Last updated: July 22, 2026
This Privacy Policy explains how your personal data is handled when you use the Boon AI mobile application (the "App"). Boon AI is a habit and routine tracker with an AI-powered coach. This policy is written to meet our transparency obligations under the EU General Data Protection Regulation ("GDPR") and the Turkish Personal Data Protection Law ("KVKK").
The data controller is Dode Yazılım.
Contact: iletisim@dodeyazilim.com
We rely on the following infrastructure providers to deliver the service:
Your account information and user content (routines, check-ins, journal, mood) are stored on Supabase infrastructure. The servers are located in Australia (ap-southeast-2), which means your data is transferred internationally (see Section 6). Data is protected with TLS in transit and encryption at rest.
AI coach responses and the voice coach's transcription / speech generation are produced using the OpenAI API. Your messages — and any recording you explicitly start — are relayed through a secure server-side proxy (Supabase Edge Function); the API key is never present on your device. To generate your personal plan, your onboarding answers (age, gender, height, weight, sleep schedule, any medication names/times) and, if you use photo verification, the photo you take are also relayed through the same proxy. Audio files and verification photos are not stored permanently by Boon. Under OpenAI's API defaults, content submitted via the API is not used to train their models.
Used to validate and track your premium subscription. RevenueCat only receives your internal user ID and store purchase information — never your payment card details.
Used to detect app crashes and technical errors. No personal content (email, journal entries, etc.) is sent; only technical diagnostics and an internal user ID are processed.
We collect anonymous usage statistics to understand how the App's features are used. Data is processed on PostHog's servers in the European Union. It is never used for advertising purposes.
We process your personal data on the basis of performance of a contract (delivering the service), legitimate interests (crash reporting, security, product improvement), and, where required, your consent — in particular for international data transfers under KVKK Article 9 — in accordance with GDPR Article 6 and KVKK Article 5.
The service providers listed above operate servers outside your country (Supabase: Australia; OpenAI, RevenueCat, Sentry: United States; PostHog: European Union). Transfers are carried out under data processing agreements with these providers and appropriate safeguards such as Standard Contractual Clauses (SCCs) under the GDPR, and in accordance with KVKK Article 9.
Under GDPR Articles 15–22 and KVKK Article 11, you have the right to access, rectify, and erase your data, to object to or restrict processing, and to data portability.
You also have the right to lodge a complaint with your local supervisory authority (or, in Türkiye, with the Personal Data Protection Board).
Boon AI is not directed at children under 13, and we do not knowingly collect personal data from anyone under 13. If we become aware that we have processed data belonging to a child under 13, we will delete it promptly.
Your data is encrypted with TLS in transit, and protected with encryption at rest and access controls. While no system is 100% secure, we apply industry-standard technical and organizational measures to protect your data.
We may update this policy from time to time. The current version is always published on this page, and the "Last updated" date is revised accordingly.
For any privacy-related question or request:
Dode Yazılım — iletisim@dodeyazilim.com
Çocuklarla cinsel içerik ve açık pornografik içerik yasaktır. Duygularınızı, öfkenizi veya kendine zarar düşüncelerinizi destek aramak için anlatmanız bir kural ihlali sayılmaz.
AI koç ve günlük yansıtmasında dar içerik denetimi ve otomatik çıktı denetimi uygulanır; güvenli olmayan yanıt sabit güvenli bir metinle değiştirilir. Kriz desteği hesap kısıtlamasından muaftır. Sesli koç yalnız sunucunun onayladığı yanıtları seslendirir; hafıza özeti saklanmadan önce denetlenir. Kısa sürede tekrarlanan girdi retleri geçici bekleme getirir; ağır veya tekrarlanan kötüye kullanımda AI erişimi elle kısıtlanabilir.
destek@dodeyazilim.com adresine uygulama adı ve sorunun açıklamasıyla uygunsuz içeriği bildirebilir, kısıtlamaya itiraz edebilirsiniz. Gerekli olmadıkça hassas kişisel bilgi göndermeyin. Bildirimler incelenir ve gereken önlem alınır.
Ret geçmişi, hesabınıza bağlı zaman ve neden/tür bilgisinden oluşur; reddedilen metin, fotoğraf veya ses ret kaydına eklenmez. Bu uygulamadaki hesabınızı/verilerinizi sildiğinizde ret geçmişi de silinir. Aynı giriş kimliği diğer uygulamalarımız için korunuyorsa, ayrıca tutulan hesap kısıtlama kaydı kötüye kullanımı önlemek için kalabilir; bu kayıt ret geçmişi değildir. İtiraz ve veri talepleri için bize yazabilirsiniz.
Sexual content involving children and explicit pornography are prohibited. Describing your feelings, anger or thoughts of self-harm to seek support is not a rule violation.
AI coach and journal reflections use a narrow content policy and automated output checks; unsafe replies are replaced with a fixed safe message. Crisis support remains available to restricted accounts. Voice coaching speaks only server-approved replies, and memory summaries are checked before storage. Repeated input rejections in a short period trigger a temporary pause; serious or repeated abuse may lead to a manually imposed restriction on AI access.
Report inappropriate content or appeal a restriction by emailing destek@dodeyazilim.com with the app name and a description of the issue. Avoid unnecessary sensitive personal information. Reports are reviewed and appropriate action is taken.
The rejection history contains the time and reason/type linked to your account; rejected text, photos or audio are not added to that record. Deleting your account/data in this app deletes the rejection history. If your shared sign-in identity remains for our other apps, a separate account restriction may remain to prevent abuse; it is not the rejection history. Contact us to appeal or make a data request.