Parentyard Privacy Policy

Last updated: 9 October 2026

This Privacy Policy explains how Parentyard, operated by Gökhan Güzel ("we", "us"), collects, uses, and protects your personal data when you use the Parentyard mobile application (the "App"). We act as the data controller for the processing described below.

1. What data we collect

1.1 Account data

Phone number. You sign in with your mobile phone number using a one-time SMS verification code. Your phone number is stored with your account. We do not require or collect an e-mail address to create an account.
Acceptance of the Terms. When you create your profile we store which version of the Terms of Service you accepted and when.

1.2 Profile data

Required: username, first name, and last name.
Optional: middle name and profile photo.
Date of birth (required). It is kept private and is used only to check that you are 18 or older.

1.3 Content you create

Posts (text and photo), stories (photo or video), and comments.
Likes, saved posts, follows, blocks, and reports you send.
Photos are uploaded as JPEG images; location data (EXIF/GPS) is removed from the photo on your device before upload. Story videos are uploaded as MP4 files, with sound, together with a JPEG picture of their first frame.
Stories you watch: when you open someone else's story, your username and your like are written to that story; the story's owner can see them.

1.4 Your children

If you add a child, we store the child's first name, middle name (optional), last name, date of birth, gender, school, grade, and class section. Only you and a parent you share the child with can see these details. Parents with a child at your child's school can see you (your name, username, and photo) in that school's parent list; your child's details are not shown.
The child's photo, if you add one, is public: every Parentyard user can see it.
If your school is not on the list and you ask us to add it, we store the school's name, province, district, and type. An approved school joins the public school list. If you delete your account, your request is deleted too.

1.5 Education: classes, homework, and JuniorDemy

JuniorDemy. JuniorDemy is our learning app, run by the same controller. When you add a child, we also create the child in JuniorDemy with the child's first name, last name, and grade. When you change the child's school or grade, the JuniorDemy record is updated.
Exam results. The App reads your child's JuniorDemy exam results (correct answers, number of questions, time spent, and the days of study) to show you the child's progress. Only you and a parent you share the child with can see them.
Classes. A teacher can invite your child to a class. If you accept, the child's first and last name are copied to the class so the teacher can see them; if you decline, the invite is deleted. If you change the child's school, grade, or class section, the child leaves its classes and their homework.
Homework. Homework a teacher assigns to the class is written to your child's JuniorDemy record with its due date. The teacher sees which children in the class finished the homework.

1.6 Games

Game progress is kept only on your device; it is not sent to us. Games do not play online. A game's pictures and sounds are downloaded from the app store when you choose to download that game.

1.7 Notifications

We keep a list of in-app notifications for you (the type, who caused it, and when); the latest 50 are kept, and only you can see them.
When you accept your first class invite, your phone asks once for notification permission. If you allow it, your phone's notification token is saved in your profile (up to 5 devices), and we send only homework and class announcement notifications to your phone. You can turn this off in your phone's settings; the tokens are deleted when you delete your account.

1.8 Teacher applications

If you apply to be a teacher, we store the school you chose and a photo of your staff ID. Other users cannot see them.
An automated check by Google's AI model (Gemini) looks at the photo, together with your name and the school name, and suggests a decision; a person always makes the final decision.

1.9 Security and technical data

Read audit log. Google Firebase records which account read which data in our database, together with the IP address of the request. The log is kept in Google BigQuery. We use it to count how much each account reads.
Usage counters. We count how many actions (for example posts, likes, follows) and reads each account makes per hour and per day, to prevent abuse. If an account reads more than the daily limit, it is closed until the next day.
App Check token. Firebase App Check sends a token proving that requests come from the genuine App. It is not linked to your account.
Remote Config installation ID. Firebase Remote Config uses an installation ID to tell the App which minimum version is required. It is not linked to your account.
IP address. Firebase Authentication and Cloud Functions process the IP address of your device to deliver the service and prevent abuse.
Crash reports. When an error happens in the live version of the App, Firebase Crashlytics sends the error log, your device model, the operating system and App version, and an installation ID; your name, your phone number and children's data are not sent. We use it to find and fix errors.

1.10 What we do NOT do

Games show brand logos (sponsor spaces). The App has no advertising SDKs and no ad tracking.
No tracking of your usage across screens.
No access to your location or your address book.
No sale of personal data and no sharing of profiles with third parties.

