KVKK Disclosure Notice
Last updated: March 24, 2026
This disclosure is provided in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"). Watch My Baby ("Data Controller") processes your personal data as described below.
1. Data Controller
Watch My Baby acts as the data controller for the personal data processed through the Watch My Baby mobile application.
Contact: [email protected]
2. Categories of Personal Data Processed
| Category | Data Types |
|---|---|
| Identity Data | Display name, email address |
| Child Data | Child's name, date of birth, gender, growth measurements |
| Health-Related Data | Sleep patterns, nutrition logs, vaccination records, cry analysis results |
| Visual Data | Photos submitted for analysis |
| Communication Data | AI assistant chat conversations |
| Technical Data | Device type, OS version, app version, crash reports |
| Transaction Data | Subscription status, purchase history (via app stores) |
3. Purposes and Legal Basis for Processing
| Purpose | Legal Basis (KVKK Art. 5/6) |
|---|---|
| Account creation and authentication | Performance of contract (Art. 5/2-c) |
| Providing core tracking features | Performance of contract (Art. 5/2-c) |
| AI-powered analysis and recommendations | Explicit consent (Art. 5/1, Art. 6/2) |
| Processing health-related data | Explicit consent (Art. 6/2) |
| Subscription management | Performance of contract (Art. 5/2-c) |
| Analytics and service improvement | Legitimate interest (Art. 5/2-f) |
| Legal compliance | Legal obligation (Art. 5/2-ç) |
4. Data Transfers
Your personal data may be transferred to:
- Cloud service providers (Hetzner — Germany/EU) for data hosting
- Third-party service providers (Supabase, RevenueCat, Firebase, Sentry, Mixpanel) for service delivery
- AI service providers (OpenAI, Google) for AI-powered features
International transfers are carried out with appropriate safeguards as required by KVKK Article 9, including adequacy decisions and standard contractual clauses.
5. Data Retention Period
- Account and tracking data: retained while the account is active, deleted within 30 days of account deletion
- Backup copies: purged within 90 days of account deletion
- Anonymized analytics data: may be retained indefinitely
- Legal obligation data: retained as required by applicable law
6. Your Rights Under KVKK (Article 11)
As a data subject, you have the right to:
- Learn whether your personal data is being processed
- Request information about the processing if your data has been processed
- Learn the purpose of data processing and whether it is used for the intended purpose
- Know the third parties to whom your data is transferred domestically or abroad
- Request correction of your data if it is incomplete or inaccurate
- Request deletion or destruction of your data under conditions specified in Article 7
- Request notification of corrections, deletions, or destruction to third parties to whom data has been transferred
- Object to any result arising from the analysis of your data exclusively through automated systems that is against you
- Request compensation for damages arising from unlawful processing of your data
7. How to Exercise Your Rights
You may submit your requests regarding your rights under KVKK to:
Your request will be processed free of charge within 30 days. If the request requires additional costs, fees determined by the Personal Data Protection Board may apply.
8. Data Security Measures
We implement technical and administrative measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Access controls and authentication mechanisms
- Regular security assessments
- Employee awareness training
- Incident response procedures