a query; the provider sees your IP address. Your account or device ID and your baby’s data are not sent; nothing is sent to our servers and we do not store your location. We do not control the provider’s own logs.
• Wikimedia (abroad): when you open a postpartum recipe image, the server that serves it sees your IP address and device information.

The caregivers you invite can see your entries according to the role you give them. Other than that, we don’t share your data with any ad network, data broker or marketer without your explicit consent. Transfers are encrypted with TLS. These transfers abroad rely on the explicit consent you give by choosing the feature concerned (KVKK Art. 9; for the GDPR, Art. 49(1)(a)); we do not rely on an adequacy decision. Please know that these countries may not protect your data to the standard of Türkiye or the EU, that the service providers may keep what we send under their own terms, and that public authorities may ask for access. The full list is in section 5 of the Privacy Notice (KVKK).

6 · Retention and deletion

Your data is kept as long as your account is active. When you delete your account in the app (Profile → Delete account), the entries in the cloud (baby profiles and photos, health entries, assistant conversations and sleep analysis results, usage counter and cost records, notification tokens, the marketing list record and your email address) and the copy on your phone are permanently deleted. If you only uninstall the app, the copy on your phone goes away but the cloud entries remain.

Entries you added to someone else’s baby count as that baby’s history; they are handed over to the baby’s owner (health notes you did not share are deleted). If you are a baby’s owner, deleting your account deletes the baby and all its entries, including those the caregivers added. You can also delete single entries or a baby (when you delete a baby, the profile photo file may stay in storage until you delete your account).

No separate automatic deletion period applies to assistant conversations and sleep analysis results: conversations are deleted when you delete the baby or the account, sleep analysis results when you delete the account (the delete-chat button only removes the copy on your phone; ask by email if you want it deleted sooner). If you gave consent, usage events and weekly statistics are kept under a random install ID; because they are not linked to your account, they are not deleted with it and no automatic deletion period is set; ask by email if you want them deleted. The service providers keep what we send under their own terms; deleting your account does not by itself delete records they hold (for example purchase records). For step-by-step instructions, see Data / Account Deletion.

7 · Security

Transfers between your device and our server are encrypted with TLS. On the server, data is opened by row-level security (RLS) rules only to you and the caregivers you invite; your postpartum mood journal, your Edinburgh results and health notes you did not share are not shared with caregivers. Server functions require a signed-in session, AI features have a usage limit against misuse, and deleting an account is verified with a code sent to your email (or a typed confirmation if no email is linked). Our hosting provider, Supabase, states that data is encrypted on disk.

Limits: data is not end-to-end encrypted; it is processed on the server for the service to work. The entries on your phone rely on your phone’s own protection (screen lock, system encryption); Nenni adds no encryption or app lock of its own. A profile photo is kept in a public store at an address that is hard to guess; anyone who knows the address can view it. No system is 100% secure, but we take reasonable technical and organizational measures. If your personal data is obtained by unauthorized people, we notify the Turkish Personal Data Protection Board and the people affected as KVKK Art. 12 requires, and, where the GDPR applies, the supervisory authority as it requires.

8 · Children

You enter your baby’s data as the baby’s parent or legal guardian, on the baby’s behalf. Nenni is meant for parents and caregivers who are 18 or older; someone under 18 should not use it for themselves, and we do not knowingly collect data from people under 18. Whoever holds an invite link (valid for 48 hours) can see the baby’s name before joining, so send the link only to someone you trust.

9 · Your rights

You have the right to access, correct, delete and port your data (Profile → Download my data — the copy on your device), to restrict or object to its processing where the law gives you that right, and to withdraw your explicit consent at any time. The full list of rights under KVKK Art. 11 is in the Privacy Notice (KVKK). To use them, write to hi@mugurc.com; we reply free of charge within 30 days at the latest. If you are not satisfied, you can complain to the Turkish Personal Data Protection Board (kvkk.gov.tr) and, if you live in the EU, the UK or Switzerland, to the data protection authority of your country.

10 · EU, UK and US readers

EEA, UK and Switzerland. The GDPR / UK GDPR (Art. 3(2)) may apply to our processing of your data. You then have the right to access, rectification, erasure, restriction, portability, to object to processing based on legitimate interests (we use that basis only for security, preventing misuse and aggregate usage numbers) and to withdraw consent, and to complain to your data protection authority (in the UK, the ICO). Your data is stored in the EU (Germany); because the controller is in Türkiye and some service providers are in the USA, it is also transferred outside the EU/UK, on the basis of your explicit consent (GDPR Art. 49(1)(a)) for the feature concerned. No decision with legal or similarly significant effect is made solely by automated means (Art. 22).

United States.We do not sell your personal information for money. Ad measurement sent to Meta, if you give marketing consent and iOS tracking permission, may count as “sharing” or “targeted advertising” under some state laws; you can stop it by turning off marketing consent (Profile → Privacy and consent) or in iOS Settings → Privacy & Security → Tracking. We process your health data (sensitive personal information in California; consumer health data in states such as Washington) only with your explicit consent; you can withdraw consent, access, correct and delete your data, and we don’t discriminate against you for doing so.

Türkiye. KVKK applies as described above and in the Privacy Notice (KVKK).

11 · This website & cookies

The mobile app keeps your preferences and offline entries on your device (local storage). We don’t use advertising or tracking cookies. This website doesn’t place cookies on visitors, doesn’t store information in the browser and doesn’t load third-party scripts or fonts. When you open an invite link (nenni.co/i/<code>), our server asks our database service (Supabase, EU) for the invite code and shows your baby’s name if the invite is valid; your visitor details (IP address, browser) are not passed to the database. The server that hosts the website may keep ordinary access logs (IP address, time, requested address) for security and operation. The admin panel is a closed area that only the person running the service can enter; it shows aggregate statistics, not names, emails, babies or health data. For details, see the Cookie Policy.

12 · Changes

We may update this policy from time to time. For an important change, we’ll let you know inside the app or on this page; for changes that widen what your explicit consent covers, we’ll ask for your explicit consent again.

This notice is complete and is meant to be read on its own. The Turkish text is the original under Turkish law, and the two are meant to say the same thing. If they ever differ in a way that matters for your rights, the reading that protects you more applies, and the mandatory rules of the law that applies to you always prevail. Read the Turkish text.