← Home

Privacy Policy

Last updated: July 21, 2026

At Sevgi Baby Development Tracker ("Sevgi", "we", "us", "the app"), we take the protection of your personal data seriously. This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data. It is written to meet the standards of the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and the U.S. Children's Online Privacy Protection Act (COPPA).

Data Controller

The data controller for the purposes of GDPR and applicable privacy laws is:

Serdar Zahit Hekimoğlu
Email: [email protected]

1. Information We Collect

We collect the following categories of personal data:

• Account information: your name and email address. If you sign in with Apple or Google, we receive the identifier provided by the chosen provider.
• Child profile information: your child's first name, gender, date of birth, and the development priorities you select.
• Development & tracking data: completed activities and milestones, notes in your activity journal, articles you've read, and the sleep, feeding/nursing, and height-and-weight (growth) records you add. Growth measurements such as height and weight are health-related data and are processed solely so you can track your child's development.
• Kitchen data: recipes you favorite and recipes you create.
• Subscription information: plan type and subscription status.
• Device information: push notification token (used only to deliver the notifications you've enabled).
• Usage / analytics data: anonymous, non-identifying usage signals such as which screens and features are used (see Section 8). This data never includes your child's name, date of birth, or any value such as height, weight, sleep, or feeding.
• Locally stored data: app preferences, viewed activity counters, pinned recommendations, widget data, and notification settings are kept on your device and are never sent to our servers.

2. How We Use Your Information

We use the information we collect to:

• Personalize your child's development tracking
• Suggest activities, content, and recipes based on age and your chosen priorities
• Store and summarize your sleep, feeding, and growth records, and plot height and weight on WHO growth curves
• Generate weekly and periodic development reports, and visit reports you can share with your doctor
• Send reminders and notifications you've opted in to (daily activity reminders, birthday notifications, weekly summaries, missed-timer reminders)
• Understand which features are used so we can improve app performance and experience
• Manage subscriptions and payment processing

3. Legal Bases for Processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

• Performance of a contract: to provide the Sevgi service you have requested
• Consent: where you have explicitly opted in (for example, to push notifications or Apple Health sync)
• Legitimate interest: to improve service quality and maintain security
• Legal obligation: where we must comply with applicable law

4. Where We Store Your Data

Your data is stored on Supabase infrastructure in the European Union (Frankfurt, Germany). All data in transit is protected with SSL/TLS encryption.

We retain your data for as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days. This window allows for backup rotation and accidental-deletion recovery.

Data we are legally required to retain (such as billing or subscription records) is kept only for the periods required by applicable law.

5. Who We Share Data With

We do not sell your personal data and never share it for marketing. We share limited data only with the following trusted providers, and only to the extent needed to operate the service:

• Apple Inc. (USA): App Store subscription management and Sign in with Apple authentication
• Google LLC (USA): Sign in with Google authentication (only when you choose this method)
• Supabase Inc. (USA-headquartered, EU data residency): database and authentication hosting in Frankfurt, Germany
• RevenueCat Inc. (USA): subscription management and synchronization of App Store payment events (user identifier, subscription plan, and status are shared)
• AppsFlyer Ltd.: anonymous measurement of our advertising campaigns (attribution) — only device-level signals that are not linked to your identity are shared (see Section 8)
• Legal authorities: only where required by law

Usage/analytics data is never shared with any third party for advertising profiling or tracking; it is kept only on our own infrastructure (Supabase). For advertising campaign measurement, only anonymous, non-identifying signals are sent to AppsFlyer — see Section 8. Where data is transferred to the United States, we rely on Standard Contractual Clauses and other safeguards recognized under GDPR.

6. Apple Health, Apple Watch & Widgets

• Apple Health: Only if you turn it on, your child's height and weight are synced with Apple Health. You can revoke this permission at any time in the Apple Health app. Health data is not sent to our servers and is never used for analytics or marketing.
• Apple Watch: The watch app syncs records such as nursing and sleep only between your own paired devices; it does not transfer data to any separate third party.
• Widgets, Live Activities & Control Center: Home and Lock Screen widgets and live timers only read data shared on your device (via an App Group). No additional data is collected for these features.

7. Children's Privacy (COPPA & GDPR-K)

Sevgi is designed for parents and guardians, not for children. The app is intended for adult users aged 18 and older who are tracking the development of a child in their care.

• We do not knowingly collect personal information directly from children under 13.
• All information about a child is entered by a parent or guardian with full knowledge and consent.
• Parents can review, update, or delete their child's profile at any time from within the app.
• If you believe a child under 13 has created an account without parental consent, please contact us at [email protected] so we can remove the account.

8. Cookies, Tracking & Analytics

The Sevgi mobile app does not use cookies and contains no third-party analytics or tracking tools such as Google Analytics, Firebase, or Meta. We do not build advertising profiles and do not track you across other apps or websites (no tracking under Apple's App Tracking Transparency framework; the advertising identifier/IDFA is never collected).

Advertising campaign measurement (AppsFlyer): When we run ads to promote Sevgi, we use AppsFlyer to measure how many installs each campaign generates. For this purpose, the device vendor identifier (IDFV), IP address, and anonymous app events (such as app open, registration completed, trial started, subscription) are sent to AppsFlyer; subscription events are forwarded via RevenueCat matched only by the anonymous AppsFlyer device identifier. This data is never linked to your name, email address, or any information about your child; campaign results are reported only in aggregate through Apple's privacy-preserving SKAdNetwork framework. AppsFlyer processes this data on our behalf as a data processor; for details, see the AppsFlyer Privacy Policy.

To improve the app, we use only first-party, anonymous usage analytics kept on our own systems. This analytics:

• contains only neutral signals such as which screens/features are used, paywall interactions, and the app version;
• never contains your child's name, date of birth, or any health value such as height, weight, sleep, or feeding (we record only a value-free "a record was added" signal);
• is not used for advertising and is not shared with third parties;
• is stored in a separate, isolated Supabase database, kept apart from your main data.

9. Data Security

We protect your data with industry-standard safeguards:

• SSL/TLS encryption for all data in transit
• Row-level security (RLS) policies that restrict access to your data
• Hashed password storage (plaintext passwords are never stored)
• Regular security updates and monitoring

10. Your Rights

Depending on your location, you may have the following rights over your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate or incomplete information
• Erasure: request deletion of your personal data ("right to be forgotten")
• Restriction: ask us to pause processing in certain circumstances
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interest
• Opt-out of sale (CCPA): we do not sell your data, but you may confirm this at any time
• Withdraw consent: where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email us at [email protected]. You can also delete your account and all associated data directly from within the app: Settings → Privacy → Delete My Account.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced through an in-app notification. The "Last updated" date at the top of this page indicates when the current version took effect.

12. Contact Us

For any questions or requests regarding your privacy:

Email: [email protected]