Last updated: [PUBLICATION DATE]
This is an English-language convenience translation of Curcuna's Turkish Privacy Policy. It is provided to help non-Turkish-speaking users understand our practices. The Turkish version is the legally binding text; in case of any discrepancy between the two, the Turkish version shall prevail.
This Privacy Policy explains what personal data is processed when you use the Curcuna mobile app ("the App"), for what purpose, and on what legal basis. Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), the data controller is Enes Yüksel ("Provider", "we").
When you sign in with your Google or Apple account, our authentication provider (Clerk) supplies us with your name, email address and, if available, your profile photo, which we associate with your account. If you have a subscription, your subscription status and expiry date are also recorded.
Free trial record: To ensure the free trial can only be used once per person, we store an irreversible cryptographic hash (SHA-256) of your email address together with the date the trial began. This record does not contain your email address itself and is not linked to any other information. When you delete your account, this record is not deleted; otherwise the trial could be renewed indefinitely by deleting and recreating an account (see Sections 6 and 8).
If you upload a profile photo, that image is hosted by our authentication provider; we only associate the image's link with your account.
If you subscribe to a plan, your purchase and subscription information is processed by our payment infrastructure provider (RevenueCat) via the Apple App Store or Google Play; your card details never reach us in any form.
If the App encounters an unexpected error, technical information (including your IP address) and certain in-app event logs may automatically be sent to our error-tracking service (Sentry) so we can diagnose and fix the issue.
Data that stays on your device and never reaches us: Your sign-in credentials are stored in your device's secure storage (iOS Keychain / Android Keystore). Your favorite games and light/dark theme preference are also kept only on your device and are never sent to our servers. Game rounds, hidden roles and scores are likewise processed only on your device — we never see or store this data in any form.
We process your data to create and manage your account, verify your subscription, keep the App running smoothly, and meet our legal obligations, relying on the KVKK Article 5 bases of "necessity for the performance of a contract" and "legitimate interest."
To the extent necessary for the App to function, your data is shared with the following service providers: Clerk for authentication, RevenueCat for subscription and payment management, Sentry for error and performance monitoring, and Neon for database hosting. Your purchases are additionally processed through the Apple App Store or Google Play, subject to those platforms' own privacy policies. We never sell or rent your data to third parties for advertising or marketing purposes.
The service providers listed above may process your data on servers located outside Turkey, including in the United States. These transfers take place within each provider's own security and privacy standards.
Your sign-in tokens are stored in your device's hardware-backed secure storage. Requests reaching our servers (authentication and payment notifications) are verified using signature checks. That said, no method of transmission over the internet or electronic storage is 100% secure.
We retain your data for as long as your account is active. When you delete your account, your record on our servers is permanently deleted after a short delay (see Section 8). The sole exception is the free trial record described in Section 1: the hash of your email address and the trial start date are retained after account deletion to prevent abuse of the trial (legitimate interest). This record does not reveal your identity and is not used for any other purpose. Backups and logs held by our service providers (Clerk, Sentry, RevenueCat, Neon) may be retained for a further period under each provider's own retention schedule, outside our direct control. Purchase history held by our payment infrastructure provider may be retained after account deletion for legal and accounting purposes.
Under KVKK Article 11, you have the right to: learn whether your data is being processed; request information about it if so; learn the purpose of processing and whether it is used accordingly; know the third parties to whom your data is transferred, domestically or abroad; request correction if it is processed incompletely or incorrectly; request its deletion or destruction under the conditions set out in KVKK; and request that these actions be notified to third parties to whom your data has been transferred. You can send these requests to us at curcunapps@gmail.com.
You can permanently delete your account at any time from within the App via Settings > Delete Account. This deletes your account with our authentication provider and the associated server-side records (your name, email, profile photo link, subscription status) after a short delay. Account deletion does not delete purchase history retained by our payment infrastructure provider or by the app stores for legal and accounting purposes.
You can download a copy of your data from within the App: Settings > Privacy > Download My Data. The export is provided as a ZIP file containing your profile information, subscription status and on-device preferences. For any further requests, please contact us at the address above.
The App is not directed at individuals under the age of 13, and we do not knowingly collect personal data from anyone below that age. If you believe your child under 13 has provided us with personal data, please contact us and we will delete it.
Neither the App nor this website uses any cookies, advertising identifiers, or third-party tracking/analytics software.
We may update this Privacy Policy from time to time. Material changes will be announced within the App or on this page. Continuing to use the App after changes take effect means you accept the updated policy.
If you have questions about this policy or your personal data, you can reach us at curcunapps@gmail.com.
← Back to Home