Privacy Policy
1. Data Controller
Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by VodiSoft ("VodiSoft", "we") acting as data controller, within the scope described below.
| Information | Detail |
|---|---|
| Brand | VodiSoft |
| [email protected] | |
| Web | https://vodisoft.com |
For any additional information about the data controller, please contact us at [email protected].
2. Scope and Relationship to Our Other Documents
This Privacy Policy concerns the processing of personal data of end users of the mobile applications, games and consumer digital products ("Applications") developed and published by VodiSoft, together with the services offered through the Site.
Its relationship to VodiSoft's other published documents is as follows:
| Document | Scope |
|---|---|
| This Privacy Policy | End users of the Applications and Services (players, app users) |
| Data Processing Notice (KVKK) | Site visitors, customers, business partners, suppliers and job candidates |
| Terms of Service | Conditions of use of the Site and Services, rights and obligations of the parties |
| Account and Data Deletion | Steps for requesting deletion of an account and its data |
These documents complement one another. In the event of a conflict on the same subject, this Privacy Policy prevails for end-user data, while the Terms of Service prevail for commercial and contractual matters.
3. In Short
- You are not required to create an account to use our Applications; most of them work with a guest profile.
- We do not collect your full name, address, phone number or payment details.
- The data we collect is mostly technical and usage data.
- We do not sell your data.
- You can delete your account and all of your data at any time.
4. Definitions
| Term | Definition |
|---|---|
| Site | The website accessible at vodisoft.com and its subdomains |
| Applications | Mobile applications, games and digital products published by VodiSoft |
| Services | All digital content and functionality offered through the Site and the Applications |
| User, you | The natural person accessing or using the Applications or Services |
| Personal Data | Any information relating to an identified or identifiable natural person |
| Usage Data | Data generated automatically while the Services are used |
| Device | The phone, tablet or computer used to access the Services |
| Service Provider | Third-party natural or legal persons processing data on behalf of VodiSoft |
5. Categories of Personal Data Processed
5.1. Data you provide
| Data | When collected | Required |
|---|---|---|
| Username / player name | When you set a name inside the app | No |
| Avatar selection | When you pick one of the in-app avatars | No |
| Email address and display name | When you sign in with your Google or Apple account | No |
| Requests and complaints | When you email us | No |
If you choose to link your account to a Google or Apple account, we receive only your email address and display name from that provider. We never see or store your password; authentication is handled entirely by Google or Apple.
5.2. Data collected automatically
| Category | Example Data |
|---|---|
| Transaction security data | IP address, anonymous user ID, session and log records |
| Device and technical data | Device model, operating system version, language and region settings, screen size, app version |
| Usage data | Session length, in-app progress (scores, levels, virtual currency, unlocked content), feature usage statistics |
| Marketing data | Advertising identifier (Android Advertising ID / Apple IDFA), ad interaction data |
| Error data | Crash reports and technical diagnostics |
5.3. Data we do not collect
We do not collect your full name, address, phone number, national ID, payment card details, GPS location, contacts, photo library, microphone or camera data.
VodiSoft does not intend to process special categories of personal data (health, race, religion, political opinion, etc.). Please do not send us such data through the Applications or in support correspondence.
6. How Personal Data Is Collected
Your personal data is collected by automated or partly automated means through:
- Account creation, profile editing and in-game screens within the Applications,
- Software development kits (SDKs) and analytics/advertising components integrated into the Applications,
- Cookies and similar technologies on the Site,
- Email and other correspondence channels.
7. Purposes of Processing
| Purpose | Details |
|---|---|
| Providing the Services | Running the app, saving your progress and syncing it across devices |
| Account management | Creating, protecting and — on your request — deleting your account |
| Leaderboards | Showing your score in comparison with other users |
| Development and improvement | Fixing bugs, measuring performance, developing new features |
| Advertising | Serving in-app ads and measuring ad performance |
| Security | Preventing cheating, abuse, fraud and unauthorised access |
| Statistics and reporting | Analysing usage trends and improving service quality |
| Legal obligations | Fulfilling legal duties and conducting legal proceedings |
8. Legal Grounds for Processing
Your personal data is processed on one or more of the following grounds set out in Articles 5 and 6 of the KVKK:
- Directly related to the conclusion or performance of a contract — operations necessary to provide the Services to you
- Necessary for the legitimate interests of the data controller — security, anti-cheat, troubleshooting, analytics and improvement of the Services
- Necessary for the establishment, exercise or protection of a right — disputes and cases of abuse
- Necessary for compliance with a legal obligation — retention and reporting duties arising from law
- Your explicit consent — personalised advertising, optional notifications and international transfers, where explicit consent is required
For users resident in the European Union, the provisions of the GDPR are reserved.
9. Service Providers We Use
Our Applications may use the third-party infrastructure listed below. Which services are used varies from app to app.
| Provider | Purpose | Privacy policy |
|---|---|---|
| Google Firebase (Authentication, Firestore, Cloud Functions, Hosting) | Authentication, data storage, server-side operations | firebase.google.com/support/privacy |
| Google AdMob | In-app advertising | policies.google.com/technologies/ads |
| Google Play Services / Sign in with Google | Authentication and platform services | policies.google.com/privacy |
| Apple (Sign in with Apple, App Store) | Authentication and distribution | apple.com/legal/privacy |
These providers access your data only to perform the service assigned to them and are not authorised to use it for any other purpose.
10. Advertising and the Advertising Identifier
Some of our free applications display advertising. Ads are served through Google AdMob and may use your device's advertising identifier (Android Advertising ID or Apple IDFA).
