Privacy Policy
Data controller
The data controller of the STARMONDO app is FM Teknoloji. For questions and requests: destek@fmteknoloji.com. This policy is prepared under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the EU General Data Protection Regulation (GDPR).
What we process
Camera: used to show the sky; the image never leaves your device and is not recorded. Location: used on your device to calculate the sky. Only an approximate location (about 10 km) and your country code are sent to our server for weather and the countries race; your exact location is not stored. Account: a hash of your device ID (not the ID itself), your nickname and, if you choose, your Apple or Google account identifier (we do not receive your email or name). Content: names, notes, photos, sounds and social usernames you add to your stars; messages you leave in the sky. Purchases: the store receipt verification; your card details never reach us. Notifications: your device push token and preferences, if you allow notifications. Usage: aggregated counts of screen use that do not identify you, and error reports with personal information removed. Access log: for actions that create content, your IP address, time and type of action (required by Turkish Law No. 5651; no content is stored).
Permissions
Camera, location, microphone, photos and notification permissions are optional and are requested only when you use the related feature. You can withdraw them at any time in your phone settings; only that feature will stop working.
Waitlist
If you join the waitlist on our website before launch, we process your email address, chosen language, which link brought you (e.g. Instagram) and your invite code. The only purpose is to tell you about the launch and deliver invite rewards; the legal basis is your consent. Your email is stored encrypted, your IP address is not recorded, and your sign-up is confirmed only through the link in the email. Our emails are sent from our own mail server. You can leave at any time through the link in every email; when you do, your record is deleted completely. The list is deleted at the latest 6 months after launch.
Why we process it
To provide the service (performance of contract), for security and to prevent abuse and illegal content (legitimate interest and legal obligation), to verify purchases and for accounting (legal obligation), and for notifications and services that require international transfer (consent).
Who we share it with
Apple and Google: payments and sign-in. Google: automatic moderation of photos and translation of messages. Open-Meteo: cloud cover using approximate location. Expo: delivery of notifications. NASA SkyView: only sky coordinates for real images of celestial objects (no personal data). Some of these services are located outside Türkiye; data is transferred only for the stated purpose and only as needed. We do not sell your data or use it for advertising.
What is public
Your stars, their names, approved images, your profile name and your leaderboard rank are visible to other users. You can hide from rankings in Settings. Messages you leave in the sky are shown to the person who catches them anonymously or with the name you choose; your exact location is never shared.
Security
All connections between the app and our server are encrypted. Your device ID is stored only as a one-way hash. Only authorized staff access data, and only as their role requires. Uploaded photos and sounds are reviewed automatically and, when needed, by a moderator before they are published. In case of a data breach, we notify the Turkish Personal Data Protection Authority and affected users within the legal time limits.
Retention
Messages nobody caught are deleted after 30 days and delivered message texts after 90 days. Only a fingerprint of rejected files is kept. Purchase records are kept for the legally required period. Content that violates child safety is preserved for legal reporting. Access logs are kept for 1 year as required by Turkish Law No. 5651, shared only upon a valid request from competent authorities, and kept for this period even if you delete your account.
Your rights
Under KVKK and GDPR you may access, correct and delete your data, object to processing and receive a copy of your data. You can get a copy of your data and delete your account inside the app: Profile & settings > Privacy & legal. Other requests are answered within 30 days: destek@fmteknoloji.com. If you are not satisfied, you may complain to the Turkish Personal Data Protection Authority or, if you live in the EU, to your local data protection authority.
Official requests
We share data only when legally required and upon a valid request from competent authorities, limited to what is requested.
Children
STARMONDO is not intended for children under 13. Adding social accounts and chatting with people you do not know requires being 18 or older. If we learn that we process data of a child under 13, we delete the account.
Changes
We will notify you in the app when we update this policy. Effective date: 2026-10-30.