Privacy Policy

Scope and data controller

Gebelik Takibi ve Gebelik Hesaplama provides pregnancy tracking, measurement and symptom records, reminders, premium tools, doctor consultations, test or document evaluation, video calls, appointments, community, support, and account-security features. This policy explains the processing of personal data in these features across the website and mobile app.

EGC YAZILIM SAĞLIK HİZMETLERİ LTD. ŞTİ. is the data controller. A physician's independent obligations under applicable law may also apply to a particular doctor consultation or healthcare service. Feature-specific notices and consent texts supplement this general policy for the relevant processing activity.

Categories of data processed

• Identity, contact, age-eligibility, account, phone-verification, session, device, and security information.
• Gestational week, last menstrual period, estimated due date, health statements, symptoms, medications, measurements, lifestyle records, and other health data the user chooses to enter.
• Steps, activity, sleep, heart rate, and other supported device-health data for which the user grants a separate Apple Health or Google Health Connect permission.
• Ask a Doctor messages, doctor responses, appointments, test or examination results, documents, ultrasound images, video-session information, and media uploaded by the user.
• Subscription and one-time purchase verification data, store transaction identifiers, entitlement status, support requests, notification preferences, and technical logs.
• Community profile, username, posts, comments, reactions, follow and block records, notifications, reports, moderation decisions, enforcement actions, and appeals.

Purposes and legal grounds

• To create an account, verify identity and sessions, establish the contract, and provide requested app features, based on entering into or performing the service contract.
• To operate optional personal health tracking on feature-specific explicit consent, while doctor sharing, Health synchronization, artificial intelligence, and OCR are handled under their own notice, separate choice, and special-category legal condition applicable to the specific activity.
• To verify purchase entitlements, prevent fraud and misuse, maintain information security, provide support, and comply with legal obligations.
• To send commercial communications only where the user has made a separate choice; declining does not affect access to core services, and permission may be withdrawn at any time.

Collection, recipients, and international processing

Data is obtained directly from the user, app interactions, authorized device-health sources, app stores, and security or support records by automated or partly automated means. A permission-based source is not enabled until the user makes the relevant operating-system or in-app choice.

To the extent necessary for the service, data may be shared with providers of hosting and content delivery, notifications, SMS, video infrastructure, purchase verification, security, support, artificial intelligence, or OCR; with legally authorized public bodies; and with the doctor or clinic expressly selected by the user. Health data is not used for targeted advertising, data sales, or third-party advertising profiles.

If a provider's infrastructure causes data to be processed abroad, an available adequacy decision or appropriate safeguard under the KVKK and other applicable law must be established and operationally verified before transfer. Explicit consent is not a general basis for regular transfers and may be considered only for an occasional transfer that meets the statutory conditions. Current processing must be assessed against the relevant feature notice and verified vendor records.

Retention and security

Data is retained for as long as necessary for its purpose, the contractual relationship, limitation periods, financial records, disputes, medical records, or other statutory retention duties, and is then deleted, destroyed, or anonymized. Backup copies of data deleted from the primary system are placed into deletion or separation according to the technical cycle of the relevant backup infrastructure and applicable retention duties; no unverified fixed period is promised. Risk-proportionate measures such as access controls, role separation, encryption, logging, backups, security testing, and incident response must be implemented and operationally verified for the relevant system; no system is represented as providing absolute security.

Rights, choices, and contact

• Requests under the KVKK to obtain information, correct, delete or destroy data, learn recipient groups, object, or seek compensation may be sent to [email protected]. Applicable local law may separately grant rights to restrict processing, data portability, withdraw consent, and complain to a competent data-protection authority.
• Account deletion may be initiated through the account and privacy area in the app or, if the app cannot be accessed, through the support channel on the public account-deletion page. A request for a data copy or export may be sent to [email protected] or [email protected]. Feature permissions may be managed where available in the relevant feature or operating-system settings; otherwise a request may be sent through the same channels.
• Technical support is available at [email protected] and security reports at [email protected]. Identity verification may be requested to the extent necessary to prevent access to another person's data.
• This policy may be updated when the product, vendors, or law changes. Material changes are announced through appropriate channels before they take effect; where new explicit consent is required, the user is given a separate choice.