Privacy and Personal Data Notice

1. Scope and intended users

PERY provides AI-assisted digital guidance about child development, parent–child communication, routines and family life to adult parents, legal representatives and caregivers who have authority to share the relevant information. A child profile is a personalization area managed by an adult, not an independent child account or a direct child-therapy service.

This notice covers processing within the application and related support requests. Apple, Google and other providers also process information independently under their own notices. Linking to a provider's policy does not remove PERY's responsibilities for its own processing.

2. Information categories

• Account and authentication: email address, identifiers received from the selected sign-in provider, session information and limited verification records. An Apple private relay email address may be processed when you hide your email.
• Parent and child profiles: a name or nickname you enter, caregiving relationship, age or birth information, communication level, routines, temperament, development goals and optional notes.
• Conversations and personalization: your messages, AI responses, recent conversation context or summaries, and memory notes you separately choose to save.
• Voice and transcripts: a short recording you initiate, its transcript, text used to generate spoken replies, and temporary playback data. PERY does not use your voice for identity authentication or to create a voiceprint.
• Preferences and reminders: language, notification choices, reminder times, AI-sharing preference and necessary preference version/time records.
• Subscriptions and usage: account-related purchase/transaction identifiers, product and entitlement status, renewal periods, message/voice counters, extra-minute balances and necessary verification/refund records. PERY does not receive your full card number.
• Technical security and support: request/error identifiers, timestamps, category-based safety signals rather than full content in those records, response-report categories, and information you submit to support. An IP address is technically processed when a connection is made; quota records use derived identifiers rather than the direct address. Infrastructure providers' network/security logs may have separate terms.

A child photo you select is used as an avatar on that device. PERY does not upload the photo as part of the child's cloud profile or send it as a photo to the AI provider. Selecting a supplied avatar and selecting your own photo are different operations. Do not submit unnecessary photos, identity documents or medical reports.

3. Collection and purposes

Information is obtained electronically from content you type or speak, profile/preferences selections, necessary records supplied by sign-in and store providers, and limited technical information generated during use.

Purposes include creating and securing your account, managing profiles, preparing age/context-appropriate guidance, continuing conversations, operating optional memory, managing reminders you choose, verifying subscriptions and allowances, preventing duplicate credit, reducing misuse, resolving errors and handling support/privacy requests.

When product-flow measurement is configured, it uses limited events and technical fields rather than free-form conversation text. Permission for AI processing is not blanket permission for behavioral advertising, marketing or unrelated use. A purpose requiring a separate choice is not enabled merely by general acceptance of this notice.

4. Legal framework

Each activity must be assessed against a lawful basis applicable to its information and purpose. Operating an account, paid entitlement or requested service may be necessary for entering into or performing a contract. Limited records may be required by legal obligations or for establishing, exercising or defending rights. Where legitimate interests support service security, your fundamental rights and freedoms must be protected. In Türkiye, Articles 5 and 6 of Law No. 6698 are relevant where applicable.

AI content sharing and optional long-term memory have separate in-app choices. Where explicit consent is required, it must be freely given and specific: reading a privacy notice or accepting terms alone is not that consent. Health-related sensitive data and information about children require additional assessment. A general app permission does not automatically satisfy those conditions.

This notice does not authorize collecting every potentially useful detail. You may ask about the basis, necessity and scope of processing through the contact channel below.

5. Information sent to AI

When you allow AI sharing, your message and limited context needed for a reply are transmitted through PERY's server to OpenAI. Automatically prepared context in normal child conversations uses limited fields such as age stage, routine, communication level, temperament and selected goals. Necessary recent messages, a conversation summary and permitted memory notes may also be used for continuity.

Excluding a profile photo or profile name from automatic context does not make the entire message anonymous. Names, addresses, schools, family events or health information that you write in a message—or speak during voice onboarding—may be transmitted with that content. Remove unnecessary identifiers and use nicknames instead of full names.

Safety assessment may also involve content processing. Protective rules do not guarantee detection of every risk or an error-free answer. A derived safety identifier may be sent instead of a direct email or child name; derived identifiers do not guarantee anonymity.

OpenAI's endpoint table describes no standard content retention for transcription and moderation; those conditions differ from text replies and speech generation. PERY makes no universal zero-retention promise without a separately verified arrangement. Consult the current OpenAI data controls.

6. Microphone, recordings and synthetic speech

A microphone recording begins when you initiate it and device permission is available. Short audio is sent through PERY to OpenAI for transcription. The transcript is processed as part of the conversation or onboarding answer and may enter the relevant profile or conversation record. Microphone permission is not acceptance of every other data-processing choice.

PERY does not write raw recordings to its application database as audio files. Temporary files or memory on the device/server support recording, transmission, duration measurement and playback. Temporary recordings are cleaned up after normal processing; immediate cleanup cannot be guaranteed after an unexpected device/process shutdown. This does not change infrastructure or AI providers' separate retention terms.

Read-aloud and voice-onboarding text is transmitted to OpenAI to generate speech. The voice is AI-generated, not a live human psychologist or doctor. Measuring audio duration is not creating a biometric voice profile for identification.

7. Children and sensitive information

You should be a parent, legal representative or appropriately authorized caregiver when adding child information, and share only the minimum detail needed. Do not include another person's contact, identity, school or health information without authority. An adult's acceptance does not transfer unlimited rights over a child's privacy.

