nuppu

Privacy Policy

Son guncelleme / Last updated: April 1, 2026

1. Overview

Nuppu (“the App”) is a life management application available on iOS, iPadOS, macOS, and watchOS. This Privacy Policy explains how your personal data is collected, processed, and protected. The App is designed for users aged 7 and older.

2. Data Collected and Sources

2.1. Apple HealthKit Data

With your explicit permission, the App accesses the following HealthKit data:

  • Calorie intake and expenditure
  • Workout and exercise data
  • Sleep analysis data
  • Water consumption data
  • Menstrual cycle and reproductive health data

HealthKit data is processed only on your device and is not shared with third parties in accordance with Apple's privacy requirements. This data is never used for advertising or marketing purposes.

2.2. Apple CloudKit (Private Database)

All your personal data is stored in Apple CloudKit Private Database. This means your data is tied exclusively to your iCloud account and cannot be accessed by third parties. Stored data includes:

  • User profile information
  • Habit records
  • Nutrition and water intake history
  • Sleep history
  • Menstrual cycle and mood records
  • Alarm and reminder settings

2.3. Supabase Edge Functions (AI Proxy)

To provide AI-powered recommendations, your data is relayed through a Supabase Edge Function to the AI service. During this process:

  • Data is only temporarily processed and is not persistently stored.
  • Request data is deleted after the AI response is received.
  • No personal data is used by the AI provider for training purposes.

2.4. Apple GameKit

The App offers leaderboard functionality through GameKit. Only your leaderboard score is shared via Game Center. Health data and other personal information are not shared with GameKit.

2.5. Apple Vision Framework

Photo analysis is performed entirely on-device. Images are never sent to any server and are not stored after processing.

3. Sensitive Personal Data

Menstrual cycle data and mood records are classified as “special category personal data” under the Turkish Personal Data Protection Law (KVKK, Law No. 6698). Your explicit consent is obtained for processing these data.

4. Data Security

  • All data is encrypted during transmission using TLS/SSL.
  • CloudKit data is protected by Apple's encryption standards.
  • HealthKit data is subject to Apple's privacy framework.

5. Third-Party Sharing

Your personal data is not shared with third parties. Exceptions:

  • Legal obligations (court order, legal regulations).
  • Temporary data transfer for AI proxy processing (not persistently stored).

6. User Rights

You have the following rights:

  • Request access to your data
  • Request correction of your data
  • Request deletion of your data
  • Object to data processing
  • Request data portability

You can completely delete your account and all associated data from the in-app settings.

7. Children's Privacy

The App is suitable for users aged 7 and older. Parental or guardian consent is required for users under 13. We do not knowingly collect data from children under 7.

8. Contact

For privacy-related questions: privacy@nuppu.io