This Privacy Policy explains how personal data of users ("you") of the Mommy & Mini mobile app ("App") is processed under the EU General Data Protection Regulation ("GDPR"), the UK GDPR, and Türkiye's Personal Data Protection Law No. 6698 ("KVKK").
The App is offline-first: your health, menstrual cycle, pregnancy and baby tracking data is stored locally on your device by default. Data is sent to our servers only via the optional "Cloud Backup / Sync" feature that you enable with your explicit consent. Unless you enable it, this data never leaves your device.
| Entity | AD MODERN TANITIM MEDYA ORGANİZASYON LİMİTED ŞİRKETİ |
|---|---|
| Address | Mustafa Kemal Mh. 2155. Cd. No:4/18 Ankara 06530 Türkiye |
| info@app-modern.com | |
| Website | https://app-modern.com |
| Category | Data | Source |
|---|---|---|
| Identity | Display name | You / Apple-Google sign-in |
| Contact | Email; phone (only when posting a marketplace listing) | You / sign-in provider |
| Special Category — Health (GDPR Art. 9) | Period/cycle, ovulation, pregnancy week, weight, blood pressure, heart rate, medications, mood, baby growth/vaccines/feeding | You |
| Journal (free-text notes) | Your own diary/journal notes; being free text they may contain special-category (health/emotional) content and are protected with the same safeguards | You |
| Location | City (chosen by you; no device location services used) | You |
| Photos | Marketplace listing photos | You |
| User Content | Listing text, user-to-user messages | You |
| Security / Diagnostics | Crash logs, performance data, account ID (redacted) | Automatic |
| Advertising (limited) | Advertising identifier (IDFA/AAID), ad interaction. Ads are not personalized — the identifier is used only for frequency capping, fraud prevention and aggregate measurement | Automatic |
| Financial (limited) | Pro subscription status/transaction ID. Card/payment details are collected by Apple/Google, never by us. | App Store / Play |
| Processing | Legal Basis |
|---|---|
| Health data on device | Art. 9(2)(a) — your explicit consent + provision of the core service |
| Health data cloud sync | Art. 9(2)(a) — separate explicit consent |
| Journal (free-text) notes processing/sync | Art. 9(2)(a) — explicit consent, as they may contain special-category content |
| Account, authentication, session | Art. 6(1)(b) — performance of a contract |
| Marketplace, messaging, moderation | Art. 6(1)(b) contract & Art. 6(1)(f) legitimate interests |
| Crash/diagnostics, security | Art. 6(1)(f) legitimate interests |
| Non-personalized advertising + limited identifier use | Art. 6(1)(f) legitimate interests (no personalization → no consent required) |
| Legal obligations | Art. 6(1)(c) legal obligation |
| Processor | Purpose | Data |
|---|---|---|
| Supabase (EU / Frankfurt) | Cloud database, auth, storage (optional sync) | Account, health, content |
| Google AdMob | Ad serving/measurement | Advertising ID, usage |
| Sentry (EU/Germany) | Crash/diagnostics | Error logs, account ID (redacted) |
| Apple / Google | In-app purchase, notifications (APNs/FCM) | Device/subscription tokens |
Under GDPR (Chapter V) and Turkey's KVKK (Art. 9, as amended by Law No. 7499 of 2/3/2024), transfers abroad are made on the basis of (i) an adequacy decision, (ii) appropriate safeguards (e.g. Standard Contractual Clauses, binding corporate rules, written undertaking), or (iii) where neither exists, on an occasional basis with your explicit consent after you are informed of the possible risks (KVKK Art. 9(6)(a); GDPR Art. 49).
You have the right to access, rectify, erase, restrict and object to processing, data portability, to withdraw consent, not to be subject to solely automated decisions, and to lodge a complaint with a supervisory authority (in Türkiye, the KVKK Board). You can also use the in-app data export and account deletion features.
Send requests to info@app-modern.com. We respond within 30 days.
The App is intended for users aged 18 and over. We do not knowingly collect data from minors; such data is deleted if identified.
We use SDKs for advertising (AdMob), diagnostics (Sentry) and notifications. Ads are not personalized; your advertising identifier is not used for behavioural profiling — only for frequency capping, fraud prevention and aggregate measurement. The App works fully even if you decline the iOS App Tracking Transparency (ATT) prompt.
We apply TLS-encrypted transport, row-level access control (RLS), authorization, log redaction and regular security reviews. Where required, data breaches are reported to affected users and the relevant authority without undue delay (within 72 hours of becoming aware, per the Turkish DPA's principle decision and GDPR Art. 33).
We may update this policy; significant changes will be notified in the App. The current version is always published at this address.
The following are subject to your explicit consent within the meaning of KVKK Art. 3(1)(a) (specific, informed and freely given). Consent is not a precondition for using the App. You are not required to consent; if you decline, only the related feature is unavailable and core (offline) use is unaffected.
No consent is requested for advertising: ads are not personalized and are processed under legitimate interests (Art. 6(1)(f)).
You may withdraw consent at any time in Settings or via info@app-modern.com.