Koza Privacy Policy
Table of Contents
- 1. Data Controller
- 2. Privacy Architecture & Principles
- 3. Categories of Data Collected
- 4. Legal Grounds & Purposes
- 5. Data Storage & Security
- 6. Third-Party Disclosures & Non-Sale
- 7. Data Retention & Deletion
- 8. Your Rights (GDPR / KVKK / CCPA)
- 9. Children's Privacy
- 10. Contact & Regulatory Inquiries
1. Data Controller Information
This Privacy Policy governs the processing of personal data by Forcell ("Company", "Developer", "We", "Us", or "Our") as the Data Controller in connection with your use of the Koza: Pregnancy & Baby Tracker mobile application ("Koza", "Application", or "App") available on iOS and Android platforms.
• Application Name: Koza (Gebelik & Bebek Takibi)
• Data Controller: Forcell Mobile Applications
• Official Website: https://www.forcell.net
• Data Protection & Privacy Contact: forcellmobileapps@gmail.com
2. Privacy Architecture & Core Principles
Koza is built upon the foundational principle of Privacy-by-Design and Privacy-by-Default. We recognize that pregnancy, reproductive health, and fetal development data constitute highly sensitive personal information.
- Local-First Storage: Your personal pregnancy journal, maternal weight records, kick logs, contraction timings, water intake, medication schedules, and clinical notes are primarily stored locally on your device in an encrypted database.
- No Commercial Sale of Health Data: We do not sell, rent, lease, or monetize your health, pregnancy, or biometric data to third-party data brokers, insurers, or advertising networks.
- Zero Intrusive Tracking: We do not deploy third-party behavioral advertising SDKs that harvest user health profiles.
3. Categories of Data Collected & Processing Scope
Depending on the features you activate and configure within Koza, we process the following data categories:
| Category | Specific Data Points | Storage Location |
|---|---|---|
| 1. User Profile & Account | First name, forum community username, user role (Mother, Father, Companion/Relative), birth date, baseline weight. | Local SecureStorage |
| 2. Maternal & Pregnancy Data (Special Category) | Last Menstrual Period (LMP), Estimated Due Date (EDD), gestational age, singleton/multiple pregnancy type, pregnancy status (Planning, Pregnant, Postpartum), baby name(s). | Local On-Device Database |
| 3. Health & Wellness Tracking | Daily hydration (water consumption logs), maternal weight logs, contraction timer records (frequency & duration), prenatal vitamin / medication intake schedules, doctor appointments & medical visit notes. | Local On-Device Database |
| 4. Community & Forum Content | Public posts (Questions, Stories, Tips), comments, replies, likes, reported content moderation flags. | Encrypted Cloud Backend |
| 5. Support & Feedback | User-submitted support tickets, bug reports, feature suggestions, optional contact email. | Encrypted Cloud Backend |
| 6. Technical & Diagnostics | Anonymous installation UUID, device model, operating system version, app build version, selected interface language, non-identifiable crash telemetry. | Encrypted Telemetry |
4. Legal Grounds & Purposes of Processing
We process your personal and health-related data in strict compliance with Article 6 and Article 9 of the EU General Data Protection Regulation (GDPR) and Articles 5 and 6 of the Turkish Law on the Protection of Personal Data (KVKK No. 6698):
- Explicit Consent (GDPR Art. 9(2)(a), KVKK Art. 6(2)): For processing sensitive health and pregnancy tracking data (LMP, due date, contraction records, medication tracking) inputted voluntarily to provide personalized developmental calculations.
- Contract Performance (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)): To deliver the core functionalities of the Koza app, manage pregnancy profiles, and provide community forum interactions.
- Legitimate Interests (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)): To maintain application security, debug runtime errors, prevent fraudulent activities or abusive forum behavior, and ensure high app reliability.
- Legal Obligations (GDPR Art. 6(1)(c), KVKK Art. 5(2)(ç)): To comply with mandatory statutory requirements, dispute resolution, and law enforcement requests where legally enforceable.
5. Data Storage Architecture & Technical Safeguards
We employ state-of-the-art administrative, physical, and technical safeguards to protect your personal data from unauthorized access, loss, alteration, or disclosure:
- On-Device Encryption: Sensitive pregnancy diaries and health metrics reside on your device utilizing SQLite (Drift) and platform-level hardware-backed KeyStore (Android) / Keychain (iOS) via Flutter Secure Storage.
- Transport Layer Security (TLS 1.3): All network communications with our cloud servers (such as community posts and support inquiries) are encrypted in transit via industry-standard HTTPS / TLS protocols.
- Access Restrictions: Administrative access to backend databases is strictly restricted to authorized engineering personnel using multi-factor authentication (MFA) and least-privilege principles.
6. Third-Party Disclosures & Non-Sale Policy
We do not sell, rent, trade, or share your personal or health data. Third-party integrations are strictly confined to essential infrastructure services:
- App Distribution Platforms: Apple App Store and Google Play Store for application delivery, verified in-app billing, and framework-level update distribution.
- Cloud Infrastructure Providers: Secure, SOC-2 compliant cloud server environments used exclusively for hosting the Koza community forum and customer support API.
- Law Enforcement & Legal Processes: Data will only be disclosed to judicial or regulatory authorities when compelled by binding legal warrants or court orders.
7. Data Retention & Absolute Right to Deletion
You have total sovereignty over your data stored in Koza:
You can permanently delete all local pregnancy profiles, water logs, weight charts, contraction records, medication logs, and cached data at any moment directly within the app by navigating to Profile ➔ Verileri Sil ve Sıfırla. To protect you against accidental loss, typing the confirmation word "onayla" is required before irreversible local wipe is executed.
For public forum posts, comments, or account identifier removal from our backend servers, you may submit a deletion request via our Account & Data Deletion Portal or email forcellmobileapps@gmail.com. We process all verified deletion requests within 30 calendar days without undue delay.
8. Your Statutory Rights (GDPR / KVKK / CCPA)
Subject to applicable local data protection legislation, you possess comprehensive statutory rights regarding your personal information:
- Right of Access & Information: The right to obtain confirmation as to whether your personal data is being processed, and to receive a clear copy of processed records.
- Right to Rectification: The right to modify, update, or correct inaccurate or incomplete personal profile data at any time.
- Right to Erasure ("Right to be Forgotten"): The right to request permanent deletion of your data from both local devices and remote servers.
- Right to Restriction of Processing: The right to request the temporary freezing of processing under specific legal conditions.
- Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Withdraw Consent: The right to withdraw explicit consent for health data processing at any time, without affecting the lawfulness of processing based on consent prior to withdrawal.
- Right to Object: The right to object to processing based on legitimate interests or automated decision-making.
9. Children's Privacy
Koza is designed as a pregnancy tracking and parenting wellness tool intended for expectant parents and adults aged 18 and older. We do not knowingly collect personal identifiable information directly from children under the age of 16 (or applicable national threshold). Baby milestones and developmental metrics logged by parents remain under parental control on-device. If we become aware of unauthorized data collection from a minor, we will promptly expunge such records from our databases.
10. Contact & Regulatory Inquiries
If you have questions, feedback, or requests regarding this Privacy Policy, your personal data, or wish to exercise your data subject rights, please reach out to our dedicated privacy desk:
📧 Privacy Email: forcellmobileapps@gmail.com
🌐 Corporate Portal: https://www.forcell.net
🏢 Developer: Forcell Mobile Applications