Privacy Policy

Last updated: 23 September 2026

This Privacy Policy explains how hera (the “App”, “we”, “us”) collects, uses, shares and protects your information, and your rights under the EU General Data Protection Regulation (GDPR) and Türkiye’s Personal Data Protection Law No. 6698 (KVKK). By using the App you agree to this policy.

1. Data controller

The data controller responsible for your personal data is Alperen Aydın (the operator of hera). For any privacy question or request, contact: herabebekapp@gmail.com.

2. Information we collect

Account information

• Email address, display name, role (mother / father / other) and an optional profile photo.

Data you enter about your baby

• Baby profile: name, birth date, due date, gender and birth measurements, optional photo.
• Tracking records: feeding, sleep, diapers, health (temperature, medicines, vaccines, doctor visits), growth measurements and activities.
• Memories: photos and optional captions you choose to add.

Some of this is health data and is treated with extra care — see section 4.

Data you enter about yourself

• If you choose to, you can keep a log of your own during and after pregnancy: medicines or supplements you take, your weight, your mood and any symptoms, and pregnancy records such as kick counts and contraction timings.
• This is health data about you rather than about your baby, so it is processed on your own explicit consent — see section 4.

Messages you send us

• If you write to us through the in-app feedback form, we store your message along with your account identifier, app language, app version and platform, so that we can understand and answer it.

Purchase information

• Subscription status, managed through our payment provider RevenueCat and the Apple App Store / Google Play. We never receive or store your card details.

Technical data

• Basic device and diagnostic data needed to run the service and keep it reliable.
• Reminders are scheduled as local notifications and stored only on your device — they are not sent to our servers.
• If you allow notifications, a push notification token (via Firebase Cloud Messaging) is stored on your account so we can send service messages and occasional product updates or tips. Devices are grouped only by subscription tier (premium / free) so announcements stay relevant. The token is removed when you sign out, and you can turn notifications off anytime in your device settings.
• App settings and metadata stored with your account: language, time zone, app version, platform, and the time of your most recent tracking entry. We use these to run the App in your language and to time optional notifications sensibly — for example, if you have allowed notifications and haven't logged anything on a given day, we may send at most one gentle reminder in the evening, in your local time.
• Aggregated advertising measurement: to understand whether our ads work, we use privacy-preserving signals (Apple SKAdNetwork and Apple's AdServices attribution token, received through our subscription provider). These are campaign-level counts, not profiles — we do not collect the advertising identifier (IDFA / AD ID), we do not enable cross-app tracking, and none of your or your baby's data is shared for advertising.
• Anonymous usage analytics (such as which screens are viewed and which features are used) and crash diagnostics, to help us fix problems and improve the App. These never include your baby's health data, names or photos.

3. Legal basis for processing

We process your personal data on the following legal bases (GDPR Articles 6 and 9, and the corresponding provisions of the KVKK):

• Performance of a contract — to create your account and provide the App’s core features (Art. 6(1)(b)).
• Your explicit consent — to process the health-related information you choose to record about your baby (see section 4) and for any optional features. You may withdraw consent at any time (Art. 6(1)(a) / Art. 9(2)(a)).
• Legitimate interests — to keep the service secure and reliable, to prevent abuse, to understand usage through anonymous analytics, and to diagnose crashes so we can improve the App (Art. 6(1)(f)).
• Legal obligation — to comply with applicable laws (Art. 6(1)(c)).

4. Health (special category) data

5. How we use your information

• To provide the App and sync your data across your devices.
• To enable account sharing when you invite a partner or caregiver.
• To process and verify your subscription.
• To provide support and comply with legal obligations.
• To send optional notifications, if you have allowed them. There are four kinds and no others: service messages and occasional product updates or tips; a gentle reminder in the evening on a day when nothing has been logged; a question, at most three times in all, asking whether a baby you recorded as expected has been born — which names that baby; and a short note on the day your baby turns another month or year old, which continues for as long as the profile exists. Each kind can be switched off by us centrally, and you can turn all of them off at any time in your device settings — the same setting also controls the reminders you schedule yourself.

We do not sell your personal data, and we do not use your baby’s data for advertising.

6. Service providers

We rely on trusted processors who act on our behalf under data processing agreements:

• Google Firebase / Google Cloud (Authentication, Firestore, Storage, Cloud Functions) — hosting and data storage.
• RevenueCat — subscription management.
• Apple and Google — payment processing for in-app purchases.
• Google Analytics for Firebase — anonymous product and usage analytics.
• Sentry — crash and error diagnostics.

7. Account sharing

If you invite another person to your account, that person can view and add all of the babies, records and memories in your account. You control who you invite and can remove their access at any time.

One thing is handled differently: the personal log you may keep about yourself is not shown to the other person anywhere in the App. It is still stored inside the account you share rather than in a separate place, so please treat it as reachable by anyone who has access to that account, and invite only someone you would trust with it.

8. Data storage and security

Your data is stored on Google Firebase / Google Cloud infrastructure and transmitted over encrypted connections. We apply access controls and security rules so that only you (and anyone you invite) can access your account’s data. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

9. International data transfers

Your data may be processed on servers located outside Türkiye and the European Economic Area (for example in the United States or the EU). Where data is transferred internationally, it is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, in line with our providers’ data-processing terms.

10. Data retention and deletion

We retain your personal data for as long as your account is active. When you delete your account, your profile, babies, tracking records (including health data), memory photos and any messages you sent us through the in-app feedback form are permanently deleted from our live systems, and from backups within 30 days. One minimal record is kept indefinitely: it holds an internal identifier and a "deleted" marker, and nothing else — no name, no email, no role, no photo. It is what keeps any records you added to another person's shared account attached to an account rather than to nobody. See our Account Deletion page.

11. Your rights

Under the GDPR and the KVKK you have the right to: access your data; correct inaccurate data; delete your data (“right to be forgotten”); restrict or object to processing; data portability; and withdraw consent at any time (without affecting processing already carried out). To exercise any of these, email us at herabebekapp@gmail.com; we respond within the timeframes required by law.

You also have the right to lodge a complaint with a supervisory authority — in Türkiye, the Personal Data Protection Authority (KVKK, kvkk.gov.tr); in the EU/EEA, your local data protection authority.

12. Children

The App is intended for parents and guardians (adults) to record information about their children. It is not directed to children, and we do not knowingly collect personal data directly from children. Data about your baby is entered by you, the parent or guardian.

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notice in the App.

14. Contact

Questions about this policy or your data? Email us at herabebekapp@gmail.com.