Privacy policy

This privacy policy explains how Yapigel Teknoloji Ticaret Limited Sirketi ("we", "us") processes personal data when you use the Veni Tales mobile application and this website (together, the "Service"). We are established in Türkiye; if you live elsewhere, additional rights may apply under local law. By using the Service you agree to processing as described here. We may update this policy and will try to notify you of material changes through the app or the website.

Data controller

The data controller is Yapigel Teknoloji Ticaret Limited Sirketi, processing personal data under Law No. 6698 on the Protection of Personal Data ("KVKK") and related Turkish legislation, where applicable.

• Address: No. 25-101, Carsi Mahallesi, Kazim Karabekir Caddesi, Merkez, 53020 Rize, Turkiye
• Tax ID (VKN): 9371349763
• Contact: hello@venitales.com

Categories of personal data

• Identity / profile: name or display name, age or age range, interests and preferences you provide for a child profile (depending on app flows).
• Contact and account: email address if you sign in that way; user identifiers; technical information related to sessions and authentication.
• Transactions / purchases: limited purchase and subscription data such as transaction identifiers, product identifiers, date and amount, and subscription status as shared by app stores and related infrastructure (we do not receive your full card details).
• Content: text you enter to create stories, theme and setting preferences, and choices related to narration or generation.
• Usage and device: app version, language preference, device model and OS summary, crash logs, and technical logs related to feature usage (fields may vary by release and settings).

Purposes of processing

We process data to provide and secure the Service, generate personalized stories and audio, improve quality, respond to support requests, and comply with legal obligations.

Current practices: we do not send marketing emails; we do not use push notifications for marketing; we do not use analytics or advertising cookies on this website. Only cookies or similar technologies strictly necessary to operate the site may be used.

AI-generated content and audio

To generate story text, information you provide (such as the child's name or display name, age or age range, interests, themes, and prompts) may be processed by providers of AI-based text generation. Generated text may be sent to text-to-speech providers to create audio.

Model training: we do not use your inputs or generated stories to train AI models for our own purposes. Providers may have their own policies for how they process data on their systems; please review their documentation where relevant.

We apply reasonable technical and process measures for safety; AI outputs may still be imperfect or unsuitable for some ages. Parents or guardians should review content before sharing it with a child.

Subprocessors and third-party services

We use providers in the following categories. We do not list legal trade names individually in this policy; you may request further information by emailing hello@venitales.com.

• Mobile app store and in-app purchase infrastructure
• Subscription and purchase management infrastructure
• Cloud hosting, databases, and application backend
• Authentication and security services
• AI-based text generation services
• Text-to-speech / voice synthesis services
• Crash reporting or error monitoring tools (where used)

International transfers

Some providers may process data outside Türkiye. Where this occurs, we rely on appropriate safeguards and legal bases under KVKK and applicable law (such as contract performance, explicit consent where required, or other permitted grounds).

Legal basis

Processing may rely on legal bases under KVKK Articles 5 and 6, including performance of a contract, legal obligation, legitimate interests, or explicit consent for optional features.

Payments and subscriptions

In-app purchases (such as credit packs) and subscriptions are primarily handled through the Apple App Store and related payment and subscription infrastructure. We do not receive your full payment card details. We may process limited data such as transaction identifiers, product identifiers, date and amount, and subscription status. Refund requests are primarily governed by Apple's processes; you may contact us at hello@venitales.com for assistance.

Retention

We retain data for as long as necessary for the purposes described in this policy and as required by tax, accounting, commercial, or similar legal retention rules, and in line with our technical backup practices. Retention periods may vary by data category. When retention ends, we delete, destroy, or anonymize data. We may publish a more detailed retention table in updates to this policy or provide it upon request.

Children's privacy

Veni Tales may offer child-directed content. Account creation, purchases, and contractual steps are carried out by a parent or guardian. We process child-related data only to the extent needed to personalize stories and provide the Service.

Examples of what we may process: a name or display name used in the story, age or age range, interests and theme preferences, and in-app listening or creation history where features are enabled.

Examples of what we do not collect or ask for: photos or videos of the child, the child's voice recordings (unless separately requested for a feature you choose), the child's email or phone number, precise location of the child, or the child's social media profiles.

Parents or guardians may exercise access, correction, or deletion through in-app flows or by emailing hello@venitales.com. If you believe we collected a child's data unlawfully, contact us immediately.

Account deletion

You can delete your account and related personal data in the app under Settings → Account → Delete my account. You may also email hello@venitales.com with information that allows us to verify your identity. Records we must keep by law (for example certain accounting or tax records) may be retained as required. Deletion from backups may take additional time for technical reasons.

Data security

We implement reasonable technical and organizational measures (such as encryption in transit, access controls, and vendor review). No method of transmission over the internet is completely secure.

If we become aware of a personal data breach that affects your personal data, we will take steps to notify the Turkish Personal Data Protection Authority and affected individuals as required by KVKK and related legislation.

Your rights under KVKK (Article 11)

Under Article 11 of KVKK, you have the right to:

1. Learn whether your personal data are processed,
2. Request information if they have been processed,
3. Learn the purpose of processing and whether data are used in line with that purpose,
4. Know third parties to whom personal data are transferred domestically or abroad,
5. Request rectification if data are incomplete or inaccurate,
6. Request deletion or destruction of personal data under the conditions set out in Article 7 of KVKK,
7. Request notification of third parties to whom data were transferred about operations carried out under items (5) and (6),
8. Object to outcomes against you where data are analyzed exclusively through automated systems,
9. Claim compensation for damage arising from unlawful processing.

Submit requests to hello@venitales.com. We may ask for identity verification and additional information depending on your request. Response timelines follow statutory periods under applicable law.

Contact

For privacy questions: hello@venitales.com.