Effective 27 September 2026. This notice explains collection at sign-up. The provider is Operator details will be published here, address Operator details will be published here, tax number Operator details will be published here. Privacy and support contact: support@ascendia.day. The sign-up step says “By continuing you agree to the Terms and Privacy Policy,” with links to their full website pages.
At sign-up we receive email/name, an authentication credential or verified Apple/Google identity, language/time zone and a self-declared date of birth from you. Your selected sign-in provider may supply identity details. We retain only the birth year and derived age band. We use them to create and secure an age-eligible account, send strictly necessary verification/account/security messages and prevent fraud. The proposed processing conditions are GDPR 6(1)(b) and KVKK 5/2-c for the account, GDPR 6(1)(f) and KVKK 5/2-f for proportionate security, and a specific legal obligation if one applies. Account data is needed to create an account; if you do not provide it, registration cannot finish. No refused under-age birth year should be retained.
The hosted service and contracted account-email sender receive necessary account data; Apple/Google receives or returns sign-in data only if you select that route. The full Privacy Policy explains later feature collections, recipients, rights and retention. A connected health source asks for its platform permission when selected.
You may ask for access, correction, deletion and other rights under GDPR/UK GDPR or KVKK Article 11 through support@ascendia.day, Settings → Export or delete, or the relevant authority after the statutory process. The Turkish notice applies for Türkiye. KVKK Article 10; GDPR Article 13.