Privacy Policy

1. DATA CONTROLLER

Sevim Senacay Kadı (Baby & Me Check — Individual Developer) is the controller of personal data covered by this policy.

• Contact: kvkk@babyandmecheck.com
• Web: babyandmecheck.com

2. DATA WE COLLECT

• Identity & Contact: name, email address, optional profile information.
• Account & Authentication: password hash, session tokens.
• Health & Pregnancy data: estimated due date, gestational week, baby info, symptom logs (only as much as you enter in-app).
• Usage data: in-app interactions, device type, OS, anonymous technical logs.
• User content: posts, comments, images you upload.
• Payment data: processed directly by Apple/Google; we only receive transaction/subscription status.

3. PURPOSES OF PROCESSING

• Account creation, session management and authentication
• Delivering pregnancy and baby tracking features
• Community, notification and support services
• Measuring quality, debugging and improving the Service
• Complying with legal obligations (e.g. financial records)
• Marketing communications where you have opted in

4. LEGAL BASIS

Your data is processed under Turkish KVKK arts. 5 and 6 and (for EU users) GDPR arts. 6 and 9, relying on the following grounds:

• Performance of a contract (account and service delivery)
• Explicit consent (health data, marketing)
• Legal obligation (tax, record-keeping)
• Legitimate interest (security, fraud prevention, product improvement)

5. DATA SHARING

We do not sell your data. We share only with the following limited categories:

• Infrastructure providers: cloud hosting, database, storage, email delivery (under confidentiality agreements).
• Payment ecosystem: Apple App Store, Google Play.
• Analytics & error tracking: anonymised tools to measure app performance.
• Authorities: when required by a court order or legal obligation.

6. INTERNATIONAL TRANSFERS

Our hosting infrastructure is located in the EU / Frankfurt (AWS) region. Your data is primarily processed within the EU. Limited data may be transferred to the US for Apple/Google and some support services; such transfers are protected by Standard Contractual Clauses (SCCs) and equivalent safeguards.

7. RETENTION PERIODS

• Account data: as long as the account is active
• After deletion request: permanently deleted within 30 days
• Financial records: 10 years (legal obligation)
• System logs: 12 months

8. DATA SECURITY

Your data is encrypted in transit (TLS/HTTPS) and at rest (AES-256). Access is restricted to personnel on a need-to-know basis; regular security audits are performed. No system is 100% secure, but we apply industry-standard measures.

9. CHILDREN'S PRIVACY

The Service is not directed to users under 18. If you believe your child's data has been collected without authorisation, contact kvkk@babyandmecheck.com and we will delete it.

10. COOKIES AND TRACKING

Our website uses essential and functional cookies for session management, language preference and basic analytics. We do not use marketing tracking cookies. You can change cookie settings in your browser at any time.

11. YOUR RIGHTS

Under KVKK art. 11 and GDPR you have the right to:

• Access, rectify and request deletion of your data
• Object to processing, restrict it, request data portability
• Withdraw consent at any time
• Lodge a complaint with the competent authority (Turkey: KVKK Authority)

To delete your account and data in one click: Account & Data Deletion Request page.

12. CHANGES TO THIS POLICY

We may update this policy from time to time. Material changes will be announced via in-app notification or email. The current version is always available on this page.

13. CONTACT

• Privacy & KVKK: kvkk@babyandmecheck.com
• Support: support@babyandmecheck.com