NatusayThe short version
- No accounts, no ads, no tracking, no analytics.
- Photos, friends and chats are stored on your iPhone only.
- To recognize a photo and write a reply, the photo and the chat text are sent to AI services (Google Gemini and fal.ai).
- Natusay is for children using it with a parent. Purchases, settings and deleting sit behind a parent gate.
Who we are
Natusay (“the app”) is published by Burak Öztırpan (“we”, “us”), an independent developer. This policy covers the Natusay iPhone app and this website. The website uses no cookies and no analytics, and its fonts are hosted on the site itself, so visiting it does not contact third parties.
Questions: burakoztirpan@gmail.com
What stays on the device
These are stored locally on the iPhone and are not uploaded to us:
- Photos you take or choose, and the friends (characters) made from them: name, species, personality, portrait and chat history.
- Daily usage counters, the time limit you set, your language choice and whether the reminder is on.
- Your parental consent choice from the first launch.
We have no accounts, so we hold no profile about you or your child.
What is sent to other services
The app cannot recognize photos or write replies on its own. To do that, it sends the following to AI services:
| What | Sent to | Why |
|---|---|---|
| The photo you captured or chose (downscaled) | Google Gemini API | To recognize the living thing or object and invent its character. |
| Chat text: the transcribed words, a few recent messages and a short summary | Google Gemini API | To write the character's reply. |
| The character's reply text and a short voice direction (personality, mood) | Google Gemini API | To speak the reply in an expressive voice. Can be turned off in the Parent Area; the device's own voice is used instead. |
| A short text describing how the character should look (not the photo) | fal.ai | To draw the character's portrait. |
| A photo of your surroundings, when you use the nature hint mode (downscaled) | Google Gemini API | To suggest what might live there and where to look. |
| A daily quest request: the names of the quest categories and the titles of the last few quests. No personal data | Google Gemini API | To write one new daily quest. |
| A friend's text (species, facts, greeting, suggested questions), when you change the app language | Google Gemini API | To translate it into the new language. |
The app does not add your name, email, location or device identifiers to these requests. Like any internet request, the receiving service sees an IP address.
Requests pass through a relay server we operate on Google Cloud (Firebase). It checks that the request comes from the genuine app, using Firebase App Check and Apple's App Attest, and does not store the content of requests. It only keeps a daily request count to cap costs. For this check, the app sends a device attestation token to Google and Apple; it contains no personal information.
We use the providers' paid, commercial API terms. Under those terms the providers process the data to answer the request and may keep it for a limited period for security and abuse monitoring. Their own policies apply to that processing.
Camera and radar
The camera is used only inside the app to take a photo. In radar mode the live camera image is analyzed on the device to notice that something interesting is near, and it is not saved or sent. Only the photo that is actually captured is sent for recognition, as described above. Photos chosen from the library use Apple's photo picker, so the app only receives the photos you pick.
Microphone and speech
The app does not add your name, email, location or device identifiers to any of these requests.
Children talk by holding a button. Speech is turned into text by Apple's iOS speech recognition. Depending on the device and language, that can happen on the device or on Apple's servers, under Apple's policy. The app does not record or store audio. Only the resulting text is used, as described above.
In listening mode the microphone is analyzed on the device by Apple's sound classification to notice nature sounds such as birds or insects. The sound is not recorded, stored or sent anywhere. Only the result, for example “a bird”, is kept in memory while the screen is open.
Notifications
A daily reminder is available in the Parent Area and is off by default. It is a local notification scheduled on the device. We run no push notification servers.
Children's privacy
Natusay is directed to children and designed to be used together with a parent or guardian. The first launch asks a parent for consent, and purchases, settings and deleting friends are behind a parent gate.
We do not knowingly collect personal information from children, and the app has no accounts, ads or tracking. We aim to respect children's privacy laws such as COPPA, the GDPR and Türkiye's KVKK. If you believe a child has shared personal information with us, contact us and we will help.
AI can make mistakes. Natusay never presents anything as safe to touch, eat or pick up, and always points children to a grown-up for questions like that. Please keep using it together with your child.
Purchases
Natusay Premium is an auto-renewing subscription sold through Apple. Apple processes payment and we never receive your payment details. The app checks your subscription status on the device through Apple's StoreKit.
Retention and deletion
On-device data stays until you delete it. In the Parent Area you can delete all friends, or delete or rename a single friend by long-pressing its card on the home screen. Deleting the app removes everything it stored. We keep no server-side copy of your photos or chats.
Data already sent to the AI providers is handled under their retention terms, described above.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR or KVKK), you may have rights to access, correct, delete or restrict data about you, and to complain to your local data protection authority. Because the data lives on your device and we hold no account data, you can exercise most of these yourself in the app. For anything else, contact us.
International transfers
The AI providers are based in or operate from other countries, including the United States, so data sent to them may leave your country.
Changes
If this policy changes, we will post the new version here with a new date, and tell you in the app when the change is significant.
Contact
Burak Öztırpan · burakoztirpan@gmail.com