Türkçe · Home

Privacy Policy

App: Ebeveynim (com.barisakca.ebeveyn)
Data controller: Barış Akça
Contact: destek@ebeveynim.tr
Last updated: 12 October 2026

This is an English translation for convenience. The Turkish version (Privacy Policy and KVKK Notice) is the governing text.

1. What data do we process?

• Account details: an account ID for each user, the phone number entered at sign-up, and an irreversible hash of the 4-digit PIN chosen by the user (the PIN itself is not stored). The phone number serves only as a username and is visible to people in the same family; no SMS is sent to it and no email is requested. So that the app can sign you in automatically after a reinstall, the number and PIN are also kept in the phone's own secure storage (Google Block Store on Android, Keychain on iPhone); only the Ebeveynim app can access it.
• Trial record (elder's phone only): to prevent the 14-day free trial from being claimed again and again on the same phone, an irreversible hash derived from the phone's technical ID. This hash contains no name, number or other personal information.
• Family details: the display names and phone numbers of family members and the elder; the names, numbers and nicknames of contacts added to the elder's contact list.
• Messages: the encrypted form of voice and text messages. The decryption key exists only on the sending and receiving phones; the server cannot see the content. Who sent a message to whom, when, and whether it was played (metadata) is kept on the server.
• Device status (elder's phone only): battery level and when the phone was last used. Which apps you use is not recorded; only the last-use time is sent.
• Location (elder's phone only, optional): when the elder presses "Send my location" or approves a family member's request, the location is end-to-end encrypted on the phone and sent to the family member: either the current location once, or, if the elder approves, live location for at most 1 hour. During live sharing a persistent "Your location is being shared — Stop" notice is shown on the elder's phone; when time runs out or it is stopped, sharing ends and its record is deleted. The server cannot see the location; the encrypted content of a one-time location is deleted about 1 hour after it is seen. The app never tracks location secretly and asks for location permission only "while using the app".
• Photos (optional): when the elder presses "Send my photo" or answers a family member's photo request with one tap, the photo taken with the front camera is downscaled on the phone and sent end-to-end encrypted. The server cannot see the photo; the encrypted copy is deleted from the server as soon as the receiving phone downloads it. Photos stay only on the sending and receiving phones. The camera is used only while that screen is open. A family member can likewise send a photo taken with the camera or chosen from their gallery (downscaled and end-to-end encrypted) to the elder and other family members; the app only accesses the single photo the person picks.
• Video (optional, depends on plan): a video of up to 10 seconds is recorded with the front camera and microphone only while the recording screen is open and the person taps the record button. It is end-to-end encrypted on the phone and sent to one person; the server cannot see it and the encrypted copy is deleted from the server as soon as the receiving phone downloads it. The video is kept only on the recipient's phone (the last 5 from each person) and is not included in phone backups.
• Reminder alarm (optional): the note and time typed by a family member travel end-to-end encrypted to the elder's phone, where the alarm is set. The "seen / not seen" notice also comes back encrypted. The server cannot read the note; the encrypted copy is deleted shortly afterwards like other messages.
• Notification token: the technical token needed to deliver notifications to your phone.
• App language: Turkish or English, so that notification texts arrive in your language.
• Subscription details: plan type and expiry date. We never see your payment details; payment is taken by Google Play (Android) or the App Store (iPhone).

2. Microphone and voice commands

The microphone is used only while you record a voice message or press "Talk"; there is no background listening. Voice commands (like "call my son") and transcription of your voice messages are handled by your phone's speech recognition service. On Android this service usually belongs to Google and on iPhone to Apple; it may work over the internet and is subject to that company's privacy terms. The transcribed text is end-to-end encrypted on your phone together with the audio; we can't see this text either. Speech recognition can make mistakes; listen to the recording for important matters.

3. Why do we process data? (Legal basis)

Your data is processed to provide the family calling and messaging service, to send "seen", battery and inactivity notices and to manage the subscription, on the basis of the performance of a contract (Turkish KVKK art. 5/2-c) and the explicit consent you give when using the app.

4. Who do we share data with? (Transfers abroad)

• Supabase (database and file storage, server location: Frankfurt, Germany)
• Google Firebase Cloud Messaging and, on iPhones, the Apple Push Notification service (APNs) (notification delivery). Notifications contain no names or message content; on Android only a technical "wake up" signal is sent, and on iPhone a generic alert such as "You have a new message".
• RevenueCat, Google Play and the Apple App Store (subscriptions and payment)

These providers' servers are located abroad. The consent you give when installing the app includes your explicit consent to transfers abroad under KVKK art. 9. Your data is not shared with any other third party, sold, or used for advertising.

5. How long do we keep it?

• Encrypted content of played messages: deleted within about 1 hour.
• Encrypted content of messages never played: deleted after 30 days.
• Message metadata (who, to whom, when): deleted after 90 days.
• Family and contact details: until the family member is removed or the account is deleted.
• Phone number and PIN hash: until the account is deleted.
• Trial record (phone ID hash): kept even after the account is deleted, only to prevent abuse of the free trial; it cannot be linked to anyone.

6. Security

Messages are encrypted on the phone (end-to-end encryption), transmission is protected by HTTPS, and in the database each family can access only its own data. Wrong PIN attempts are limited: after repeated failures the account is locked for 15 minutes, then 1 hour, then 24 hours. A family can only be joined by physically scanning the QR code on the elder's phone, and the whole family is notified when someone new joins. Still, no system is completely secure; please do not share confidential information such as bank details, passwords, ID numbers or trade secrets in this app.

7. Children

The app is not intended for users under 18.

8. Your rights (KVKK art. 11)

You have the right to learn whether your data is processed, to request information, to ask for it to be corrected or deleted, to object, and to claim compensation for damages. You can delete your account and all your data immediately with the "Delete my account and data" button in the app (details: Account deletion). If you can't access the app, you can apply to the email address above with your phone number or device ID (shown on the Settings screen of the elder's phone). Requests are answered within 30 days at the latest.