Descriptions of diagnoses, medication, psychological conditions, abuse or family incidents may contain sensitive or high-risk information. PERY is not a clinical records system. Do not send medical reports, identity documents or unnecessary detail; use an appropriate professional and secure channel when needed.

Children are not intended to use PERY directly and independently. If you believe child information has been processed without authority, contact support. Requests are assessed after appropriate account/authority verification and in accordance with the person's rights and applicable law.

8. Providers and international transfers

• SupabaseAuthentication, sessions and cloud infrastructure for account-linked profiles/conversations. Provider information.
• OpenAIPermitted answer generation, safety assessment, transcription and speech generation, including submitted content and limited related technical data.
• Apple and, if selected, GoogleAccount verification for the chosen sign-in method; Apple also handles App Store payments and store transactions. Your separate provider-account choices still apply.
• RevenueCatiOS purchase/entitlement verification using the app-account identifier and limited transaction/device information. Child profiles and chats are not sent to RevenueCat for subscription verification. Provider information.
• Hosting and communicationsHostinger hosts the PERY API. Google's Gmail receives support email, including the information you choose to send in that channel.

These providers and subprocessors may use infrastructure outside your country; do not assume all data stays in Türkiye. International transfers remain subject to applicable safeguards and legal conditions. Article 9 of Law No. 6698 requires separate consideration in Türkiye; a general in-app AI choice is not unlimited authorization for every transfer.

You may request information about processing countries, recipient categories and applicable transfer safeguards. Valid binding requests from authorities or legally necessary protection of rights may require limited disclosure. Absolute confidentiality is not promised on the assumption that no such request can occur.

9. Retention and deletion

Different categories serve different purposes and do not share one retention period. Profiles, conversation history and selected memory notes may be retained for service continuity until you delete the relevant record/account or the purpose otherwise ends. Do not assume an automatic fixed-day expiry for that content. Clearing limited device history does not automatically clear cloud history.

Separate operational records have category-based retention windows: product/topic-quota records, 90 days; AI response reports and guest usage ledgers, 180 days; webhook and account-deletion audit records, 400 days. The starting point depends on the record; active-topic and guest usage may use the latest activity. Expiry makes a record eligible for cleanup, not a guarantee that every copy disappears at that exact second.

Limited account-entitlement/counter records and purchase records preventing duplicate extra-minute credit may be needed for continuity and dispute handling. Where retention is required, only the necessary part should be kept for that purpose. This is not blanket permission to retain every chat indefinitely.

Temporary audio, backups and provider records have different lifecycles. Data removed from active systems may remain in backup cycles or limited legally required records for a period. PERY does not promise instant deletion everywhere or an identical deletion time across providers. Ask support about the scope and result of a deletion request.

10. Account and provider deletion

You can initiate conversation, child-profile and account deletion in the app. Account deletion removes associated PERY records and initiates related provider operations. A provider outage or verification failure may delay part of the process; a limited record of the remaining work may be retained.

A token needed to revoke Sign in with Apple access may be stored encrypted using a separate server key. Account deletion requests Apple access revocation and RevenueCat customer deletion. Failed external operations may leave limited retry-queue records; instant success across every provider is not guaranteed. If the necessary Apple token is unavailable, instructions for removing the connection in your Apple account may apply.

11. Separate choices and withdrawal

The privacy notice, terms, AI sharing, long-term memory, microphone and notifications serve different functions. Accepting one does not automatically enable the others. Manage AI sharing/memory in the Privacy center and microphone/notifications in device settings.

Turning off AI sharing stops new AI submissions; it does not recall a request already transmitted or automatically delete conversation history. Use separate deletion controls for existing records. Denying microphone permission is not the same as refusing text processing. An unavailable permission/data item may prevent only the feature that requires it.

Withdrawing consent does not by itself retrospectively change the lawfulness of earlier processing. Limited records required on another lawful basis may remain. A material change to provider, purpose or data scope may require renewed notice and a new choice.

12. Rights and requests

Depending on applicable law, you may have rights to learn whether data is processed, obtain information about purposes/recipients, correct inaccurate or incomplete data, request deletion or restriction where conditions are met, export data where applicable, and object to processing. Other rights under Article 11 of Law No. 6698 remain available where relevant.

Email peryapp.com@gmail.com. Proportionate verification may be required to establish account ownership and prevent unauthorized deletion; child-related requests may require authority verification. Do not attach identity documents, bank details or a child's medical report to your first message.

Requests are handled according to their nature and applicable legal deadlines. Where a request cannot be fully met, the relevant grounds and available challenge routes should be explained. General wording in this notice does not remove access to a competent data-protection authority, consumer body or court.

13. Security and its limits

Measures include encrypted transport, account-based access controls, server-side validation and encryption to protect sensitive local mobile state. No system can guarantee absolute security, zero error or prevention of every misuse.

Encryption or a derived identifier does not make data anonymous. Protect your device lock, session and exported files: downloaded exports may contain sensitive content on your device. Report suspected issues to support rather than posting personal information publicly.

14. Updates and contact

This notice may be updated when the service or processing changes. Material changes should be communicated appropriately; a new choice is requested where separate permission is required. You are not deemed to give unlimited advance consent to every future change.

Privacy requests: peryapp.com@gmail.com. See also the Terms of Use.