Privacy Policy

1 · Summary

Nenni is a mobile app that helps you keep track of your baby’s daily care (feeding, sleep, diapers, growth, vaccines, postpartum mood). This policy explains which data is processed when you use the app and what rights you have over it. For the official notice under KVKK (the Turkish data protection law), you can also see the KVKK Privacy Notice.

2 · Data we collect

• Account: your email address, if you link one (for signing in and recovering your account). If you don’t, your account is anonymous and stays tied to your phone.
• Baby profile: name, date of birth, gender, measurements (weight, length, head circumference) and a profile photo, if you add one.
• Care entries (health data): feeding, sleep, diapers, solids, vaccines, medication/fever, growth, health notes, your postpartum mood journal and your Edinburgh scale result.
• Optional voice logging: your voice recording and its text, only if you use voice logging or a voice health note.
• Optional AI features: if you use the Assistant, the questions you write and the answers you get; for the Assistant and sleep analysis, your baby’s age, gender and a summary of entries; a usage counter to prevent misuse.
• Subscription: your Nenni+ purchase status.
• Notifications: your device’s notification token, for caregiver notifications and the lock-screen timer.
• Caregiver sharing: the access details of the people you invite and who added which entry.
• Location (optional): if you search for a nearby Family Health Center (ASM, in Türkiye), your location at that moment — used only for the search, not stored.
• Device & usage: operating system, language, app version and (if you give consent) anonymous usage statistics.

3 · How we use your data

Your data is processed only to provide the service to you: to show your entries, back them up and sync them between your phones, share them with the caregivers you invite, set reminders, (if you use them) generate AI answers, verify your subscription and keep the service secure.

With optional consents: analytics (anonymous; measures screen usage on our own server), research (anonymous aggregate statistics once a week) and marketing communications (new-feature emails; on iOS, if you also give tracking permission, the Meta tool that measures which ad led you to install the app). All of these are off by default and you can turn them off at any time. Your data is never sold.

4 · Sharing and transfers abroad

We use Supabase for our cloud infrastructure; your data is stored on servers in the Frankfurt, Germany (EU) region. If you use voice logging, the audio and text are sent to the OpenAI (USA) service only for that action, to be transcribed. If you use the AI Assistant or sleep analysis, your question and entry summary are sent to the Anthropic (Claude, USA) service to produce an answer; your baby’s name is not sent — only their age, gender and entry summaries go. Your subscription purchases are processed through Apple and RevenueCat (USA). For notifications, your notification token is sent to the Apple (APNs) / Google (FCM) and Expo (USA) push services. If you search for a nearby Family Health Center (ASM), your location at that moment is sent to the OpenStreetMap (Overpass) service to fetch the results; it isn’t linked to your account and isn’t stored.

The caregivers you invite can see your entries according to the role you give them. Other than that, we don’t share your data with any ad network, data broker or marketer without your explicit consent. Only if you turn on ad measurement (with iOS tracking permission + marketing consent), your device’s advertising ID and the app install/open event are sent to Meta (USA); your health and entry data never go into this measurement. All transfers are encrypted with TLS.

5 · Local storage & cookies

The mobile app keeps your preferences and offline entries on your device (local storage). We don’t use advertising or tracking cookies. This website doesn’t place cookies on visitors or store information in the browser either. For details, see the Cookie Policy.

6 · Security

Data is encrypted in transit with TLS, and access is restricted with row-level security (RLS) rules — only you and the people you authorize can access your data. No system is 100% secure, but we take reasonable technical and organizational measures to reduce the risk.

7 · Retention and deletion

Your data is kept as long as your account is active. When you delete your account from inside the app, your entries in the cloud and on your phone are permanently deleted. Entries you added to someone else’s baby count as that baby’s history; they aren’t deleted and stay with the baby’s owner. For step-by-step instructions, see the Data / Account Deletion page.

8 · Your rights

You have the right to access, correct, delete and port your data (Profile → Download my data) and to withdraw your explicit consent. For KVKK requests, you can write to kvkk@nenni.co; we reply within 30 days at the latest.

9 · Changes

We may update this policy from time to time. For an important change, we’ll let you know inside the app or on this page; for changes that affect how health data is processed, we’ll ask for your explicit consent again.

This English version is a convenience translation of the Turkish text. If the two differ, the Turkish text is the one that applies. Read the Turkish text.