Effective date: 9 October 2026 Last updated: 9 October 2026
This English text is a translation of the Turkish original.
This notice explains which personal data we process when you use the AuraSleep mobile app (the “App”), why we process it, where we store it, who we share it with and what rights you have. It is the information notice under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) and, for users in the European Union, information under the General Data Protection Regulation (“GDPR”).
In short:
- Your night recordings are stored on your phone and are not sent to our servers.
- Your dream records are stored on your phone. Only when you ask for an AI reading is the written text of your dream sent, encrypted, to our server for the reading, and it is not stored on the server after the reading is produced.
- We use your location only approximately, for the weather and prayer times.
- We do not sell your data, we do not use it for advertising and we do not share sleep or health data with ad networks.
- You can delete your data from within the app at any time.
1. Data Controller
Joykek Dijital Reklam ve Pazarlama Danışmanlık Hizmetleri Ltd. Şti. Address: Suadiye Mah. Bağdat Cad. No: 399, B Blok Kat:1/1, Kadıköy / İstanbul, 34740 MERSIS: 0484-1923-7560-0001 Email: info@joykek.com Data protection requests: kvkk@joykek.com KEP (registered email): joykekdijital@hs01.kep.tr
2. What Data Do We Process?
2.1 Information you give us
- Your first name: To greet you by name in the morning (“Good morning, Faruk”). Your name stays only on your phone and is not sent to our servers.
- Your sleep goals and habits: Your bedtime and wake-up time and the goals you choose during onboarding.
- Account details (if you create an account): Your email address, or the identifier Apple or Google sends us when you sign in with them.
- Your wake-up rating: The sleep rating and mood you give in the morning.
- Your dream records: The dream you tell by voice, its transcribed text, the notes you add and the AI readings you receive. These are stored on your phone.
2.2 Data created while you use the App
- Night recordings: Moments with sound picked up by the microphone while you sleep (such as snoring, sleep talking or coughing). These recordings are stored only on your phone.
- Sleep analysis: Estimated sleep stages, sleep duration and sleep score calculated on your phone from sound and motion data.
- Alarms and settings: Your alarm times, chosen sounds and frequencies and notification preferences.
- Approximate location (if you allow it): Your location at city level. Used for the weather, the position of the sun and prayer times on the morning screen. We do not ask for your precise location and keep no location history.
- Apple Health / Health Connect data (if you allow it): Sleep data recorded by your smartwatch. Used only on your phone to make the sleep report more accurate.
- Subscription details: The status, start and end date of your Premium subscription. We do not see your payment card details; payments are taken by Apple or Google.
- Technical data: Device model, operating system version, app version, error and crash logs.
2.3 Special categories of personal data
Some of your data may count as special category data under Article 6 of the KVKK:
- Health-related data: Your sleep data, snoring recordings and Apple Health / Health Connect data.
- Data about religious belief: Turning on the fajr, tahajjud or suhoor reminders.
We process this data only with your explicit consent and only to provide the service to you. You can withdraw your consent at any time in the app settings; the related features are then turned off.
3. Why Do We Use Your Data?
| Purpose | Data used | Legal basis (KVKK Art. 5-6 / GDPR Art. 6-9) |
|---|---|---|
| Sleep tracking, morning report, trends | Night recordings, sleep analysis, Health data | Explicit consent (special category data) |
| Smart alarm and reminders | Alarm settings, sleep analysis | Performance of a contract |
| Fajr, tahajjud and suhoor reminders | Approximate location, worship preferences | Explicit consent (special category data) |
| Weather and position of the sun on the morning screen | Approximate location | Explicit consent (location permission) |
| Words of the day | Sleep score range, weather, language (your name is not sent) | Performance of a contract |
| Dream journal and AI dream reading | Dream record and text (only the text for a reading, without storing it) | Explicit consent |
| Premium subscription | Subscription details | Performance of a contract |
| Troubleshooting and security | Technical data | Legitimate interest |
| Legal obligations | Relevant records | Legal obligation |
We do not use your data for advertising, profiling or sale. We never share sleep or health data with any ad network.
