Legal

Privacy Policy

Effective date: [YÜRÜRLÜK TARİHİ]. This policy applies to the Nanabi Android app and to nanabi.app.

The short version

Nanabi is for parents. We do not ask for your name, email address, phone number or a password. Your account is anonymous.
About each child you add, we store only the birth month and year and an optional nickname. No photos, no exact birth date, no health records.
We do not sell your information. We use AppsFlyer to measure our own ads, and you can turn this off.
You can delete your data at any time in the app or by email. See Delete your data.

1. Who we are

Nanabi is a weekly development guide for parents of children aged 0 to 4, with step-by-step programs for hard phases such as night wakings and night weaning. It gives general information, not medical advice.

Nanabi is provided by [ŞİRKET UNVANI], a sole proprietorship registered in Türkiye, [ADRES], tax number [VERGİ DAİRESİ VE NUMARASI] ("we", "us"). We decide how your information is used, so we are the controller of your personal information (in Türkiye, the veri sorumlusu).

Contact: privacy@nanabi.app. Person responsible for privacy: [GİZLİLİK SORUMLUSU ADI VE UNVANI].

Nanabi is currently offered in the United States, Canada, Australia, New Zealand and Türkiye. A Turkish version of this policy, which also serves as our notice under the Turkish Personal Data Protection Law (KVKK), is at nanabi.app/tr/gizlilik.

2. Information we collect

We collect only what the app needs to work. Everything below comes from you or from your device while you use the app.

Anonymous account

When you first open Nanabi, Firebase Authentication (Google) creates a random account identifier. It is not linked to your name, email address, phone number or Google account, and there is no password.

About your children

For each child you add: the birth month and year (not the day), so we can show the right week, and an optional nickname, which you can leave blank or set to any word.

Your choices and progress

The topic you pick as the hardest right now for each child, for example night wakings and sleep, or night weaning (we call this a track).
Which activities and lessons you complete, and when.
Settings such as your reminder day and time and app language.

This is stored in Cloud Firestore (Google). See also our Consumer Health Data Privacy Policy.

Notifications

A push notification token from Firebase Cloud Messaging (Google), so we can send the reminders you ask for.

Crash reports

If the app crashes, Firebase Crashlytics (Google) collects a crash report with technical details such as device model, operating system version, app version and an installation identifier.

Subscription

RevenueCat receives an anonymous app user identifier and your purchase and subscription status (which plan, when it started, whether it is active). Payment is handled by Google Play. We never see your card or bank details.

Ad measurement

AppsFlyer receives your device's Android advertising ID, device and installation information (for example device model, operating system, app version, install time and the ad campaign, if any, that led to the install) and certain in-app events such as first open and subscription purchase. See section 6 to turn this off.

3. What we do not collect

Your name, email address, phone number, postal address or a password.
Your child's name (unless you choose to type it as a nickname), exact birth date or photos.
Health information such as medication, allergies, weight, symptoms or diagnoses. The app has no free-text fields.
Your contacts, precise location, photos, camera or microphone.
Data from a separate product analytics tool. We do not use one.

If you email us, we receive your email address and whatever you write. We use it only to answer you.

4. How we use information

To provide the app: show the guide for each child's age, run the track you picked, save your progress and send your reminders.
To manage your subscription: check whether you have an active subscription and restore it on a new install.
To keep the app working: find and fix crashes.
To measure our advertising: learn which of our ad campaigns lead to installs and subscriptions. Nanabi does not show ads.
To answer you and meet legal duties: handle your requests, keep required records, and respond to lawful requests from authorities.

We do not make decisions about you that have legal or similarly significant effects based only on automated processing. The weekly content you see is selected by a simple rule: your child's age and the track you chose.

We share information only with the service providers that run Nanabi for us, and only what each one needs:

Google: Firebase Authentication, Cloud Firestore, Firebase Cloud Messaging and Firebase Crashlytics (hosting, account, notifications, crash reports). Google Play processes your payment under Google's own terms.
RevenueCat: Subscription status and purchase records.
AppsFlyer: Ad measurement. AppsFlyer may tell the advertising platforms where we run ads (for example Meta) whether an install or subscription came from their ad.

We do not send your tracks, your progress or your children's details to AppsFlyer or to any advertising platform.

We may also disclose information when the law requires it, to protect rights and safety, or to a buyer or successor if our business is transferred, in which case this policy continues to apply to your information.

We do not sell your personal information for money or anything else of value. Under some US state laws, ad measurement through AppsFlyer may be called "sharing" for advertising. You can opt out as described below.

6. Ad measurement and your choices

In Nanabi, go to [Settings > Privacy and data > Ad measurement] and turn it off. AppsFlyer then stops receiving data from your device.
On Android, you can delete or reset your advertising ID (Settings > Privacy > Ads, or Settings > Google > Ads, depending on your device). Once deleted, apps receive no advertising ID.

Turning off ad measurement does not change how the app works for you.

7. How long we keep it

Account, child, track, progress, settings: Until you delete your data, or automatically about 13 months after you last used the app. Deletion is completed within 30 days, including backups.
Push token: Until you delete your data, or earlier if the token expires.
Crash reports: 90 days (Firebase Crashlytics standard retention).
Subscription records: Your RevenueCat link is removed when you delete your data. Transaction records that we, RevenueCat or Google must keep for tax and accounting are kept for the period the law requires.
Ad measurement: [APPSFLYER SAKLAMA SÜRESİ], linked to your advertising ID, not to your Nanabi data.
Emails to us: As long as needed to handle your request and show that we did, and no longer than 3 years.

