Legal

Privacy policy

Effective date: 21 October 2026

Mightlings is a bedtime story app for young children, provided by Supastack Teknoloji Limited Şirketi (Esentepe Mh. Talatpaşa Cd. No:5/1, Şişli, İstanbul, Türkiye). This policy explains what the app stores on your device, what it does not collect, how this website uses Meta's pixel only with your consent, and how we will communicate future changes. It covers the current version of the app and the website at mightlings.app. The app works offline and has no accounts, advertising or third-party services.

If you have a question about the app's data practices, or you are reviewing the app for a regulator or app store, contact us at privacy@mightlings.app.

Who we are

Our primary legal framework is the Turkish Personal Data Protection Law (KVKK, Law No. 6698). The EU General Data Protection Regulation (GDPR) applies as a supplement for users in the EU/EEA, and we take the US Children's Online Privacy Protection Act (COPPA) into account because the app is made for children. The app collects no personal data. The website processes personal data only through Meta's pixel, and only with your consent (see "This website"). If a future version changes how data is handled, we will update this policy before that version is published.

What we store on your device

The app stores a small set of preferences in your browser or device storage so it can remember your settings between uses. This information does not leave your device or reach us. The app has no accounts, so the preferences are not linked to your name, email address or a profile.

• bm-language: which language you last chose, English or Turkish.
• bm-sleep-minutes: how long the music keeps playing after a story ends, as set in parent settings.
• bm-volume: the narration volume level you chose.
• bm-seen-welcome: whether the welcome screens have already been shown, so they don't repeat every time.
• bm-last-story: which story was last playing, so the app can offer to continue it.
• bm-last-position: where in that story playback last stopped, so it can resume from there.
• bm-friend: which friend you last chose.
• bm-keep-awake: whether you chose to keep the screen on while a story or its music plays.
• bm-motion: whether you enabled the optional shake-to-glow feature.

You can clear all of this at any time by clearing the app's site data or storage in your browser or device settings. Doing so simply resets the app to first-run defaults; it does not notify us, because we never see this data in the first place.

What we don't collect

The current version of Mightlings:

• Does not require or offer account creation, sign-in, or a profile.
• Does not collect your child's name, age, photo, voice, location, or any other personal information.
• Does not use advertising, ad networks, or ad identifiers of any kind.
• Does not include third-party analytics, tracking, or software development kits (SDKs) of any kind.
• Does not send any data to us or anyone else. After the app and its stories first load, it runs and plays entirely on your device, with no further network connection needed.
• Does not use cookies for tracking, and sets no identifier that could follow your child across apps or sites.

The stories, their narration audio, and the character animation are bundled with the app downloaded from the App Store or Google Play. In the browser player, story audio is cached on your device when you first play it online.

One optional feature makes the character glow when you shake the phone. On iPhone, this requires Apple's motion-sensor permission, which can be enabled only in parent settings. The sensor reading is used at that moment to detect a shake. It is not stored, combined with other data or sent anywhere. If you disable the permission in your phone settings, the feature stops working.

Children's privacy

Mightlings is built for children roughly two to five years old, used together with a parent or caregiver.

The app does not collect personal information from anyone, including children. We therefore do not believe the current version triggers the obligations that COPPA or EU children's-data rules impose when an app collects personal information from children. There is no information about your child for you to consent to, access or delete. If this changes, we will update this policy before the relevant feature is published.

While the app is published in Apple's Kids Category or under Google Play's Designed for Families programme, we intend each version to meet the applicable programme requirements. This includes no third-party advertising, no collection of data that identifies a child, and a parental gate before any purchase, external link or account action.

Analytics

The current version contains no analytics or usage measurement.

A future version may add privacy-first usage measurement, run on servers we control, to help us understand which stories are used and for how long. If we do, the system will not collect a device ID, advertising ID, name, email address or other information that could identify your child or household. It may measure only events within the app, such as whether a story was started or completed. Before publishing that version, we will update this policy to state what is measured and why.

This website

The website at mightlings.app is for parents and is separate from the app. Most of its pages, including this policy, the terms, the support page and the error page, load nothing from third parties.

The home pages (English and Turkish) and the design notes can use Meta's pixel, a tool from Meta that tells Meta a browser visited the site. We use it so our Instagram and Facebook ads can reach parents who have already seen Mightlings, and to measure those ads. It runs only if you choose "Accept all" in the cookie banner on those pages. If you choose "Reject all", or your browser sends a Global Privacy Control signal, those pages send nothing to Meta.

When it runs, Meta receives the address of the page, the time of the visit, technical details of your browser and device, your IP address, and whether you tapped the App Store or Google Play badge (only which store, and the page language). The pixel sets a first-party cookie, _fbp, on mightlings.app so Meta can recognise your browser on later visits; it lasts up to 90 days. If you arrived from one of our ads, it also sets _fbc, which records that ad click, for up to 90 days. Meta may also read its own cookies, such as fr on facebook.com, and may combine what it receives with what it already knows if you use Facebook or Instagram, under Meta's privacy policy. We see only aggregated reports and ad audiences in Meta's tools. We do not send Meta your email address or phone number, and we do not receive your name or contact details.

Your choice is stored in your browser as mightlings-consent for 12 months, after which the banner asks again. You can change it at any time with "Cookie settings" at the foot of those pages; choosing "Reject all" also deletes the _fbp and _fbc cookies and stops the pixel at once. If your browser does not let the site store your choice (some private modes), the banner asks again on each page. Meta's own cookies on facebook.com are controlled in your Facebook account and browser settings.

The legal basis is your consent: explicit consent under KVKK Article 5, and GDPR Article 6(1)(a) together with the cookie rules in the EU and the UK. The recipient is Meta Platforms Ireland Limited for visitors in the EU/EEA and the UK, and Meta Platforms, Inc. elsewhere. Meta processes the data outside Türkiye, so by choosing "Accept all" you also consent to that transfer abroad. Nothing from the pixel runs inside the app.

Purchases

The current version is free to use, with no purchases of any kind. A future version may offer an optional subscription through the app store (Apple App Store or Google Play), for additional content beyond what's free. Any purchase flow we add will sit behind a parental gate designed to prevent a young child from completing it accidentally. Purchases will be handled entirely by the app store's own billing system. We will not see or store your payment details.

Your rights

KVKK Article 11 and GDPR Articles 15 to 22 give you rights over personal data we hold about you: to learn whether it is processed, to see it, to have it corrected or erased, and to object to how it is used.

However, no record about you or your child is held on a server we operate. We therefore have no personal data about you to retrieve, correct, erase or export. The preferences listed above remain on your device and can be cleared at any time through your browser or device settings. Data from the website's pixel is held by Meta: you can withdraw your consent with "Cookie settings" on the site, and use Meta's own tools for the data Meta holds.

If you believe that is wrong, write to privacy@mightlings.app and we will answer within thirty days. If our answer does not satisfy you, you may complain to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu, kvkk.gov.tr) or, in the EU/EEA, to your national supervisory authority.

This policy is governed by Turkish law. It is published in English and Turkish; where the two differ, the Turkish version prevails.

Contact

Questions about this policy or the app's data practices can be sent to privacy@mightlings.app. Our postal address is Supastack Teknoloji Limited Şirketi, Esentepe Mh. Talatpaşa Cd. No:5/1, Şişli, İstanbul, Türkiye.

Changes

If we change this policy, we will update the effective date above and describe the changes. Any material change will appear here before the app version that introduces it is published.

21 October 2026: added "This website", for Meta's pixel on the home pages and design notes, used only with your consent. The app is unchanged.