This policy explains how Baris Yaman (Zaripo) (“Zaripo”, “we”, “us”) handles personal information when you use the Zaripo mobile app and the zaripo.app website. Last updated: 19 October 2026.
1. Who is responsible
Baris Yaman, operating as Zaripo, is the controller of the personal data described here. Contact: info@zaripo.app.
2. Information we process
Account data: your email address, used to sign you in with a one-time code, and basic session information.
Care records you enter: your children's names (or nicknames), optional birth dates and time zones, and records of sleep, feeds, diapers, notes, reminders and similar entries. Information about a child is health-related and we treat it as sensitive.
Family data: household membership, roles and invitations.
The current version does not offer paid purchases or verify store subscriptions. If purchases are introduced, we will update this policy before enabling them. We do not receive your card details.
Technical data: limited server logs (such as IP address, request time and error details) used for security and reliability.
Notifications: if you enable reminders, they are scheduled locally on your device.
3. How we use it
- To provide the app: authentication, storing and syncing records between family members' devices, summaries and exports.
- To keep the service secure, prevent abuse and fix errors.
- To manage your household and access permissions.
- To reply to your support requests.
- To meet legal obligations.
We do not sell personal data, do not show advertising, and do not use your records for advertising or profiling. We do not use your or your child's records to train AI models.
4. Legal bases
Where UK/EU GDPR applies: performance of our contract with you (providing the app), your consent (for health-related information about your child that you choose to record — you can withdraw it by deleting records or your account), legitimate interests (security and reliability), and legal obligation.
5. Where data is stored
Records are stored first in an encrypted database on your device. When you sign in, they are synced to our servers so that family members can see them. Our backend runs on infrastructure we operate. Family sync is not end-to-end encrypted; the server processes synced care records. Cloudflare delivers and protects web traffic. This website loads fonts from Google Fonts, which receives technical request information such as IP address and browser details.
Authentication emails are sent through our email provider, Resend, which processes your email address and the message for delivery. Subscriptions are processed by Apple or Google under their own privacy policies.
We share data only with these service providers, with family members you invite (according to the role you give them), when required by law, or to protect rights and safety.
6. International transfers
Some providers may process data outside your country. Where required we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
7. Retention
We keep your data while your account is active. Account deletion revokes your access immediately and queues server removal, eligible for processing after 24 hours. Completion depends on the deletion worker running. A household with no other members is removed. If others remain, shared care records may remain with your authorship removed. Deleted-record markers and sync history can remain to keep devices consistent. Account deletion does not remotely erase other members’ devices, exports or email correspondence. Backup or operational copies, if present, may outlast active-storage deletion; contact us about a specific removal request. Security logs are kept only as long as needed.
8. Your rights
Depending on where you live (including under the UK GDPR, EU GDPR and Turkey's KVKK) you can access, correct, export, delete or restrict the use of your data, object to processing and withdraw consent. Most of this is available in the app (Settings → Data, Children). Otherwise email info@zaripo.app. You may also complain to your data protection authority, such as the UK Information Commissioner's Office or Turkey's Personal Data Protection Authority (KVKK).
9. Security
We use encryption in transit, an encrypted on-device database, role-based access within households and access controls on our servers. No system is perfectly secure; please protect your device and email account.
10. Children
Zaripo is for parents and caregivers aged 18 or over. It is not directed at children, and we do not knowingly create accounts for them. Information about a baby is entered and controlled by their parent or guardian.
11. Cookies and analytics
This website does not use advertising or tracking cookies. The app does not contain third-party advertising or tracking SDKs.
12. Changes
We will update this page when our practices change and revise the date above. For material changes we will notify you in the app or by email.
13. Contact
Questions or requests: info@zaripo.app.