Protection of Children’s Data and Responsible Data Use

1. Our Approach

We assume children’s data is not “ordinary data” but data requiring special protection. We build the design privacy-first (privacy by design); real child data is collected only after appropriate systems and consent processes are complete. Data is hosted in Türkiye, on Hosting Dünyam infrastructure (Başakşehir / İstanbul data centre).

2. Parental Consent and Child Assent

Parental explicit consent is the basis for processing. In addition, an age-appropriate, simple and visual assent flow is provided; the child does not experience this process like a test.

3. Responsible Measurement Language

• The measurement is not a definitive diagnosis/screening; it is developmental and probabilistic.
• The student is not placed in a fixed category or labelled.
• Instead of definitive judgements like “suited to this profession”, the visibility of tendencies is supported.
• No clinical or health inference is made.

4. Data Minimisation

Only data necessary for the purpose is processed. Raw movement telemetry is not stored permanently; only derived indicators are kept.

5. Access and Security

• Role-based access: a teacher sees only their class, an institution only its own institution.
• Sensitive individual interpretation is kept at the guidance level; aggregate data is provided to institutions as far as possible.
• Access is logged; data is hosted in Türkiye.

6. Rights and Objection

The parent can exercise rights of access, correction, deletion and objection to automated inference. Situations like “registration with the wrong age” are tied to the deletion flow.

7. Research Ethics

The TÜBİTAK-supported research scope is carried out with the principles of ethics committee approval, informed parental consent and a pseudonymised research set.