2. Why we process your data (purposes and legal bases)

Purpose	Data	Legal basis (GDPR Art. 6)
Creating and operating your account; delivering the core social features (posting, stories, following, commenting, children)	Account, profile, content, children	Performance of a contract (Art. 6(1)(b))
Education features: classes, homework, JuniorDemy record, and showing your child's progress	Children, class membership, homework, exam results	Performance of a contract (Art. 6(1)(b))
Checking that users are 18 or older; recording acceptance of the Terms	Date of birth, Terms acceptance	Legal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f))
Safety and abuse prevention (reports, blocks, usage limits, closing accounts over the read limit)	Content, reports, usage counters, read audit log, IP address, App Check token	Legitimate interests (Art. 6(1)(f))
Making sure the App version is supported	Remote Config installation ID	Legitimate interests (Art. 6(1)(f))
Finding and fixing errors in the App	Crash reports (error log, device model, OS and App version, installation ID)	Legitimate interests (Art. 6(1)(f))

3. Who can see your content

Parentyard is a social app and every account is public. Other users can see your username, names, profile photo, follower and following counts, your posts, your comments, your stories (for 24 hours; stories pinned to your profile until you remove them), and your children's photos. Your phone number, date of birth, and your children's names and dates of birth are not shown to other users. Parents with a child at your child's school can see you (your name, username, and photo) in that school's parent list; your child's details are not shown. A teacher sees your child's name only after you accept the class invite. Please post responsibly.

4. Sharing and processors

Google Firebase and Google Cloud (Google LLC and its affiliates) provide our hosting, database, file storage, authentication, server functions, App Check, Cloud Messaging (push notifications), Remote Config, Crashlytics (crash reports), BigQuery (read audit log), and the Gemini AI model (teacher ID photo check, with your name and the school name). Google processes data on our behalf as a processor.
JuniorDemy is our own learning app, run by the same controller on Google Firebase. We share your child's first name, last name, grade, and class homework with it, and read the child's exam results from it (see section 1.5).
Legal requirements. We may disclose data where required by applicable law or valid legal process.

We do not share your personal data with advertisers or data brokers.

5. International transfers

Our data is stored on Google Firebase infrastructure, which may be located in the United States and other countries. Where personal data of persons in the EU/EEA is transferred outside the EEA, the transfer is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses and Google's data-processing commitments.

6. Retention

Account and content data are kept for as long as your account exists.
Teacher application photos are deleted when the application is decided, and in any case within 30 days; an application not decided within 30 days is rejected.
Stories stop being visible 24 hours after they are shared and are deleted automatically within one more day. Stories pinned to your profile (up to 30) stay visible and stored until you remove them.
Read audit log is kept in Google BigQuery for the period configured in Google Cloud.
Crash reports are kept in Firebase Crashlytics for 90 days.
Account deletion: you can delete your account in the App (Settings → Delete Account) or on our account deletion page. Deletion removes your profile, date of birth, blocks, follows, likes, saved posts, your posts with all comments under them, your stories, your children and their photos, your children's JuniorDemy records, your classes, class memberships, and homework, your notification list, all your photos, reports about you, and your sign-in record.
What stays after deletion: your username stays reserved so no one else can take it; comments you wrote on other people's posts; reports you sent about other users or posts; and your view record (username) on other people's pinned stories.
Reports are kept as long as necessary for safety and legal purposes.

7. Your rights

Depending on your location (including under the GDPR), you have the right to:

access the personal data we hold about you;
rectify inaccurate data;
erase your data (you can do this yourself via in-app account deletion);
restrict or object to certain processing, including processing based on legitimate interests;
data portability;
lodge a complaint with your local data protection supervisory authority.

To exercise these rights, contact us at egokhanguzel@gmail.com.

8. Security

Data is transmitted over encrypted connections and stored on Google Firebase infrastructure with server-side access rules restricting who can read and write each record. No system is perfectly secure; please keep your device and SIM secure, since your phone number is your sign-in credential.

9. Minimum age

Parentyard is intended for users aged 18 and older; we check this with the date of birth you enter. We do not knowingly allow accounts for anyone under 18. If you believe a user is under 18, please contact us at egokhanguzel@gmail.com and we will take appropriate action. Information about children is added only by their parent, as described in section 1.4.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date, and where changes are material we will notify you in the App.

11. Contact

Controller: Parentyard — Gökhan Güzel
E-mail: egokhanguzel@gmail.com