Moti Aile privacy policy

This policy explains personal data processing in the Moti Aile mobile app provided by Faruk Kaledibi and its web version at app.motiaile.com. Faruk Kaledibi is the data controller for Moti Aile. For privacy questions and requests, contact merhaba@motiaile.com.

1. Scope

Moti Aile is designed for parents and children to use together. Accounts and family records are managed by a parent or caregiver; exercises for ages 3–6 are intended for children to use with a parent or caregiver. Sign-in is through Apple or Google; accounts, authentication and family records are provided through Supabase. The web version uses the same account and family records as the mobile app; notifications, the home screen widget and purchases are available only in the mobile app. A selection of 12 activities in each age group and their linked exercise sections for ages 3–6 can also be used free as a guest. A free account saves the first child profile, shelf and observations. The full activity catalogue, all linked exercises, additional child profiles and new family invitations require one family member to have active Moti Plus access. Child profiles, observations, schedules and optional height/weight measurements entered by a parent are processed to provide the service. You can add photos you select or take in the app to observations and profiles. There is no HealthKit connection, automatic transfer of health data or medical assessment feature.

2. Data processed and its purposes

Account and sign-in

The user identifier, email address and, where available, your name shared by Apple or Google sign-in are processed. With Apple’s Hide My Email option, we receive the relay address created by Apple instead of your actual email address. When signing in with Google, Google may share your Google account name, email address and profile photo link. Moti Aile does not receive your Apple or Google password and does not access the contents of your emails or your contacts.

This information, together with your Moti Aile account identifier and session tokens, is used to create your account, authenticate you, maintain your session, protect your account and manage your subscription access. Account data is stored on Supabase. Sign-in and security logs may contain your IP address, request time and technical information about your device or app.

Family, child profiles and observations

The family name, parent name, child name or nickname, optional date of birth, school/class and school hours, observation text, date/time, activity-related selections, person adding the record and weekly schedule you enter are stored on Supabase. You do not need to enter your child’s real name; you can use a nickname and leave the date of birth blank. Do not enter medical records or unnecessary sensitive information. Saved activities and notification preferences are associated with your account.

Family members who join with an invitation code can view and edit the child profiles, observations and schedules in the same family. The family owner can revoke an invitation or remove a member; members can leave the family. The invitation code, validity period and membership information are processed to manage access. Records are not published in a public feed. Share the invitation code only with people you want to access this information.

Photos and height/weight records

If you choose to add a photo to family observations, child profiles or your own profile, only the photo you select or take in the app is uploaded to your family’s private storage on Supabase. Photos are associated with observations, child profiles or your own profile, and your current family members can see them. Photo selection and camera access are optional; your entire library is not transferred automatically. Viewing links are valid for at most one hour. Once membership ends, new links cannot be obtained; previously issued links may provide access until they expire. Photos may be cached on the device; the app clears its own photo cache when the account or family changes.

Optional height and weight measurements are stored on Supabase with the measurement date and relevant child profile and shared with your current family members. These records are used only to record and list measurements and compare them with previous records; they are not used for advertising, health research or medical diagnosis. Adding measurements is optional; you can delete the records in the app. Enter this information about your child only if you are authorised to share it.

Audio and photo records kept on the device in workshops

In versions with audio story recording, microphone permission is requested only when “Record my voice” is selected; recording is optional and lasts at most 60 seconds. The audio recording is kept as a temporary file on the device; it is not uploaded to Supabase or another server or shared with family members. You can listen to it or delete it with “Remove recording”. The temporary file is cleared when the recording is removed, replaced with a new one or when you leave the activity. You can continue with other activities without allowing microphone access.

Selections and optional photos in workshops with a nature observation journal are kept only on this device, separately for the account in use; they are not uploaded to the family account’s cloud records, synced to other devices or shared with family members. The journal keeps the most recent 12 entries. In the mobile app, an app-owned copy of the photo is stored locally on the device; in the web version, it is stored in the browser’s local storage. When you delete a journal entry or an older entry falls outside the limit, its app-owned photo copy is also cleared; the original photo in your device’s photo library is not changed. This local journal is separate from the observations described above that are shared with your family in the cloud.

