FamilyStarPrivacy Policy
Last Updated: March 13, 2026 | Version 2.0
FamilyStar ("App", "Service") is committed to protecting your personal data. This Privacy Policy explains how your personal data is collected, processed, stored, and protected in accordance with the EU General Data Protection Regulation ("GDPR"), the US Children's Online Privacy Protection Act ("COPPA"), the Turkish Personal Data Protection Law No. 6698 ("KVKK"), the Apple App Store Guidelines, and the Google Play Developer Policies.
1. Data Controller
| Company | Skalla Bilişim Teknolojileri |
|---|---|
| Trade Name | FamilyStar / Aile Yıldızı |
| support@familision.com | |
| Website | https://familision.com |
2. Personal Data We Collect
2.1 Parent / Adult Users
| Data Category | Data Types | Legal Basis |
|---|---|---|
| Identity | Full name, email address (via Google/Apple Sign-In) | Performance of contract; Consent |
| Profile | Display name, profile photo (optional) | Performance of contract |
| Device | Device type, operating system, app version, language preference | Legitimate interest |
| Usage | Task creation/completion, star & badge statistics, session durations | Performance of contract |
| Location (Premium) | Live location data — only with explicit permission, visible only to family members | Explicit consent |
| Payment | Subscription status (payment details are processed by Apple/Google and never reach us) | Performance of contract |
| Communication | Support requests, feedback messages | Legitimate interest |
2.2 Child Users (Under 18)
| Data | Collected | Not Collected |
|---|---|---|
| Identity | Nickname (alias), age range (6-8, 9-11, 12-14) | Real name, email, phone, national ID |
| Usage | Task completion, stars & badges earned | — |
| Location | — | No location data collected from child devices |
| Photos | Task proof photos (EXIF stripped, auto-deleted after 30 days) | — |
- No third-party analytics SDK runs in child mode.
- No advertisements are shown in child mode; no marketing communications are sent.
- Child data is not used for profiling-based automated decision-making.
2.3 Caregiver Users (Pro)
Caregivers (grandparents, nannies, teachers) join via parent invitation. Collected data: name, email, role. Caregivers cannot access payment, AI, or settings features.
2.4 Pet Data (Pro)
Pet name, species, birth date, vaccination records, and vet visits are stored. This data is not classified as personal data but is protected as part of the associated family account.
3. Purposes of Data Processing
- Providing app services and fulfilling contractual obligations
- Operating task management, star system, and gamification features
- AI-powered features (task suggestions, meal planner, family coach — Premium/Pro only)
- Generating weekly reports and analytics
- Sending notifications (task reminders, achievement alerts)
- Improving app performance and bug fixing
- Subscription and payment management
- Compliance with legal obligations
4. Artificial Intelligence (AI) Data Processing
FamilyStar uses the Anthropic Claude AI service to provide personalized recommendations:
- Data sent to AI: child's age range, task history summary, dietary preferences (for the meal planner).
- Data sent to AI never includes real names, email addresses, or identification information.
- AI responses are not stored; each session is independent.
- AI features are available only on the parent screen; they are inaccessible in child mode.
5. Data Sharing and Transfer
Your personal data is never shared with third-party advertising networks and is never sold.
| Service Provider | Purpose | Country | Safeguard |
|---|---|---|---|
| Google Firebase | Authentication, database, storage, notifications | US/EU | Google DPA, SCCs |
| RevenueCat | Subscription management | US | DPA, SOC 2 |
| Anthropic (Claude AI) | AI task suggestions, meal planner | US | Anthropic DPA |
| Apple / Google | In-app purchase processing | US | Platform agreements |
International data transfers are protected by Standard Contractual Clauses (SCCs) in accordance with GDPR Article 46 and KVKK Article 9.
Data may be shared with competent public authorities when required by law.
6. Data Security Measures
- All data transmission is protected with TLS 1.3 encryption.
- Firebase security rules prevent unauthenticated access.
- Photos are stored with AES-256 encryption and auto-deleted after 30 days.
- EXIF metadata (location, device info) is automatically stripped at upload.
- No passwords are stored (OAuth 2.0 token-based authentication).
- Regular security audits and penetration testing are conducted.
- Access authorization follows the principle of least privilege.
7. Data Retention Periods
| Data | Retention Period |
|---|---|
| Account information | While account is active + 30 days after deletion |
| Task and score data | While account is active |
| Photos | 30 days from upload |
| Location data | Real-time only; not stored |
| Analytics data | Anonymized, 24 months |
| Support requests | 12 months from resolution |
8. Cookies and Tracking Technologies
The FamilyStar mobile app does not use cookies. The following are used on our website (familision.com):
- Essential: Language preference (localStorage), session management.
- Privacy consent: GDPR/KVKK consent status (localStorage).
No third-party tracking cookies or advertising pixels are used.
9. Your Rights Under GDPR (EU/EEA Users)
Under the General Data Protection Regulation, you have the following rights:
- Right of access (Art. 15): Request a copy of your processed personal data.
- Right to rectification (Art. 16): Request correction of inaccurate data.
- Right to erasure / right to be forgotten (Art. 17): Request deletion of your personal data.
- Right to restriction of processing (Art. 18): Request limitation of data processing under certain conditions.
- Right to data portability (Art. 20): Receive your data in a structured, commonly used, and machine-readable format.
- Right to object (Art. 21): Object to processing based on legitimate interest.
- Automated decision-making (Art. 22): Object to decisions based solely on automated processing.
- Right to withdraw consent: Withdraw your consent at any time.
- Right to lodge a complaint: File a complaint with the data protection authority in your country.
10. Your Rights Under KVKK (Turkish Users)
Under the Turkish Personal Data Protection Law No. 6698, you have the following rights:
- Learn whether your personal data is being processed
- Request information about your processed personal data
- Learn the purpose of processing and whether data is used in accordance with its purpose
- Know the third parties to whom your personal data has been transferred domestically or abroad
- Request correction of incomplete or inaccurate personal data
- Request deletion or destruction of personal data under KVKK Art. 7
- Request notification of corrections and deletions to third parties
- Object to results arising from automated analysis of processed data
- Claim compensation for damages caused by unlawful processing of personal data
You may submit requests to support@familision.com or via the in-app Settings > Privacy section. Requests will be responded to within 30 days.
11. COPPA Compliance (US Users)
FamilyStar fully complies with the US Children's Online Privacy Protection Act (COPPA):
- Parental consent is required to collect personal information from children under 13.
- Child accounts can only be created by a parent.
- No email, phone number, or location data is collected from children.
- Child data is not used for behavioral targeting or advertising.
- Parents can review, correct, or delete their children's data at any time.
12. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information is collected and how it is used.
- Request deletion of your personal information.
- Opt out of the sale or sharing of personal information. FamilyStar does not sell personal data.
- Non-discrimination for exercising your privacy rights.
13. Account Deletion
You may delete your account through the following methods:
- In-app: Settings > Account > Delete My Account
- Email: Send a deletion request to support@familision.com
Account deletion is irreversible. All personal data will be permanently deleted within 30 days of the request. Anonymized statistical data may continue to be retained.
14. Policy Changes
This privacy policy may be updated. Significant changes will be:
- Announced via in-app notification.
- Published on our website.
- Subject to renewed consent where required.
Continued use of the app after an update constitutes acceptance of the updated policy.
15. Contact Us
For any questions, requests, or complaints about our privacy policy:
- Email: support@familision.com
- General support: support@familision.com
- Website: https://familision.com