Privacy Policy

This policy explains how the World Lullabies (Dünya Ninnileri) mobile app ("App") for Android and iOS, developed by GM DevHub, handles data. It is written to be consistent with the Google Play Data Safety form, the Apple App Privacy details, the EU/UK GDPR and Türkiye's Law No. 6698 (KVKK).

1. Who we are (data controller)

GM DevHub is the developer of the App and the data controller. Email: info@gmdevhub.com.tr · Web: gmdevhub.com.tr.

2. Accounts and personal information

The App does not require an account and does not collect personal information such as your name, email address or phone number.

3. Microphone

Microphone disclosure. The App asks for microphone permission, and uses the microphone only when you start one of these features:

• To record lullabies in your own voice ("Recordings").
• When you turn on "Cry detection", which listens to the room so the lullaby can restart when your baby cries.

Recordings are stored only on your device and are never uploaded unless you share them yourself through the system share sheet. Cry detection analyses the loudness of the audio in real time on the device; the audio is not recorded, stored or sent to any server, and no data from it leaves your device. You can turn the microphone off at any time in the App or in your device settings.

4. Data stored on your device

Favourites, your list, settings, downloaded lullabies, imported audio files you choose and recordings are stored on your device. They are not sent to us. They are deleted when you delete them in the App or uninstall it. Night-screen effects may use the device motion sensor locally; its data is not stored or sent.

5. Lullaby catalogue (Firebase and file server)

The lullaby list is read from Google Firebase (Cloud Firestore) and audio files are downloaded from a file server. The App only reads the catalogue; it writes nothing to it. As with any internet request, your IP address and basic request information are processed by these servers (Google for Firestore). The App does not link this data to you and does not send us any personal information.

6. Advertising (Google AdMob)

The App is free and shows a banner ad at the bottom of the screen through Google AdMob (no full-screen, video or audio ads). The maximum ad content rating is set to "G". AdMob may collect data such as your advertising ID (Android), IP address, device information, approximate location (from IP address) and ad interactions to serve and measure ads, prevent fraud and, where allowed, personalize ads. On Android the App uses the advertising-ID permission. iOS: the App does not show the App Tracking Transparency prompt and does not access the IDFA; we do not track you as defined by Apple. Details: How Google uses information from sites or apps that use its services.

You can reset or delete your advertising ID and turn off personalised ads in your device settings (Android: Settings > Google > Ads; iOS: Settings > Privacy & Security > Tracking).

7. Third-party services

We do not use analytics or crash-reporting services and do not sell your data.

8. Why we process data and legal bases

• Catalogue and audio delivery: performance of the service you request (GDPR Art. 6(1)(b); KVKK Art. 5/2-c).
• Microphone features: your consent, given through the device permission and by starting the feature (GDPR Art. 6(1)(a); KVKK Art. 5/1). Audio is processed on the device only.
• Advertising: legitimate interests in funding the free App (GDPR Art. 6(1)(f); KVKK Art. 5/2-f); you can limit personalization in device settings.

9. Sharing, sale and international transfers

We do not sell personal data. California residents: under the CCPA/CPRA we do not "sell" personal information; AdMob may use advertising identifiers on Android to serve ads, which some laws treat as "sharing" for advertising. You can opt out in your device ad settings or by emailing us. Google may process data on servers outside your country, including the United States, under Standard Contractual Clauses and equivalent safeguards, in line with KVKK Art. 9. Connections to Firebase and Google are encrypted in transit.

10. Retention

• On-device data (favourites, list, downloads, recordings): until you delete it or uninstall the App.
• Server-side: we keep no user data about you. Catalogue and file servers keep standard technical access logs for up to 12 months.
• Advertising data: governed by Google's retention periods.

11. Your rights and deletion

We hold no account or server-side profile about you, so there is no account to delete: delete your recordings and downloads in the App, or uninstall it, to remove all local data. Under GDPR (where it applies), KVKK Art. 11 and similar laws you can ask whether data about you is processed, request access, correction, deletion or restriction, object to processing and withdraw consent. Email info@gmdevhub.com.tr; we answer within 30 days. You may also complain to the Turkish Personal Data Protection Authority (kvkk.gov.tr) or the authority in your EU/UK country of residence.

12. Children

The App is intended for use by parents and caregivers, for example to play lullabies for a baby. It is not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will delete it.

13. Security

Connections to Firebase and Google are encrypted. Recordings and downloads are kept in the App's private storage on your device. No method of transmission or storage is 100% secure.

14. Changes and contact

Updates to this policy will be published on this page with a new "Last updated" date (currently 5 November 2026).

• GM DevHub
• E-mail: info@gmdevhub.com.tr
• Web: gmdevhub.com.tr