Subscription and coupons

Payments are processed by Apple. Transaction and product identifiers, subscription status, purchase and expiry dates and verification records are processed to verify purchases, provide paid access and track renewals, cancellations and refunds. These records are associated with your Moti Aile account. RevenueCat uses your Moti Aile user identifier and purchase history for subscription verification, access management and subscription analytics. Access status is also checked by Supabase server functions. Your full card number, card security code and bank details are not sent to Moti Aile.

Active Plus access is shared with existing members of the same Moti Aile family; this sharing is separate from Apple’s Family Sharing service. If you use a coupon code, coupon verification and redemption records, account identifier, attempt time and, where applicable, the end date of free Plus time are processed on Supabase. The coupon itself is stored as a one-way hash rather than in plain text. The purpose is to validate the coupon, manage the access period and prevent abuse. A free coupon does not start a payment or automatic renewal. A discount coupon only selects a special Apple subscription plan; payment begins with your Apple confirmation.

Optional notifications

If you allow notifications, the device’s push token, platform, app and project identifiers and technical installation token are sent to Expo to register notifications. Network information such as your IP address may also be processed during the connection. Expo stores push tokens for delivery. The device’s push token, installation identifier, platform and permission status are also stored on Supabase in association with your account; this device’s registration is removed when you sign out. When a message is sent, the token and message content are processed by Expo and Apple Push Notification service. Local notifications are scheduled on your device. Tokens are not used for advertising tracking.

The permission prompt appears when you choose to enable notifications in Settings. If you previously granted permission, registration may be refreshed when the app opens or becomes active again. Declining notifications does not prevent access to the guide. If you enable notifications for new family observations, you may receive a notification when another member of the same family adds an observation. The lock screen message may contain the sender’s name; the observation text, child’s name and photo are not sent.

Product usage measurement

To improve Moti Aile, we carry out first-party usage measurement associated with your account. Events such as opening the app, the fixed name of the screen viewed, the catalogue identifier of an opened activity or exercise, viewing the Plus screen, completing family setup and adding a new observation are recorded on Supabase with random event and session identifiers, time, platform (iOS, Android or web), app version and distribution channel. The first and last measured usage times are stored with your account.

Observation text, child or school names, child or observation identifiers, photos, height/weight measurements, your email address and page URLs are not sent for measurement. These records are not anonymous; they are associated with your account and used only in aggregate reports to understand how Moti Aile is used. Measurement data is not sent to a third-party analytics service or advertising network. No measurement takes place without sign-in.

Family cache on the device and offline use

A copy of the most recently successfully synced family records and changes not yet sent to the server are kept on this device specifically for your account. This copy may contain family and child profiles, observations, schedules, measurements, preferences and stored paths for photo files; photos themselves are subject to separate caching rules. The mobile app uses the device’s encrypted storage, while the web version uses the browser’s localStorage. These browser records are not additionally encrypted by the app.

When the server cannot be reached, the same account can view an approved family copy offline for up to 7 days after its last verification. An expired copy is not used for offline startup; expiry alone does not mean the file has been deleted from the device. A sign-in, authorisation or membership error does not grant offline access. Unsent changes are kept separately for resynchronisation. The approved family cache is cleared on sign-out or account change. Personal home screen widget information is not published from the offline family copy until it has been verified again on the server.

Web version

When you use the web version, your session information, unsent records and usage measurement queue are kept in your browser’s local storage; in the mobile app, this information is stored in the device’s encrypted storage. When you sign out, session information, the approved family cache and unsent usage measurement records are deleted; you can remove all local records by clearing your browser’s site data. The web version does not use advertising or tracking cookies. When adding a photo, only the file you select is uploaded; the web version does not use the camera. The hosting service serving the web pages may process connection information such as your IP address, request time, browser and device type.

