Privacy Policy

Last updated: 6 August 2026 · Effective: 6 August 2026

This Privacy Policy explains what data the Next Million Dollar Idea mobile app and this website (together, the "Service", "we") collect from you ("you") and how we handle it. By using the Service you accept this policy.

1. Who we are

Next Million Dollar Idea is operated by an individual developer, Ali Kaptanoğlu. Contact: ongorunet@gmail.com

2. What we collect

The app uses an anonymous, device-based identity. We do not ask you for a name, email address, phone number, or any other direct personal identifier. There is no sign-up form and no password.

Data	Why	Where it is stored
Device ID (hashed)	To recognise the same device on return and let you manage your own content	Server (Cloudflare D1)
Auto-generated username	To distinguish your ideas and comments from other people's	Server
Avatar seed	To generate your profile avatar deterministically	Server
Ideas and comments you post	The core function of the Service	Server
Your votes and saved items	To show you your own activity and prevent double voting	Server
Podcast listening progress	So you can resume where you left off	Server
IP address	Abuse prevention, rate limiting and spam blocking (auto-deleted after 10 minutes)	Temporary cache (Cloudflare KV)

What we never collect

Name, surname, date of birth
Email address or phone number
Location (GPS)
Camera, microphone, contacts or photo library
Advertising identifiers (IDFA / AAID)
Cross-app or cross-site tracking data

This website

This website sets no cookies, runs no analytics and embeds no third-party trackers. Standard server access logs are kept by our hosting provider for security purposes only.

3. How we use it

To run the Service (display ideas, record votes, play podcasts)
To show you the content attached to your own account
To detect spam, abuse and malicious use
To maintain service quality

We do not use your data for advertising, we do not sell it, and we do not share it with third parties for their own purposes.

4. How long we keep it

IP address: 10 minutes (deleted automatically once its rate-limiting purpose is served)
Account and its content: until you delete the account
Deleted content: permanently removed within 30 days, unless retention is legally required

5. Who processes it

Your data is processed only by the infrastructure providers we use to run the Service:

Cloudflare, Inc. (US / global) — servers, database (D1), media storage (R2), CDN. Acts as a data processor on our behalf.

Avatar images are generated by DiceBear from a random seed. No personal data is sent to that service.

We do not share your data with law enforcement or any third party unless legally compelled to do so.

6. Your rights

Under the GDPR and Turkey's KVKK you have the following rights:

Access: request a copy of the data we hold about you.
Erasure ("right to be forgotten"): delete your account and all of your content from inside the app via Profile > Delete My Account. This is irreversible.
Rectification: ask us to correct inaccurate data.
Objection: object to specific processing activities.

Send requests to ongorunet@gmail.com. We respond within 30 days.

Note on anonymity: because we hold no email address or name, we cannot reliably link an access or erasure request received by email to a specific device account. The most reliable way to erase your data is the in-app delete button.

7. Children's privacy

The Service is not designed for children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has submitted data to us, contact us and we will delete it.

8. Security

All traffic is encrypted over HTTPS. API requests are signed with HMAC-SHA256. Administrative access is restricted and password-protected. That said, no system transmitted over the internet can be guaranteed to be 100% secure.

9. International transfers

Cloudflare's infrastructure is global, so your data may be processed outside your country of residence, including outside the EEA and Turkey. Such transfers rely on appropriate safeguards, including Standard Contractual Clauses.

10. Changes to this policy

If we change this policy we will publish the updated version on this page and change the "Last updated" date. Material changes will additionally be announced inside the app.

11. Contact

For any privacy question: ongorunet@gmail.com