You can turn off ad tracking at any time:
- Android: Settings → Google → Ads → Delete advertising ID or Opt out of personalisation
- iOS: Settings → Privacy & Security → Tracking → turn off Allow Apps to Request to Track
Opting out does not remove ads entirely; it only stops them from being personalised to you.
11. Transfer of Personal Data
Your personal data may be transferred to the following parties, limited to the purposes of processing and in accordance with Articles 8 and 9 of the KVKK:
- Service providers: the cloud infrastructure, authentication and advertising providers listed in section 9
- Other users: if you appear on a leaderboard, your username and avatar are visible to other users. If you prefer not to share this, choose a username containing no personal information, or do not take part in leaderboards.
- Competent public authorities: judicial and administrative authorities, upon lawful request within the scope of legal obligations
- Advisors: professionals providing legal, accounting and audit services
- In a corporate transaction: in a merger, acquisition or transfer of assets; you will be informed beforehand
We do not sell your personal data and do not rent it to third parties for marketing.
12. International Transfers
Your data may be hosted and processed on servers located outside Türkiye, including in the European Union and the United States, where our service providers operate. Data protection law in those countries may differ from that of your own country.
Such transfers are carried out under Article 9 of the KVKK, either with your explicit consent or under the other appropriate safeguards provided by law. Further information about the non-Turkish service providers used is available on request.
13. Retention Periods
| Data | Retention |
|---|---|
| Account and profile data | As long as your account is active |
| In-app progress | As long as your account is active |
| Leaderboard records | For the relevant period and afterwards for archival purposes |
| Technical logs and crash reports | Up to 90 days |
| System backups | Up to 90 days |
| Request and complaint correspondence | 2 years after the request is resolved |
Once the retention period ends, your personal data is deleted, destroyed or anonymised in line with VodiSoft's relevant policies. Statutory limitation periods provided under applicable legislation (Tax Procedure Law, Turkish Commercial Code, Code of Obligations, etc.) are reserved.
14. Deleting Your Account and Data
You can delete your account and all of your data at any time:
- From inside the app: using the delete account option in the Account (or Settings) section
- By email: by sending a request to [email protected]
When you delete your account, your data is removed from live systems immediately; copies remaining in backups and technical logs are automatically purged within 90 days. Deletion is irreversible.
For detailed steps, see the Account and Data Deletion document. Removing the app from your device does not delete your server-side data.
15. Security of Personal Data
We apply commercially acceptable, industry-standard measures to protect your data:
- All network traffic is encrypted with TLS
- Access to server-side data is limited to the authenticated user's own data
- Critical operations are validated on the server, not on the client
- We never see or store your passwords
That said, no method of transmission over the internet or electronic storage is 100% secure, and absolute security cannot be guaranteed.
16. Children's Privacy
Our Applications are not directed to children under the age of 13, and we do not knowingly collect personal data from this age group.
Under section 5 of the Terms of Service, persons under 18 may not create an account without the consent of their legal guardian.
If you believe a child under 13 has provided us with personal data, please contact us at [email protected]. If we determine that we have collected such data without parental consent, we will promptly delete it from our servers.
If the law of your country requires parental consent, we may request it before processing the data.
17. Your Rights Under the KVKK
Under Article 11 of the KVKK, you may exercise the following rights by contacting us:
- Learn whether your personal data is being processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether the data is used accordingly,
- Know the third parties to whom data is transferred, domestically or abroad,
- Request rectification if the data is incomplete or inaccurate,
- Request erasure or destruction under the conditions of Article 7 of the KVKK,
- Request that rectification, erasure and destruction be notified to third parties to whom the data was transferred,
- Object to a result adverse to you produced solely by automated analysis of the processed data,
- Claim compensation for damage suffered due to unlawful processing.
For users covered by the GDPR, the rights to data portability, to object to processing and to withdraw consent are additionally reserved.
18. How to Apply
To exercise the rights listed above, you may submit your request:
- From the email address registered in our systems to [email protected],
- By secure electronic signature or mobile signature to [email protected].
Depending on the nature of the request, your application is concluded free of charge within 30 (thirty) days at the latest; if the process entails an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.
If you are not satisfied with the outcome, your right to lodge a complaint with the Turkish Personal Data Protection Authority is reserved.
19. Cookies
Cookies are used on the Site to improve the user experience, ensure site security and analyse site traffic. Consent is obtained through the browser for non-essential cookies. For details, see the Cookie Policy document.
Our mobile applications do not use cookies; instead they use the device identifiers and advertising identifier described in section 5.
20. Links to Other Sites and Services
Our Applications and the Site may contain links to third-party sites or services that we do not operate (app stores, ad links, social media, etc.). Those services are subject to their own terms of use and privacy policies.
VodiSoft has no control over, and cannot be held responsible for, the content, privacy policies or practices of third-party services. We encourage you to review the privacy policy of every service you visit.
21. Changes
VodiSoft reserves the right to update this Privacy Policy in line with applicable legislation and changes in its business processes. The current version is always published on the Site, and the effective date at the top is updated accordingly.
Material changes are notified through an in-app notice or by email before they take effect. We encourage you to review this policy periodically.
22. Contact
For any questions, requests or complaints regarding this Privacy Policy:
VodiSoft
Email: [email protected]
Web: https://vodisoft.com
This document is published in Turkish and English. In the event of a conflict between the texts, the Turkish text prevails.
Get in touch
Let's talk about your project.
Let's map the scope, the risks and a realistic timeline together. The first conversation is free and commits you to nothing.