MindBall Privacy Policy
Last Updated: January 18, 2026
1. About This Policy
1.1 Welcome to MindBall! This Privacy Policy ("Policy") explains how your personal data is processed through the MindBall mobile application and www.themindball.com website (collectively "Services") operated by Muter Bilişim Anonim Şirketi ("Company"). 1.2 The purpose of this Policy is to inform you about the processing of your personal data and to ensure transparency in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the GDPR.
2. Data Controller
The data controller responsible for the processing of your personal data:
Muter Bilişim Anonim Şirketi
info@themindball.com | support@themindball.com
3. Categories of Personal Data Collected
MindBall collects the following categories of data to provide its services:
| Category | Description |
|---|---|
| User Data | Name, surname, phone number, email address, password, and IP address. |
| Usage Data | Time spent in the app, session listening details, session statistics, device model, and operating system. |
| Psychometric Data | Survey responses, daily session question answers, weekly positive/negative emotion selections. |
| Goal Tracking Data | Segments selected in the "Dream" tab (physical, mental, etc.) and tracking data related to created dreams. |
| Payment Data | Purchase history and plan details. (Your credit card information is processed directly by Apple or Google; it is not stored by us.) |
4. Processing Purposes and Legal Bases
Your personal data is processed for the following purposes and legal bases:
| Purpose | Data Category | Legal Basis |
|---|---|---|
| Personalized Coaching: Creating weekly sessions based on survey and emotion data. | Psychometric Data, Usage Data | Performance of Contract / Legitimate Interest |
| Service Provision: Membership creation and subscription management. | User Data, Payment Data | Establishment and Performance of Contract |
| Analysis and Improvement: Content improvement based on usage patterns. | Usage Data | Legitimate Interest |
| Marketing: Newsletter and promotions (when consent is given). | User Data | Explicit Consent |
5. Third-Party Services and Data Transfer
Your data may be shared with the following trusted partners to provide the technical infrastructure of our services:
- RevenueCat: For managing and verifying in-app subscriptions.
- Firebase: For app infrastructure, authentication, and data synchronization.
6. Data Retention Period
6.1 Your personal data is retained as long as your membership is active and for the legally required periods after membership ends (e.g., tax regulations). 6.2 Data of users without an active subscription is retained for 24 months from the last login date to provide a "welcome back" experience, after which it is anonymized or deleted.
7. Cross-Border Data Transfer
7.1 Due to the technical infrastructure of our services, your personal data may be transferred to and stored on servers located outside of Turkey. Our primary Firebase backend is hosted in Europe (europe-west1), and we do not use AWS. 7.2 These transfers are carried out in compliance with Article 9 of the Turkish Personal Data Protection Law No. 6698 (KVKK), which governs the cross-border transfer of personal data. 7.3 Adequate protection measures are in place for all international data transfers, including standard contractual clauses and the data protection commitments of our service providers. We ensure that any third party receiving your data provides a level of protection equivalent to that required under KVKK and, where applicable, GDPR. 7.4 By using MindBall and accepting this Privacy Policy, you provide your explicit consent for the transfer and processing of your personal data on servers located outside of Turkey, as described above.
8. Children's Privacy
MindBall Services are not intended for individuals under the age of 18. If we become aware that we have knowingly collected data from this age group, we will immediately delete such data from our systems.
9. Data Security and Account Deletion
9.1 Security: Your data is protected against unauthorized access using SSL encryption and modern server protection methods. 9.2 Account Deletion: You have the right to delete your account and all your data at any time through the "Settings" section in the app or by sending a request to support@themindball.com.
10. Your Rights (Under KVKK and GDPR)
You have the following rights when using our services:
- To learn whether your personal data is being processed.
- To request information if your data has been processed.
- To request correction of incomplete or inaccurate data.
- To request deletion or destruction of data (Right to be Forgotten).
- To object to a result arising against you through the exclusive analysis of processed data via automated systems.
11. Contact
For all privacy-related questions and to exercise your rights: