iOS app: we collect no personal data

• No account or sign-in. We do not ask for or collect names, email addresses, photos, location, contacts or any other personal information.
• No advertising and no tracking. No third-party analytics tools or SDKs. No data is shared with third parties.
• The app works offline. Progress, stars and parental settings are stored only on the device and are removed when the app is deleted.
• The only exception is the optional usage summary: if a parent allows it in the Parent Panel, a short anonymous summary is sent at most once a day (see "Optional usage summary" below). Without that permission the app sends no information to our servers; when the Parent Panel is opened it only reads announcements.
• The microphone, camera and location are not used.
• Support development (optional): In-app purchases exist only in the Parent Panel, behind the parental gate, as "Geliştirmeye katkı" (Support development) options. They do not unlock any feature or content; the app is fully usable without them. Product information and payment go through Apple's in-app purchase system (StoreKit) and Apple processes the payment; we do not receive payment details or personal information. No purchase history is stored in the app. If in-app purchases are turned off on the device (for example with a Screen Time restriction), the card does not appear.
• Review prompt: After the app has been used for a while, Apple's own rating window may appear when the Parent Panel is opened (no earlier than 14 days after first use and after at least 5 days of use; at least 120 days between prompts, at most 3 a year and 1 per app version). It never appears on children's screens; no question is asked beforehand and nothing is given in return. Apple's system shows the window; the app does not know whether you rated it or what you wrote. The record kept on the device to time the prompt is described below under "Review prompt record".
• All links that leave the app are only behind the parental gate: this privacy page, the support page and the source sites under Settings → About (tanzil.net, everyayah.com and kuran.diyanet.gov.tr) open in the device's browser; the "Mağazada değerlendir" (Rate in the store) row in the Parent Panel opens the App Store. Links in announcements are also only in the Parent Panel.
• The parent area (Parent Panel: screen time, bedtime, announcements, usage summary and support development; Settings: age group, progress reset) is protected by a parental gate. It closes by itself when the app stays in the background for more than 60 seconds or when the parent area is not touched for 5 minutes.

Screen-time data (all versions)

• Usage time, the last 7 days' summary, bedtime and limit settings, and the parental gate's attempt counter are stored on the device (browser localStorage) and are never sent anywhere as such.
• If you allow the usage summary, only a few numbers derived from them go into it: that day's minutes and number of sessions, how many of the last 7 days the app was used, whether the daily limit was reached, and similar (see below). Your limit and bedtime settings and the gate's attempt counter are not sent.

Optional usage summary (all versions)

We would like to see which games children enjoy and how much Hüdhüd helps them. For this we may ask parents for permission to send a short, anonymous daily summary. The feature is off by default; unless you turn it on, the app sends not a single request for this purpose.

• Who turns it on: only a parent, in the Parent Panel behind the parental gate ("Kullanım özeti", Usage summary). A card titled "Hüdhüd'ü birlikte geliştirelim mi?" (Shall we improve Hüdhüd together?) may also appear once in the Panel; never on first launch, and at least 2 days after first use. If you choose "Şimdi değil" (Not now), you are not asked again. Nothing about it appears on children's screens.
• What is sent: the numbers of a finished day. For example: "14 minutes of use today. Find the Letter was played 3 times, 2 finished. We are at lesson 7 on the Elif-Bâ path." The full summary is:
  • the day of the summary (date), the app version and where the app was installed from (App Store, Google Play, the Android app from the website, or web);
  • the age group selected in the app (2–4, 4–6, 6+ or not selected);
  • the week of first use, which day of use this is, and on how many of the last 7 days the app was used;
  • total minutes and number of sessions that day; how the minutes split between morning, midday, evening and night;
  • for each section and game: how many times it was opened and finished and how many minutes it took; in games, the number of questions, questions answered correctly on the first try, and hints;
  • the place on the learning path (unit, number of units and lessons finished, stars); in Good Manners, the number of lessons finished and tasks confirmed;
  • three yes/no facts for screen time: was the daily limit reached, was bedtime used, was the app closed after the goodbye;
  • two technical numbers: errors caught by the app and days still waiting to be sent.
• What is not sent: your name, your child's name, your child's answers, any text, audio or images; location; device, installation or advertising identifiers; device information (operating system, device model, browser, language, time zone); exact times. The summary contains no identifier for you, your child or your device; each record is stored separately under a random number.
• When: at most once a day and only for finished days, when the app is opened and online. Only the day you gave permission and later days are sent. Days without use are not sent. Without internet, summaries for up to the last 7 days wait; if sending fails, it is quietly retried later.
• Where: the project's own Google Firebase database (Cloud Firestore), over an encrypted connection (HTTPS). Google operates this database on our behalf as a service provider. No third-party analytics tools or SDKs are used. The summary is not shared with third parties, not sold and not used for advertising.
• IP address: as with any internet connection, your device's IP address and the system's standard request headers (the User-Agent header may include the operating system version and device model) reach Google's servers. They are not written into the summary and we do not store them.
• Why: only to improve the app: to see which sections and games are enjoyed, where children struggle, whether the screen-time features help, and errors. We look at summaries as aggregate numbers, not one by one.
• How long: daily records are kept for at most 24 months and then deleted. Aggregate numbers derived from them (such as weekly totals) may be kept.
• How to turn it off: switch off "Kullanım özeti" (Usage summary) in the Parent Panel. Waiting summaries are deleted at once and nothing more is sent. If you turn it on again, only that day and later days are sent.
• Summaries already sent: because summaries are not matched to any person or device, we cannot find a sent record as "yours" and delete it individually. Turning the feature off is enough to stop any further summaries; sent records are deleted after at most 24 months.
• See what was sent: "Gönderilen son özeti gör" (See the last summary sent) in the Parent Panel shows the last summary in plain Turkish.

