Coming soon

Privacy Policy

Last updated: October 27, 2026 Version 1.2

This is an English translation provided for convenience. If there is any discrepancy, the Turkish version prevails.

Summary: Your health data is yours. It is stored encrypted on your device; when it is sent to the AI, details that reveal your identity, such as name, phone and email, are removed automatically. You can download your data or permanently delete your account at any time.

1. Data We Collect

We collect and process the following categories of data:

  • Account data: name (optionally a nickname), phone number, email
  • Health tracking data: pregnancy week, baby's birth details, breastfeeding/sleep/feeding/formula records, menstrual cycle, vaccine schedule, developmental milestones, mood, EPDS answers
  • Community and Market content: posts, comments, messages, stories, listings, offers, favorites and ratings; Market location is district-level only
  • Purchase records: the store transaction ID of boost purchases (we do not receive card details)
  • Media: baby photos and voice notes you upload
  • Device data: device model, operating system, app version, notification token, IP address (for security logs)
  • Usage statistics: screen views, button clicks (anonymous, for product improvement)

2. How We Use Your Data

  • To run tracking and reminder features
  • To provide personalized content and suggestions
  • Optional AI features (Ask AI, voice note transcription, record analysis), using pseudonymized data (identifying details removed); see Privacy Notice §5.1 for details
  • To send notifications (if you have allowed them) and to send SMS codes for phone verification
  • To provide Community and Market features, moderation and safety (photos pass a safety scan before they go live)
  • To improve the product and detect security issues

3. Who We Share Your Data With

Your data is not sold. It is shared only in these cases:

  • Cloud infrastructure providers: Cloudflare R2 (object storage) and our database provider, under a data processing agreement
  • AI intermediary: OpenRouter; requests are processed on the infrastructure of the selected model host. They are routed to hosts that apply zero data retention (ZDR) and do not use data for training. Identifiers such as name/phone/email/national ID/city/date of birth are pseudonymized before being sent (removed or converted to an age band). Voice notes are transcribed on your device; the audio file is not uploaded to the server.
  • SMS, notifications and payment verification: Netgsm (verification code SMS), Firebase Cloud Messaging (push notifications), RevenueCat with the Apple App Store and Google Play (verifying boost purchases)
  • Analytics tools: anonymous event counters with no identity
  • Legal obligation: in case of a court order or a request from a supervisory authority

4. Children's Data

The App works with a parent account. Baby/child data is created and managed with the parent's explicit consent. Under the Terms of Use, you must be over 18 to open an account.

5. Data Security

  • All communication is encrypted with HTTPS/TLS 1.3
  • AES-256 storage on the server side
  • Photos are accessed through signed URLs (5-minute upload / 1-hour download windows)
  • Session tokens are stored on the device under Keychain/Keystore
  • TLS certificate pinning is active in the mobile app

6. Retention Period

Your data is kept while your account is active. It is permanently deleted within 30 days of your account deletion request. Only audit records that must be kept under KVKK Art. 12 remain for 5 years (in de-identified form).

7. Your Rights

You can reach the following rights at any time, with one tap in the app:

  • Download My Data: a copy of all your data in JSON format
  • Delete My Account: permanent deletion within 30 days
  • Notification Preferences: turn off each notification category separately
  • Withdraw Explicit Consent: withdraw the explicit consent you gave for processing health data (related features may then stop working)
  • Withdraw AI Consents: cancel your AI chat / voice note transcription / record analysis consents with one tap under Settings → Privacy → AI and Data (other app features are not affected)

8. Cookies and Similar Technologies

Our website uses only essential cookies (session management); no advertising or tracking cookies are used. There is no third-party advertising SDK in the app. For details, see the Cookie Policy.

9. International Transfers

In some cases the cloud infrastructure may be located on servers in the EU/EEA or the US under a data processing agreement. Transfers are made with the safeguards provided for in KVKK Art. 9 (for example standard contractual clauses) and equivalent security measures.

When your data is sent for the AI features, it goes through OpenRouter to the infrastructure of the selected model host, whose region may vary and may be outside Türkiye and the EU/EEA, including the US. Requests are routed only to hosts that apply zero data retention (ZDR) and do not use data for training. This transfer is made under KVKK Art. 9, on the basis of the safeguards the Law provides for and, where required, your explicit consent, and pseudonymization and data minimization are applied. For details and possible risks, see Privacy Notice §5.1.3.

10. Changes

Significant changes to this policy are announced in the app and you will be asked to accept them. The current version is always published at ingababy.net/en/legal/gizlilik-politikasi.html.

11. Contact

For privacy questions: [email protected]