8. Where your information is processed

We are based in Türkiye. Our service providers store and process information outside your country: Cloud Firestore data is stored in [FIREBASE BÖLGESİ]; other Google services, RevenueCat and AppsFlyer process data in the United States, the European Union, Israel and other countries where they or their sub-processors operate.

When your information is in another country, it may be accessible to that country's courts and authorities under its laws. We use contracts with our providers that require them to protect your information. For users in Türkiye, the transfer safeguards required by KVKK Article 9 are described in the Turkish notice.

9. Security

Information travels between the app and our providers over encrypted connections, and Google encrypts stored Firebase data. Access to our systems is limited to the people who run Nanabi. No method is perfectly secure; if a breach affects you, we will notify you and the relevant regulators as the law requires.

10. Your rights and how to use them

Wherever you live, you can ask us to:

tell you what information we hold about you and give you a copy;
correct it (you can also change your children's details and settings in the app);
delete it (in the app: Settings > Privacy and data > Delete my data);
stop ad measurement (see section 6);
withdraw any consent you gave.

How we recognise you. Because your account is anonymous, we cannot look you up by name or email. In the app, open Settings > Privacy and data and copy your Support code, then email it to privacy@nanabi.app with your request. If you subscribed, you can also include your Google Play order number (it starts with "GPA."). Without one of these we cannot find your data.

We reply as soon as we can, and within the time your local law sets (for example 20 working days in New Zealand, 30 days in Australia, Canada and Türkiye, and 45 days in California). Requests are free. We will not treat you differently for using your rights.

If you are not happy with our answer, you can contact your privacy regulator (listed in the sections below).

11. Children

Nanabi is made for parents and caregivers aged 18 and over. It is not directed to children, children should not use it, and its content addresses the adult. We do not knowingly collect personal information from children under 13 (or the age set by your local law).

The limited details about a child that Nanabi stores (birth month and year and an optional nickname) are entered by the parent, to personalise the parent's guide. If you believe a child has used Nanabi or given us information, contact us and we will delete it.

12. United States, including California and Washington

California (CCPA, as amended by the CPRA)

This section is our notice at collection and privacy policy for California residents, to the extent California law applies to us. In the past 12 months we collected the following categories, from you and your device, for the purposes in section 4:

Identifiers: Anonymous account ID, RevenueCat app user ID, push token, Crashlytics installation ID, Android advertising ID. Disclosed to Google, RevenueCat and AppsFlyer as service providers. The advertising ID and install information may be "shared" for cross-context behavioral advertising through AppsFlyer.
Commercial information: Subscription and purchase status. Disclosed to Google and RevenueCat.
Internet or other electronic network activity: Progress in the app, in-app events, crash and device information. Disclosed to Google and, for in-app events listed in section 2, AppsFlyer.
Other information you provide: Your children's birth months and years, optional nicknames, tracks and settings. Disclosed to Google only.
Sensitive personal information: Your track may be treated as information concerning health. We use it only to provide the app and do not use it to infer characteristics about you, so the right to limit does not apply.

Retention for each category is in section 7. We do not sell personal information, and we do not knowingly sell or share the personal information of consumers under 16.

You have the right to know, access, correct and delete your personal information, to opt out of sharing for cross-context behavioral advertising (see section 6), and not to be discriminated against for using these rights. You can use an authorized agent; we may ask the agent for proof of authorization and ask you to confirm the request with your Support code. Our website has no ad tracking. In the app, opting out is done in settings (section 6).

Other US states

We offer the same rights to residents of every state. If we refuse a request, you can appeal by replying to our answer with "Appeal" in the subject line; we will respond within 45 days, and if we still refuse, you may contact your state attorney general.

Washington, Nevada and consumer health data

Some state laws treat information such as the track you choose as consumer health data. Our separate Consumer Health Data Privacy Policy explains how we handle it and how to use your rights.

13. Canada

We handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. By using the app, you consent to the processing described here; you can withdraw consent for ad measurement at any time in settings, and for everything else by deleting your data. The person responsible for privacy, including for Quebec residents, is named in section 1.

Your information is stored and processed outside Canada (section 8). You can access and correct your information as described in section 10. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca).

14. Australia

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988. You can use Nanabi under a pseudonym: we never need your name. Your information is likely to be disclosed to recipients in the United States, the European Union, Israel and Türkiye (section 8).

You can access and correct your information as described in section 10. To complain, email us first; we will respond within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).

15. New Zealand

We handle personal information in line with the Privacy Act 2020. You have the right to access and ask for correction of your personal information (section 10). Where we disclose your information overseas (section 8), we rely on contracts with our providers that protect it in a way comparable to New Zealand law. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner (privacy.org.nz, 0800 803 909).

16. Türkiye

For users in Türkiye, our notice under KVKK Article 10 (aydınlatma metni), including the legal grounds for processing, cross-border transfers and your rights under Article 11, is in the Turkish version of this policy. Where the two versions differ for users in Türkiye, the Turkish version prevails.

17. Changes to this policy

If we change this policy, we will update the effective date above. If a change materially affects how we use information you have already given us, we will tell you in the app before it takes effect and, where the law requires, ask for your consent.

18. Contact

[ŞİRKET UNVANI], [ADRES]
Email: privacy@nanabi.app