Announcements for parents (all versions)

• What: we may occasionally show short announcements in the Parent Panel, for example about new lessons or an important update. They appear only in the Parent Panel behind the parental gate; nothing about them (no text, badge or sound) appears on children's screens. They contain no advertising or third-party promotion.
• When: only when the Parent Panel is opened, when online, and at most once every 15 minutes. No request is made when the app starts or on children's screens. Offline, the most recently read announcements are shown.
• Nothing is sent: the app only reads the public list of announcements from the project's Google Firebase database (Cloud Firestore) over an encrypted connection (HTTPS). The request contains no identifier, counter, app version or personal information. The device itself decides whether an announcement is shown on it (for example, only for a certain app version).
• IP address: as with any internet connection, your device's IP address and the system's standard request headers reach Google's servers. We do not store them.
• Read status stays on the device: which announcements you have read and the most recently read list are kept only on the device (localStorage, key hudhud-duyuru) and are never sent anywhere. Resetting progress does not delete this record; deleting the app does.
• Links: if an announcement has a link, it goes only to our own site (elifba-oyunu.web.app), the App Store, Google Play or GitHub, and opens only when you tap it.

Review prompt and days-of-use record

• Purpose: to decide when the store's rating window may be shown (the threshold and frequency above; iOS and Google Play) and, if you allowed it, to calculate two numbers of the usage summary.
• Contents: on the device (localStorage, key hudhud-degerlendirme) only the day of first use, the dates of days on which the child used the app for at least one minute (up to 400 days), and the time of each prompt with the app version at that moment (up to 12 entries). No durations, content, identifiers or personal information are stored.
• Never leaves the device: this record is not sent anywhere. Deleting the app deletes it; resetting progress does not. If you allow the usage summary, two of its numbers (the week of first use and which day of use it is) are calculated from this record; the record itself and its dates are not sent.
• The record is kept in all versions. The review prompt exists only in the iOS and Google Play versions; in the web version and the Android app installed from the website the record is used only for the two numbers of the usage summary, and nothing is sent unless you allow it.

Android app: we collect no personal data

The Android app is downloaded from elifba-oyunu.web.app/android; the app file (APK) itself is served by GitHub (github.com/srgulbay/hudhud-android), which may keep standard server logs (such as IP addresses). A Google Play version is being prepared (currently open to testers only); the version installed from Play collects no personal data either.

• No account or sign-in. No personal information is requested or collected. No advertising, tracking or third-party analytics.
• No Firebase SDK and no anonymous backup. Progress, stars and parental settings stay on the device only. The only exception is the anonymous usage summary sent with a parent's permission (above).
• Unless you allow the usage summary, the version installed from Google Play sends no information to our servers; it only reads announcements when the Parent Panel is opened. Google Play delivers its updates. In this version the rating window is shown by Google Play's own service (in-app review). Apart from the usage summary, the version installed from the website goes online only when the Parent Panel is opened: it reads announcements and reads elifba-oyunu.web.app/android/surum.json to check for a new version. No app-specific identifier, counter or personal data is sent with these requests; as with any HTTP request, only the system's standard headers are sent (the User-Agent header may include the Android version and device model). The site is hosted on Google Firebase Hosting, which may keep standard server logs (such as IP addresses).
• If a new version is available, an information card appears in the Parent Panel; updates are started only by the parent.
• All links that leave the app are only behind the parental gate: the privacy and support pages, the source sites under Settings → About (tanzil.net, everyayah.com and kuran.diyanet.gov.tr) and, in the version installed from the website, downloading a new version file (APK) from GitHub open in the device's browser. In the Google Play version the "Mağazada değerlendir" (Rate in the store) row in the Parent Panel opens Google Play; in the version installed from the website the "Görüş gönder" (Send feedback) row opens your email app. Links in announcements are also only in the Parent Panel.
• Review prompt (Google Play version only): under the same conditions as on iOS, Google Play's own rating window may appear when the Parent Panel is opened; the app does not know whether you rated it. Record kept on the device: "Review prompt record".
• The microphone, camera, location and contacts are not used. The Android app has no in-app purchases.

