Sayfa açılıyor
Ebeveyn PaneliParent PanelContactTranslation notice: This English version is provided for convenience. The Turkish original is the binding text; in case of any discrepancy, the Turkish version prevails.
Effective date: May 23, 2026 Last updated: July 13, 2026
Official company and registry details are being finalised. The data processing descriptions below are in effect; the company's registered name, MERSİS number and KEP address will be added to this document once official registration is complete.
This Privacy Policy ("Policy") explains which personal data is processed, for which purposes it is processed, with whom it is shared, and your rights as a data subject when you use the Neeko physical device, the NeekoApp mobile application (iOS and Android), the neekoai.com.tr website, and the app.neekoai.com.tr parent panel ("Services").
This Policy has been prepared within the framework of the Turkish Personal Data Protection Law No. 6698 ("KVKK", the Turkish Personal Data Protection Law), the European Union General Data Protection Regulation ("GDPR"), and the relevant secondary legislation.
For additional protection rules specific to the Neeko physical device, which interacts directly with children, please also review the Children's Data Policy.
| Information | Value |
|---|---|
| Data controller | NeuroQubit AI / Neeko |
| Address | Will be added to this table once official service-of-process and registry information is completed. |
| MERSİS number (Turkish central trade registry number) | Will be published once registry information is completed. |
| KEP address (registered electronic mail address in Turkey) | Will be published once the KEP address is completed. |
| Contact | support@neekoai.com.tr |
| KVKK requests | support@neekoai.com.tr (with the subject line "KVKK Request") |
This section will be updated once official registry, KEP, and service-of-process information is completed. Until that date, data subject requests are received via support@neekoai.com.tr.
When registering with NeekoApp or the web panel, and throughout account use:
During device setup, the parent enters the child's:
This data is processed solely so the device can respond appropriately to the child and is stored linked to the parent account.
When the child talks to the Neeko device, the following data minimization applies. Retention behaviour on the provider side (LiveKit, voice provider) is separately verified in the relevant provider account:
The parent who owns the device can view the child's conversation archive in the app using an authenticated parent account. The app's default surface is calm summaries; access to the raw conversation text happens at the parent's own choice, through the archive screen. Conversation content is not shared with third parties outside the parent's account.
| Purpose | Data Category | KVKK Legal Basis | GDPR Legal Basis |
|---|---|---|---|
| Account creation and session management | Parent account | Art.5/2-c (establishment of a contract) | Art.6(1)(b) |
| Device pairing and management | Device identifier, child profile | Art.5/2-c | Art.6(1)(b) |
| Processing of audio data and conversion into transcripts | Device interaction data | Art.5/1 explicit consent + parental legal representative approval | Art.6(1)(a) + Art.8 (children's data) |
| Child safety (moderation, PII masking) | Device interaction data | Art.5/2-f (legitimate interest — child protection) | Art.6(1)(f) + Art.9 protection |
| Notifications and communication | Email, preference data | Art.5/2-c + explicit consent (for marketing) | Art.6(1)(b) + Art.6(1)(a) |
| Order and payment management (v1.1) | Customer transaction data | Art.5/2-c + Art.5/2-a (legal obligation) | Art.6(1)(b) + Art.6(1)(c) |
| Service improvement and statistics | Anonymized data | Art.28 (anonymous) | Art.5(1)(b) |
| Legal compliance and dispute resolution | All | Art.5/2-a (legal obligation) | Art.6(1)(c) |
| Crash reporting | Anonymous error trace | Art.5/2-f (legitimate interest) | Art.6(1)(f) |
We obtain your personal data through the following channels:
Data for marketing purposes is not obtained from other sources, not purchased, and not exchanged.
