TODDİ INFORMATION NOTICE ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

1. Data Controller and Scope

This Information Notice on the Protection and Processing of Personal Data has been prepared by Sitoplazma Teknoloji A.Ş. (“Company”, “Data Controller”, “We”) in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) and related regulations. Your personal data is collected and processed by the Company based on the personal data processing conditions set forth in Article 5 of the Law, for the purposes (“Purposes”) and legal reasons stated below.

2. Personal Data We Process

Based on the legal ground that it is expressly required by law and necessary to fulfill the legal obligations of the data controller, and within the scope of your explicit consent, we may process the following personal data to provide our services:

• Identity and Contact Information: Parent’s name, surname, and email address (for membership and communication purposes)
• Child-Related Information: Child’s name (optional), age group, and interests (for story personalization)
• User Interaction Data: Story selections, reading duration, remix preferences (to enhance the app experience)
• Audio Data: Stories read aloud by the parent (optional, for managing saved content)

3. Purposes of Processing Personal Data

• To provide a personalized story experience
• To improve our services by analyzing user interactions
• To ensure parental control and deliver safe content
• To fulfill our legal obligations in accordance with the applicable legislation

4. Sharing of Personal Data and Purposes of Sharing

Your personal data may be shared with legally authorized public institutions and private entities for the realization of the above-mentioned Purposes, for situations expressly required by law, and for the fulfillment of our legal obligations, in accordance with the data processing conditions set forth in Article 5 and the data transfer provisions in Article 8 of the Law.

5. Retention Period of Personal Data

Your personal data will be stored for a maximum period of 10 years in line with the stated Purposes and our legal obligations. After this period, your data will be deleted in accordance with legal requirements.

6. Copyright Responsibility for User-Generated Content

Users agree not to use any text, character, setting, music, or audio recording subject to copyright in the stories they create or save via Toddi. Users bear full legal and criminal responsibility to ensure that uploaded or personalized content does not violate copyright laws. Toddi does not assume any legal, administrative, or criminal liability for the content created, shared, or saved by users, and has no obligation to examine or review whether such content is lawful or violates third- party rights or copyright laws. Toddi reserves the right to remove any content found to violate copyright or applicable law without notice and shall not be held liable under any circumstances for any damages, claims, or sanctions arising from such content.

7. Method of Collecting Personal Data

Your personal data is collected electronically via the Company’s website, online forms, and email channels, in line with the above-mentioned Purposes.

8. Your Rights Under KVKK

Pursuant to Article 11 of the Law, you are entitled to the following rights regarding your personal data:

• To learn whether your personal data is processed
• To request access to the processed data
• To request correction or deletion of your data
• To request information if your data has been processed
• To learn the purpose of processing and whether your data is used in accordance with its purpose
• To know the third parties to whom your data is transferred domestically or abroad
• To request correction of your data in case it is incomplete or inaccurate and to request notification of this to third parties to whom the data was transferred
• To request deletion or destruction of your personal data if the reasons for processing no longer exist, even if processed lawfully, and to request notification of this to third parties
• To object to a result arising against you through the analysis of the processed data exclusively via automated systems

You may send your requests regarding the rights above to our Company via info@toddiapp.com in accordance with the “Communiqué on the Principles and Procedures for the Request to the Data Controller” by using the email address you previously used to contact us, or via an electronically signed email with a secure electronic signature. Based on the nature of your request, our Company will respond as soon as possible and no later than thirty (30) days, free of charge. However, if the process incurs additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.