4. Where Is Your Data Stored?
- Only on your phone: Night recordings, sleep analysis, Apple Health / Health Connect data, alarm settings, your first name, your dream records and AI readings.
- On our servers: Your anonymous device ID, platform, subscription status, daily usage counter and error logs. Dream texts are processed only while a reading is being produced; they are not stored and are not written to logs.
- Our servers are in data centres in Germany (European Union). Data is encrypted in transit and at rest.
5. Who Do We Share Your Data With?
We share your data only with service providers that work on our behalf and are needed to deliver the service, and only as much as needed:
| Service provider | Purpose | Data shared |
|---|---|---|
| Apple (App Store, WeatherKit) / Google (Google Play) | App distribution, payment, weather | Subscription transaction, approximate location (for the weather) |
| RevenueCat | Verifying subscription status | Anonymous user ID, purchase record |
| Anthropic (Claude) | Dream reading, words of the day | Dream text; for the words of the day, sleep score range and weather. Your name and voice recording are not sent. |
| Apple / Google on-device speech recognition | Transcribing your dream recording | Dream voice recording; processed by the operating system’s speech recognition service |
| Diyanet (Presidency of Religious Affairs) prayer time data | Prayer times | No personal data is shared; only city-level prayer times are retrieved |
Our agreements with AI providers require that the data sent is not used to train their models.
We may also share data with competent public authorities where required by law.
6. Transfers Abroad
Some of our service providers are located outside Türkiye (in the European Union and the United States). Transfers abroad are made under Article 9 of the KVKK with standard contracts or your explicit consent. For EU users, the GDPR standard contractual clauses apply.
7. How Long Do We Keep It?
| Data | Retention period |
|---|---|
| Night recordings (on your phone) | Last 3 nights on the free plan; until you delete them on Premium |
| Dream records and readings (on your phone) | Until you delete them or the app |
| Dream text sent to the server | Not stored; deleted from memory right after the reading is produced |
| Account and subscription details | While your account is open; at most 30 days after a deletion request |
| Invoice and payment records | As required by law (kept by Apple / Google) |
| Error logs | At most 90 days |
Data whose retention period has ended is deleted, destroyed or anonymised.
8. Use Of Artificial Intelligence
- Dream readings and the words of the day are produced by artificial intelligence.
- AI readings are for fun and self-reflection; they are not medical, psychological or religious advice and say nothing about the future.
- We send the AI only the text needed for the reading; we never send information that identifies you, including your name.
9. Children’s Privacy
The App is not designed for people under 16. If we learn that a user is under 16, we delete their data.
10. Your Rights
Under Article 11 of the KVKK (and Articles 15-22 of the GDPR if you are in the EU) you have the right to:
- Learn whether your personal data is processed and request information if it is
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties in Türkiye or abroad to whom it is transferred
- Request correction if it is incomplete or inaccurate
- Request its deletion or destruction
- Request that corrections and deletions be notified to third parties it was transferred to
- Object to a result against you arising solely from automated analysis
- Claim compensation if you suffer damage from unlawful processing
- Receive your data in a portable format (GDPR)
- Withdraw your explicit consent at any time
In the app: Under Profile > Privacy & Data you can download your data, delete your dreams and recordings, turn off permissions and delete your account.
Requests: You can apply by emailing kvkk@joykek.com or in writing to the address above. We resolve your request free of charge within 30 days at the latest. If you are not satisfied with our answer, you can complain to the Turkish Personal Data Protection Board (or, in the EU, to the data protection authority in your country).
11. Security
We protect your data with technical and organisational measures such as encryption in transit and at rest, access control and regular security updates. No system is one hundred percent secure; if a breach occurs, we will inform you and the competent authority as required by law.
12. Changes
We may update this notice. We will let you know in the app about important changes. The current version is always available in the app and at https://aurasleep.app/gizlilik (English: https://aurasleep.app/en/privacy/).
13. Contact
Send your questions to info@joykek.com and requests about your personal data to kvkk@joykek.com.