Updates and support

Update requests to the Expo EAS Update service may involve processing the platform, app and update version, project and installation tokens and connection information such as your IP address. The purpose is to deliver a compatible update, maintain security and resolve technical problems.

If you send a support email, your address, message and any files or technical information you attach are processed to respond to your request. You do not need to send children’s personal or sensitive information.

3. Collection methods and legal bases

Account data is obtained from Apple or Google and your sign-in process; family, child profile, observation and schedule information from entries by you and family members you invite; subscription information from Apple’s purchase and verification services; technical information from network requests; and support information from the email you send. Account, sign-in and subscription access processing is based on entering into or performing a contract; security, troubleshooting and product usage measurement on legitimate interests, provided your fundamental rights are not harmed; and legally required processing on legal obligations. Dispute records may be kept to establish, exercise or defend a right.

Displaying notifications depends on the optional permission you grant on your device. Where processing requires explicit consent, it is obtained separately; reading this policy does not mean you have given explicit consent.

4. Sharing and service providers

• Supabase: hosting account, family membership, child profile, observation, photo, height/weight measurement, schedule, preference, code redemption, device notification and product usage measurement records; authentication and access control.
• RevenueCat: purchase history associated with the user identifier, subscription verification, access management and subscription analytics.
• Apple: Sign in with Apple, App Store payments, subscription verification and iOS notifications.
• Google: Sign in with Google.
• Expo: app updates and notification delivery.
• Web hosting providers: serving this promotional website (Cloudflare) and the web version.
• Email providers: delivering and storing support correspondence.

Data is shared only to the extent necessary for the stated purposes. We do not sell or rent your data or share it with advertising networks. Necessary information may be provided to authorised public bodies where there is a legally valid obligation. We require providers to afford shared data protection at least equivalent to that described in this policy.

Depending on the Supabase project’s hosting region and providers’ infrastructure, data may be processed outside Türkiye, including in the United States and other countries. Transfers are subject to the requirements of applicable law; this policy alone is not permission for a transfer. Relevant documents: Supabase privacy policy, Supabase data processing addendum, RevenueCat privacy policy, Apple privacy policy, Google privacy policy, Expo privacy policy and Cloudflare privacy policy.

5. Retention and deletion

• Account, family, child profile, photo, height/weight, observation and schedule data is retained while your account remains open and it is needed for the service. When the account is deleted, associated personal data that is not legally required to be retained is also deleted or made no longer identifiable to you.
• Subscription records are retained for as long as needed to manage your access; required payment, refund and dispute records are retained for the period required by the relevant legal obligation or protection of a right. Records kept after deletion are limited to these purposes.
• Raw product usage measurement event records are deleted after 90 days. When an account is deleted, measurement records and usage times are also deleted.
• Support correspondence is retained while resolving your request and conducting necessary follow-up; it is deleted when no longer needed and when any legal retention or protection-of-rights requirement has ended. You can request deletion through our support address.
• This device’s Supabase notification registration is removed when you sign out; associated device records are also deleted when the account is deleted. Registration may be renewed while permission is enabled. Notification registration in the operating system and Expo is separate. For the local cache, you can use iOS’s “Delete App” option; “Offload App” may retain data. The approved family cache is cleared on sign-out or account change; the 7-day limit is a limit on offline availability. Remaining local records in the web version are deleted when you clear your browser’s site data. You must manage device and iCloud backups separately.
• Providers’ technical logs and any backups are subject to the relevant service’s retention cycles. Deleting the app from your device does not delete your cloud account or past service records. Deleted data in backups is not restored for normal service use and is removed at the end of the backup cycle.

When you remove a photo, its associated observation or a profile, deletion is carried out for files that are no longer used. When the family owner’s account is deleted, family photos and height/weight records are also within the scope of deletion. If a member deletes their account, their profile photo and personal coupon records are cleared; shared family records are retained. Copies previously downloaded to other devices are under the control of the person using the relevant device.

