Yuva Pati Privacy Policy

1. Data controller

This policy is prepared by ESER TEKNOLOJİK PAZARLAMA ANONİM ŞİRKETİ (İsmet Kaptan Mah. Şair Eşref Bulv. No:18/82 Konak, İzmir, Türkiye) under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).

Yuva Pati is your family's pet diary. What you write in the app is processed only on your and your family's devices; we cannot see or process it. This policy explains where your information is kept and which technical data we or service providers come into contact with.

Requests and contact: info@mekanapp.com.

2. Account and identity

Yuva Pati does not ask for your name, e-mail address or phone number and does not create an account. A family is set up on one phone; the family name and people's names stay only on the family's devices and never reach us. Another person joins your family by bringing the phones together and scanning a code; the same five pictures appear on both phones and the joining is confirmed on both.

When the app first opens it creates encryption keys on the phone. These keys are protected by the phone's secure hardware and never leave the phone.

3. Information in the app

• Diary: food, water, litter, walks, weight, medicine given and notes; who wrote each entry and when.
• Your pet's details and health record: your pet's name and details, vaccines, medicines and vet appointments.
• Reminders: vaccine, medicine and appointment reminders.
• Where it is kept: The information is stored encrypted on your phone. If your family uses more than one phone, it is kept only on your family's phones and travels end-to-end encrypted between them. We cannot see it.
• Who sees it: The people in your family. Nobody outside your family can see it.

Yuva Pati does not calculate doses, does not suggest medicine or vaccine schedules and gives no medical advice; consult your vet for decisions about your pet's health.

4. Location

Yuva Pati does not use location and does not request location permission.

5. Camera and code scanning

The camera opens only to read the family join code on a family member's screen. The code is read on your phone; the image is not sent to us or to any cloud. No audio is recorded; microphone permission is not requested.

Code scanning is done on the phone with the ML Kit code scanning library. This library does not send the image or the code it reads. However, on some phones it sends diagnostic data about its own operation, not linked to you, to its provider (United States); on other phones the app turns this sending off and the library sends nothing. The data sent is: the phone's manufacturer, model and operating system version, the app's name and version, a random installation number used only to count installations, processing time and error codes. The provider uses this data to measure the library's performance, fix its errors and prevent abuse. This data is not matched with your name, your family or the information in the app; we do not see it.

6. Technical data processed and service providers

• Connection between devices: Your family's phones connect to each other end-to-end encrypted over the home network or the internet. Devices find each other through an open peer-to-peer network (HyperDHT) and connect directly where possible; public network nodes are used when first joining this network. If a direct connection cannot be made, encrypted data may be relayed through another node in the network. These nodes and other computers in the network may see your phone's IP address; they cannot see the content or which family you belong to. We do not operate a server in this network; we do not see or store your IP address.
• Provider of the code scanning library: the diagnostic data described in section 5, not linked to you; United States.
• Notifications: Reminders are set up and run on your phone. If someone in your family sends an SOS, Yuva Pati shows it too. Notification content goes to no server.
• App stores: distribution of the app; their own privacy policies apply.

7. Data not processed

We do not collect names, phone numbers, e-mail (unless you write to us), contacts, location, audio recordings, advertising identifiers or the content in the app. The app contains no advertising, tracking, analytics, crash reporting software or artificial intelligence; the only exception is the code scanning library's own diagnostic data described in section 5, sent only on some phones. No face or fingerprint data is processed; face and fingerprint checks happen inside the phone.

8. Purposes and legal basis

The technical data described here is processed only to provide the service and keep it secure: connecting your family's devices, making code scanning work correctly and replying when you write to us.

Legal basis (KVKK Art. 5/2): connecting the devices is necessary for the conclusion and performance of the contract (c); the code scanning library's diagnostic data, processing the e-mail you send us and the security of the service rely on our legitimate interest (f). Under GDPR: Art. 6(1)(b) and 6(1)(f).

Transfers outside Türkiye: nodes in the direct connection network may be in different countries and may see your IP address during a connection. The code scanning library's diagnostic data, not linked to you, goes to its provider's servers in the United States. The content in the app is not transferred abroad.

9. Retention and deletion

• Diary, health record and reminders: on your family's devices until you or your family delete them.
• IP address: not kept by us; we do not operate a server in this network.
• Code scanning library diagnostic data: subject to its provider's own retention periods; we do not see or store it.
• E-mails you send us: at most 1 year after your question is resolved.
• All data: Since there is no account, there is no account to delete on a server. When you remove the app from your phone, all Yuva Pati information and encryption keys on that phone are deleted. Records on your family's other phones remain there. There is no cloud backup.

For ways to delete your data, see the Data Deletion page: mekanapp.com/yuva/pati/data-deletion-en.html.

10. Your rights

Under KVKK Art. 11 and the GDPR you have the right to learn whether your data is processed, to request information, to learn the purpose of processing and whether it is used accordingly, to know the third parties it is transferred to, and to request correction, deletion, objection to automated processing and compensation for unlawful processing.

Because the information in the app is on your devices, you can correct and delete it yourself in the app. We hold no record that matches you to your identity. For other requests: info@mekanapp.com. Requests are answered free of charge within 30 days at the latest.

11. Phone permissions

Permissions are requested only when you use the related feature or during setup, together with an explanation. Location, microphone, contacts and photos permissions are not requested.

12. Children

Yuva Pati can also be used within the family by children whom the parents add to the family; parents approve a child joining the family. Age is not recorded. The app has no chat, no contact with strangers and no artificial intelligence. No additional data is collected from children. There is no advertising or tracking.

13. Security

Content is end-to-end encrypted, and the connection between devices is end-to-end encrypted too. Only standard, publicly reviewed encryption methods are used. Keys are protected by the phone's secure hardware. You can turn on an optional app lock (PIN, or face or fingerprint). If a phone is lost, the parents in the family can remove that phone from the family.

14. Changes

If this policy changes, this page is updated; important changes are announced in the app. Effective date: the day the app is first published in the store. Last updated: 25 October 2026.