Web version (elifba-oyunu.web.app)

• Progress, stars and parental settings are stored only in the browser's local storage and are never sent to a server. There is no account, sign-in or backup. If you allow the usage summary, only the anonymous daily summary is sent (above).
• The anonymous progress backup of earlier versions (Google Firebase, Cloud Firestore) was removed on October 18, 2026: the app no longer backs up progress and outside access to old backup records has been closed. You can ask for an old backup to be deleted from the server by emailing support. The usage summary is not a progress backup; it is written to a separate place in the same database.
• The site is hosted on Google Firebase Hosting, which may keep standard server logs (such as IP addresses) for security and operation. No advertising or tracking cookies are used.
• The web version has no in-app purchases and no review prompt. The "Görüş gönder" (Send feedback) row in the Parent Panel opens your email app; an email reaches us only if you send it.

Reminder notifications (web only, optional)

If a parent turns on "Daily reminder" in the Parent Panel, Hüdhüd sends one short notification at the chosen time. It is off by default and permission is requested only when the parent taps the button. The iOS app has no notifications.

• What is stored: the browser's push address and its encryption keys, the chosen time and days, time zone and language. No name, email, phone number or location.
• Where: Supabase, in the European Union (Frankfurt, Germany). Notifications are delivered through the browser's own push service (e.g. Google, Apple, Mozilla). Supabase may keep standard server logs (such as IP addresses) for security and operation.
• Why: only to send the daily reminder. Never used for marketing or advertising and never shared.
• How long: deleted when the reminder is turned off or the push address becomes invalid (for example after revoking permission or clearing browser data).
• How to turn off: Parent Panel → switch off "Daily reminder", or remove the site's notification permission in the browser settings.

Children's privacy, content and contact

The app is designed to meet Apple's Kids Category requirements. We do not collect personal data from children; there is no advertising, tracking or third-party analytics, and we do not share data with third parties. The optional usage summary is sent only with a parent's permission. It contains no name, identifier, device information or location and is designed so that it cannot be matched to any person; under Türkiye's data protection law (KVKK), personal data is information about an identified or identifiable person, and the summary is prepared so that it falls outside that definition. With regard to the US children's privacy law (COPPA), the summary contains no persistent identifier; the IP address is used only for the connection and is not stored.

Qur'an recitations are recordings by Mahmoud Khalil Al-Husary (teaching style, via everyayah.com); letter names, vowel-mark (harakat) sounds and the lengthening, tanween, sukun and shadda sounds of the "transition to reading" section are from the Elif-Bâ recordings of the Presidency of Religious Affairs of Türkiye (Diyanet, kuran.diyanet.gov.tr/elifba); the mascot's voice was pre-generated with AI (ElevenLabs) during development; the Arabic word audio is also synthetic speech pre-generated with AI during development (Microsoft Edge read-aloud, edge-tts), not a human recording; the Qur'an text is from the Tanzil Project (tanzil.net); the Turkish translation (meal) under the verses is the Kur'an Yolu translation of the Presidency of Religious Affairs (Diyanet, Kur'an Yolu Türkçe Meâl ve Tefsir; kuran.diyanet.gov.tr) and is used for the eleven suras in the app (Al-Fatiha, Al-Asr, Al-Kawthar, Al-Ikhlas, Al-Falaq, An-Nas, Al-Fil, Quraysh, Al-Ma'un, Al-Kafirun, An-Nasr), and the meanings of the sura names come from the sura introductions on Diyanet's Qur'an portal; the verses on the "Animals in the Qur'an" cards (including Al-A'raf 7:133 on the Frog and Locust cards) follow Diyanet's translation (Diyanet İşleri Başkanlığı meali), and the prayers in "Kind Words" (Güzel Sözler) follow Diyanet's Hadislerle İslâm. In "Good Manners" (Güzel Ahlak), the verses follow Diyanet's Kur'an Yolu translation and the hadiths follow Diyanet's Hadislerle İslâm; the sources are listed in the Parent Panel. Progress in this section and the parent's "Task done" confirmation are stored only on the device. The app does not use the microphone and records no audio. No version of the app sends the progress record itself anywhere; the optional usage summary contains only a few numbers derived from it (such as lessons finished and tasks confirmed). To delete data, remove the iOS or Android app. Turning off the usage summary in the Parent Panel deletes waiting summaries and stops further ones; summaries already sent are not matched to anyone, so they cannot be found and deleted individually, and they are deleted after at most 24 months. On the web, Settings → "Reset progress" resets the progress in this browser (age group and screen-time settings are kept), and clearing browser data removes everything stored locally. You can ask for an anonymous backup created before October 18, 2026 to be deleted from the server by emailing support (srgulbay@gmail.com). Contact: srgulbay@gmail.com.