Effective date: 2026 · Data controller: Digiboss, Türkiye

This privacy policy applies to the Digiboss Ebeveyn web parent panel and the Android child app. The iOS version is not published; this policy will be updated when it is released.

1. Data controller and contact

The data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK) is Digiboss. Address: Kalkınma Mahallesi, Farabi Caddesi No: 9A, Ortahisar / Trabzon, Türkiye. For privacy and data requests, contact app@digiboss.net.

2. Data we collect

• Account data: e-mail address, an irreversible password hash, session and refresh tokens.
• Family and child profile: the child’s nickname and age band; family/membership scope. A real name is not required.
• Device information: make, model, platform and app version; the device public key and pairing state.
• Usage and activity data: per-app usage durations, daily total time, rule revisions and application receipts.
• Safety events: help signal, “call me”, suspected coercion and protection-off events; a limited optional note written by the child.
• Technical logs: error and security records; passwords, tokens or child content are not written to these logs.

3. Data we do not collect

The product does not collect or read:

• Message contents, SMS or call records.
• Contact list.
• Screen content or screenshots.
• Location.
• Microphone and camera.
• Advertising identifier; there is no ad network, data broker or data sale.
• Child behaviour profiles or automatic coercion detection.

4. Purposes of processing

Data is processed only for: account creation and authentication; family/child/device management; device pairing; enforcement of time and quota rules; usage summary and activity history; showing safety events to the parent; responding to support requests; service security and debugging; and legal obligations.

5. Children’s data

A child profile is created only under a parent/guardian account and within the scope managed by the parent. Child data is not used for advertising or marketing, is not sold and is not used to train AI. The child screen has no advertising, payment pages or sales pressure. The child sees which parent manages the device.

6. Retention and deletion

Account data is kept until the account is deleted. Usage and activity data is targeted for 30-day retention; the automatic purge worker is still planned and this policy will be updated when it ships. When the period ends, data is deleted, destroyed or anonymised. You can delete your account in the app or send a request to app@digiboss.net.

7. Sharing

Data is not shared with third parties for advertising and is not sold. It may be shared only with infrastructure providers used to deliver the service (hosting, e-mail, error monitoring) and, where legally required, with competent authorities to the extent of the request. This policy will be updated as infrastructure providers are selected.

8. Your rights

Under KVKK you have the right to learn whether your personal data is processed, to request information, to request correction, deletion or destruction, to learn the third parties to whom data is transferred, and to request compensation for damage. Send requests to app@digiboss.net. Requests concerning a child’s data are made by the parent/guardian.

9. Store compliance

This policy uses the same data inventory declared in App Store and Google Play store forms. The fixed address of this page will be used in store forms: /gizlilik/digiboss-ebeveyn. No download link is provided until the app is published in the stores.

10. Changes and contact

This policy may be updated. Material changes update the effective date and version; an in-app notice is provided where required. Questions: app@digiboss.net · +90 544 908 52 61 · Kalkınma Mahallesi, Farabi Caddesi No: 9A, Ortahisar / Trabzon, Türkiye.