Deleting your account

You can start deleting your account and associated personal data with the account deletion option in the app. Confirmation and reauthentication with the same Apple or Google account are required. When the family owner’s account is deleted, that family’s child profiles, observations, schedules and memberships are deleted. When a family member’s account is deleted, their membership is removed; other family members’ shared records are retained. Account deletion does not delete your Apple or Google account itself. You can separately revoke Apple sign-in permission under iPhone Settings → Apple Account → Sign in with Apple → Moti Aile, or Google access in your Google account’s third-party connections section; permission is not automatically revoked from the server.

Account deletion does not automatically cancel your subscription. To stop Apple’s billing, separately cancel your subscription in the App Store subscription settings. Details are explained in the Terms of use.

6. Managing permissions and preferences

You can turn off notification permission in your device’s Moti Aile notification settings; this prevents future notifications from being displayed. You can also revoke sign-in permission in Apple’s or Google’s connected apps section. Revoking permission alone does not delete your Moti Aile account or cancel your subscription. Withdrawal of permission does not retrospectively affect processing lawfully carried out beforehand. You can manage camera and photo access in your device’s Moti Aile permission settings. Turning off permission does not delete a photo you previously uploaded; you can separately remove the photo in the app.

7. Advertising, analytics and children’s privacy

The mobile app and web version contain no advertising, use of advertising identifiers, cross-app or cross-site tracking, behavioural advertising analytics, third-party analytics service or separate error tracking SDK. First-party product usage measurement, RevenueCat subscription analytics and service providers’ technical logs are described above. Camera and photo access are used only when you choose to add a photo. In versions with audio story recording, microphone access is requested only when the user starts a recording. Access to contacts, location or HealthKit is not requested. Height/weight records you enter manually are processed only for the purposes described above.

Children can use exercises for ages 3–6 with a parent or caregiver. Exercises open within the family session; children are not asked to create separate accounts, enter their names or share personal information. Child profiles and observations are entered by parents or family members they authorise. Enter only information you are authorised to share and oversee invited members’ access. You can contact us with deletion or correction requests.

8. Security and your rights

We limit data processing to necessary information, use HTTPS for service connections and restrict data access to authorised people. No electronic system can guarantee absolute security.

Under Türkiye’s Personal Data Protection Law (KVKK) and other applicable legislation, you can learn whether your data is processed, the purposes and recipients; request information, correction, deletion or destruction where the conditions are met, and notification of these actions to recipients. You can object to an adverse result arising solely from automated analysis and seek compensation for damage caused by unlawful processing. Where applicable, your rights to data portability, restriction of processing, objection and complaint to a competent data protection authority also remain available.

You can send requests to merhaba@motiaile.com. We may request the minimum information necessary to verify your identity. Requests are answered within the periods required by applicable law.

9. Website and changes

This policy covers the Moti Aile mobile app and web version. Opening this promotional website in a browser may result in its hosting service, Cloudflare, processing connection information such as your IP address, page request, browser and device type. Visits, page views, referring sites, country, device type and page performance on the promotional website are measured in aggregate with Cloudflare Web Analytics. This measurement is not associated with your app account or child profiles; no analytics, advertising or tracking cookies are used, and people are not tracked across sites. In the current configuration, visitors connecting to Cloudflare data centres in the EU/EEA are excluded from measurement. Details: Cloudflare Web Analytics, measurement and privacy information and the Cloudflare privacy policy.

The promotional website initially selects Turkish for connections from Türkiye and English for other countries using Cloudflare’s connection country. If you use the language selector, a moti-language cookie stores only this preference for one year. This cookie is not linked to your app account and is not used for analytics or advertising.

If data processing practices change, we update this policy and its revision date. We announce significant changes in the app or here and separately request consent where legally required for new processing.