We do not sell, rent, or trade your data with third parties. We transfer data, in the capacity of processors, to the following infrastructure providers that are essential for delivering the Service:
| Provider | Purpose | Location | KVKK Art.9 Explicit Consent |
|---|---|---|---|
| Render, Inc. | Server hosting | USA | Cross-border transfer with explicit consent |
| Cloudflare, Inc. | Content delivery and storage (R2) | USA / Global | Cross-border transfer with explicit consent |
| LiveKit, Inc. | Real-time audio transmission | USA | Cross-border transfer with explicit consent |
| OpenAI / Anthropic | Natural language processing (transcript → response) | USA | Cross-border transfer with explicit consent |
| ElevenLabs, Inc. | Personalized voice generation from name/curiosity text on the website | USA / Global | Cross-border transfer with explicit consent |
| Functional Software, Inc. (Sentry) | Crash reporting | USA | Cross-border transfer with explicit consent |
| iyzico Ödeme Hizmetleri A.Ş. | Payment processing (v1.1) | Turkey | Domestic transfer |
| Apple Inc. / Google LLC | App store distribution, push notifications | USA | Cross-border transfer with explicit consent |
Transfers are possible in the following cases:
Cross-border transfers rely on the GDPR Standard Contractual Clauses (SCC) or the conditions of KVKK Art.9. Additional safeguards are applied for transfers to countries without a European Commission adequacy decision.
We retain your personal data for the period necessary for the processing purpose:
| Data | Period |
|---|---|
| Account data (email, profile) | As long as the account is active; on deletion the email and profile are anonymized immediately |
| Device pairing | As long as the device is linked to the account |
| Child profile data | As long as the account is active; the parent can delete it |
| Web demo name and curiosity preference | Until the browser tab/session ends or the user clears it |
| Web demo personalized TTS input and output | The completed audio result is not written to a time-limited result cache on the Neeko server; only simultaneous identical generations may be merged until the operation completes. Browser playback memory may exist for the duration of the tab. The ElevenLabs account and the applicable provider retention policy also apply |
| Audio transcripts | Transcripts are retained until the parent account is deleted; when the account is deleted they are permanently removed. |
| Raw audio files | Not permanently stored by Neeko; provider-side behaviour verified separately in the LiveKit/provider account |
| Memory cards | Only with parental approval; until the parent deletes them |
| Safety event counts | A maximum of 90 days (removed by the periodic maintenance sweep) |
| Orders and invoices | 10 years (Turkish Commercial Code (TTK) Art.82, Turkish Tax Procedure Law (VUK) Art.253) |
| Legal dispute records | Statute of limitations period (Turkish Code of Obligations (TBK) Art.146-147) |
| Cookies | The period specified in the Cookie Policy |
When the period expires, the data is deleted, destroyed, or anonymized (KVKK Art.7).
We take the following technical and administrative measures to protect your personal data:
In the event of a data breach, the Turkish Personal Data Protection Authority and the affected data subjects are notified within 72 hours.
Pursuant to KVKK Art.11 and GDPR Art.15-22, you have the following rights:
You can exercise your rights through the following channels:
Your request will be answered within 30 days at the latest. Requests are free of charge; an additional document fee may be requested in accordance with the Turkish Communiqué on the Procedures for Application to the Data Controller. KEP and service-of-process channels will be added to this page once official information is completed.
If you are not satisfied with the response, your right to lodge a complaint with the Turkish Personal Data Protection Board remains reserved (KVKK Art.14).
Functional, performance, and analytics cookies are used on our websites. For details, please review the Cookie Policy. The NeekoApp mobile application does not use cookies; local storage (AsyncStorage) is used only for in-app preferences and session data.
NeekoApp is a parent management panel and does not directly address children under the age of 13. Store target ages: App Store 13+, Google Play 18+. On the App Store, users aged 13-17 should use the app with the approval and supervision of a parent or legal representative; consent regarding children's data and device management decisions are made by the parent or legal representative.
Separate data protection rules apply to the Neeko physical device, which interacts directly with children. For details, please review the Children's Data Policy.
This Policy is updated as legal regulations, product developments, or our processing purposes change. For significant changes:
You can access previous versions from our archive sources (upon request).
For any questions, requests, or complaints regarding this Policy or your personal data:
Email: support@neekoai.com.tr Web: neekoai.com.tr/contact
Official registry, KEP, and service-of-process information will be added to this Policy once completed.
For questions, write to us: support@neekoai.com.tr