Explicit Consent Statement

Translation notice: This English version is provided for convenience. The Turkish original is the binding text; in case of any discrepancy, the Turkish version prevails.

Explicit Consent Statement Under Articles 5/1 and 6/3 of the Personal Data Protection Law No. 6698 (KVKK — Turkey's Personal Data Protection Law)

Draft start date: May 23, 2026 Last updated: July 13, 2026

This is a V1 consent draft; it is not currently an active production consent form. This text does not serve as a basis for processing children's data until the text, the related UI, parent verification, version/timestamp recording, withdrawal, and deletion flows have been jointly approved by a legal expert.

1. Purpose of This Statement

This Explicit Consent Statement has been prepared to obtain your separate explicit consent for the personal data processing activities about which you have been informed through the Privacy Policy and the KVKK Information Notice.

Under KVKK Art. 3/1-a, explicit consent means consent relating to a specific matter, based on being informed, and expressed with free will. Explicit consent:

• Relates to a specific data processing activity (a blanket "yes to everything" is invalid)
• Is obtained after being informed
• Is based on free will (it cannot be imposed as the sole condition for providing the service)
• Can be withdrawn at any time (KVKK Art. 7 and Art. 11)

Each consent item is given separately; giving consent to one item does not affect the others.

2. Consent Items

During account registration, device pairing, and related flows, your consent is requested separately for the following explicit consent items:

2.1 Processing of Voice Data (Required — For the Service)

Subject of consent: When the Neeko physical device is used, the child's voice data being:

• Transmitted over the real-time audio transmission infrastructure (LiveKit)
• Converted to text and used to generate responses via natural language processing services (OpenAI / Anthropic)
• Reviewed for safety moderation and personal information masking
• Separately approving the transcript retention rule: Transcripts are retained until the parent account is deleted; when the account is deleted they are permanently removed.

I give my explicit consent to the processing of my personal data for these purposes.

Important notes:

• Raw audio files are not stored; audio is processed in real time.
• The app's default surface is safety event counts and memory cards; the parent who owns the device can also view the conversation archive using their authenticated account. Content is not shared outside the parent's account.
• If the planned consent is not given, the device's voice interaction function should not work; the remaining behavior of the parent panel will be finalized in real application testing.

☐ I give my explicit consent / ☐ I do not give my explicit consent

2.2 Processing of Child Profile Data (Required — For the Service)

Subject of consent: Processing of the child's name, age, interests, and conversation style preference entered by the parent so that the device can generate responses appropriate for the child.

Legal representative declaration: As the child's legal guardian, custodian, or person responsible for their care, I give this consent on the child's behalf. The child's personal data is processed solely for device functionality and child safety.

☐ As legal representative, I give my explicit consent / ☐ I do not give my explicit consent

2.3 Cross-Border Transfer (Separate Choice per Feature)

Subject of consent: The infrastructure providers used to deliver the feature you select are established in the following countries. Under KVKK Art. 9, explicit consent is requested for cross-border transfers:

Important notes:

• Transferred data is protected with TLS encryption, contractual safeguards, and, where possible, SCCs (Standard Contractual Clauses).
• The relevant feature that requires a cross-border provider you have not consented to will not work. The anonymous tour and static content on the website remain available.

☐ I give my explicit consent to cross-border transfer / ☐ I do not give my explicit consent

2.4 Marketing Communications (Optional — Declining Does Not Affect the Service)

Subject of consent: Receiving information via email about new content packs, product updates, campaign announcements, and newsletters.

Important notes:

• This consent is entirely optional; declining does not affect your use of the service.
• Even if you give consent, you can withdraw it at any time via the "unsubscribe" link included in every message.
• Mandatory non-marketing communications (account security, service notifications, legal compliance) are carried out independently of this consent.

☐ I give my explicit consent to marketing communications / ☐ I do not give my explicit consent

2.5 Anonymous Statistics and Service Improvement (Optional)

Subject of consent: Processing service usage statistics as anonymous aggregation and using them for product development purposes.

Important notes:

• Anonymized data is no longer considered "personal data" under KVKK Art. 28.
• This consent is optional; declining does not affect your use of the service.

☐ I give my explicit consent to the use of anonymous statistics / ☐ I do not give my explicit consent

3. Withdrawal of Consent

Under KVKK Art. 11/1, you can withdraw each explicit consent item at any time:

3.1 How to Withdraw

• Via the NeekoApp Settings > Data and Privacy screen
• Via the app.neekoai.com.tr > Profile > Data and Privacy screen
• Email: support@neekoai.com.tr (subject: "Consent Withdrawal")
• Web: neekoai.com.tr/contact

3.2 Effects of Withdrawal

• If voice data consent is withdrawn: The device's voice interaction function stops. Use of the parent panel continues. Existing transcripts are permanently deleted when the parent deletes their account; earlier deletion can be requested via support@neekoai.com.tr.
• If child profile data consent is withdrawn: The device's function of generating responses tailored to the child stops. Profile data is deleted from your account.
• If cross-border transfer consent is withdrawn: The feature that requires the relevant overseas provider stops; the anonymous web tour and static content remain available.
• If marketing / statistics consent is withdrawn: The relevant processing stops; use of the service is not affected.

Withdrawal does not have retroactive effect; processing lawfully carried out before withdrawal remains valid (processing based on the legal grounds of KVKK Art. 5/2 and statutory retention obligations continue).

4. Retention of Consent Records

Your explicit consent approvals are, within account and product flows:

• Recorded with elements of proof such as consent date, channel (app, web, email), version, and IP address
• Protected with data security measures under KVKK Art. 12
• Usable as evidence in the event of a legal dispute or audit

Consent records are kept for the retention period of the relevant processing and thereafter for the statute-of-limitations period.

In the optional personalized voice demo on the website, the consent button, the anonymous alternative, the information notice link, the consent text version, and the request time are used together. This demo request is not a permanent account consent record; before the personalized voice feature goes live in the account/device product, a permanent and auditable consent record will be established separately.

5. Data of Minors

The NeekoApp store target age is set at 13+. A direct mobile app account is not offered to users under 13. Users aged 13-17 must use the app with the approval and supervision of a parent or legal representative. For the data of the child interacting with the device, the parent or legal representative gives explicit consent (within the scope of KVKK Art. 5/1).

As the child's capacity to understand develops, the child's right to be informed and to be aware of their rights is respected. For details on the processing of children's data, please review the Child Data Policy.

6. Declaration

I declare that I have read and understood this Explicit Consent Statement and that, for each item I approve, I know:

• Which data will be processed
• For what purpose it will be processed
• To whom it may be transferred
• The retention period
• How I can withdraw my consent

and that I give my consent with free will after being informed.

In app and web flows, explicit consent is obtained through a separate consent button or checkbox linked to the relevant texts, together with the consent time/version/source information. For permanent account features, a proof record is additionally retained.

7. Contact

Email: support@neekoai.com.tr Web: neekoai.com.tr/contact

Related documents:

• Privacy Policy
• KVKK Information Notice
• Child Data Policy
• Terms of Service