Privacy Policy

Trivia King  |  Last updated: May 8, 2026  |  Effective date: May 8, 2026

1. Overview and Data Controller

This Privacy Policy explains what personal data Caner Tunçer collects when you use the Trivia King mobile application, how we use it, with whom we share it, and what rights you have regarding your data.

Data Controller (Veri Sorumlusu):
Caner Tunçer
KIZILIRMAK MAH. 1443 CAD. NO: 25 B İÇ KAPI NO: 8 ÇANKAYA / ANKARA
Email: info.ctrsimpleapps@gmail.com

No account registration required. Trivia King uses anonymous authentication. You do not need to create an account with an email address or password. A unique anonymous identifier is generated automatically on your device. This means we do not hold your name or email address unless you contact us directly.

2. Data We Collect

2.1 Data Generated Automatically

Data CategorySpecific Data PointsSource
Anonymous User ID A randomly generated UUID that identifies your app session. Never linked to your real identity. Generated on device at first launch
Device Information Device model, operating system version, app version, language and locale settings Device (via SDK)
IP Address Your IP address at the time of server requests, used for security, rate limiting, and abuse prevention. Not stored permanently. Network requests to our backend
Gameplay Data Quiz scores, category preferences, challenge results, streak counts, achievement data, daily ticket balance, leaderboard ranking In-app activity
Challenge & Friend Data Challenge invitations sent/received, list of accepted friend connections (anonymous IDs only, no real names unless you set a display name) In-app activity
Analytics Events Screen views, button taps, session duration, funnel events (e.g., quiz started, challenge completed, paywall shown). Never linked to real identity. Firebase Analytics SDK
Push Notification Token A device-level FCM registration token used to send push notifications. Not shared with third parties for marketing. Firebase Cloud Messaging
Advertising Identifier IDFA (iOS) or GAID (Android) — only if you have not opted out of ad tracking on your device. Used by Google AdMob to serve relevant ads to free-tier users. Device (Free tier only)

2.2 Subscription and Purchase Data (Pro Subscribers)

Data CategorySpecific Data PointsSource
Subscription Status Whether your account has an active Pro subscription, the plan type (weekly / monthly / yearly), expiry date, auto-renewal status, and whether you are in a billing grace period RevenueCat webhook from Apple/Google
RevenueCat App User ID Your anonymous user ID as registered in RevenueCat. We never receive your payment card details or billing address — those remain with Apple or Google. RevenueCat SDK
Purchase Events Subscription lifecycle events: initial purchase, renewal, cancellation, expiration, billing issue. Stored for entitlement management and fraud prevention. RevenueCat webhook

2.3 Data You Provide Voluntarily

2.4 Data We Do NOT Collect

We process your personal data on the following legal bases:

Processing PurposeLegal Basis (GDPR)Turkish KVKK Basis
Providing the App and its core functionality Article 6(1)(b) — Performance of a contract Art. 5(2)(c) — Performance of a contract
Subscription management and entitlement verification Article 6(1)(b) — Performance of a contract Art. 5(2)(c) — Performance of a contract
Security, rate limiting, fraud prevention Article 6(1)(f) — Legitimate interests Art. 5(2)(f) — Legitimate interests
Analytics and service improvement Article 6(1)(f) — Legitimate interests Art. 5(2)(f) — Legitimate interests
Push notifications (game updates, challenges) Article 6(1)(a) — Consent (you can opt out at any time) Art. 5(1) — Explicit consent
Targeted advertising (Free tier, via AdMob) Article 6(1)(a) — Consent via device-level ad tracking setting Art. 5(1) — Explicit consent
Legal compliance and responding to legal requests Article 6(1)(c) — Legal obligation Art. 5(2)(a) — Required by law

4. How We Use Your Data

We do not sell your personal data. We do not use your data for automated decision-making that produces legal or similarly significant effects on you.

5. Data Sharing and Third Parties

We share your data only in the following circumstances:

5.1 Third-Party Service Providers

ProviderPurposeData SharedPrivacy Policy
Google LLC (Firebase) Analytics, push notifications, crash reporting Anonymous user ID, analytics events, FCM token, device info policies.google.com/privacy
Google LLC (AdMob) In-app advertising (Free tier only) Advertising identifier (IDFA/GAID), device info, app interaction data policies.google.com/privacy
RevenueCat, Inc. Subscription and entitlement management Anonymous user ID, subscription status and events revenuecat.com/privacy
Apple Inc. / Google LLC App distribution and in-app purchase processing Purchase receipts and subscription data. We do not receive payment details. App Store / Google Play privacy policies

All service providers are contractually bound to use data only for the purposes described above and in compliance with applicable data protection laws.

5.2 Legal Disclosure

We may disclose your data if required by law, court order, or governmental authority, or if we reasonably believe disclosure is necessary to protect our rights, prevent fraud, ensure safety, or comply with a legal process.

5.3 Business Transfer

If Caner Tunçer undergoes a merger, acquisition, or asset sale, your data may be transferred to the successor entity. We will provide notice before your data becomes subject to a different privacy policy. You retain all rights described in this Policy.

5.4 Public Leaderboard

Your display name (if set) and leaderboard rank are publicly visible to all users of the App. Do not use a display name that reveals personal information you wish to keep private.

6. International Data Transfers

The App is operated from Turkey and our backend infrastructure may be hosted in cloud regions that include the European Economic Area (EEA) and the United States. By using the App, you acknowledge that your data may be transferred to and processed in countries that may not provide the same level of data protection as your home country.

For transfers from the EEA to countries without an adequacy decision, we rely on standard contractual clauses (SCCs) adopted by the European Commission, or we rely on our service providers' own SCCs and adequacy frameworks. Firebase, AdMob, and RevenueCat all operate under Data Processing Agreements compliant with GDPR Chapter V requirements.

For users in Turkey, data transfers to countries not recognized as providing adequate protection by the Personal Data Protection Authority (KVKK) are conducted with your explicit consent or pursuant to applicable exceptions under Law No. 6698 Article 9.

7. Data Retention

Data CategoryRetention PeriodRationale
Anonymous user profile, gameplay data, achievements, streaks Until the App is uninstalled from your device, or until you request deletion Core service functionality
Subscription and purchase events 5 years from last transaction Turkish commercial law (TTK) and tax law retention requirements
Analytics events 14 months (Firebase default), aggregated reports indefinitely Product improvement; aggregates contain no personal data
Processed webhook records (idempotency) 30 days Duplicate event prevention
IP address (server logs) Maximum 90 days for security purposes Abuse detection; short retention minimizes privacy risk
Support email correspondence 2 years or until matter resolved, whichever is later Customer service record-keeping
Push notification token Until you disable notifications, uninstall the App, or request deletion Notification delivery

When data reaches the end of its retention period, it is deleted or anonymized. Anonymized data (e.g., aggregated analytics) is not subject to deletion obligations as it can no longer be linked to an individual.

8. Data Security

We implement commercially reasonable technical and organizational measures to protect your data, including:

Despite these measures, no system is completely secure. We cannot guarantee the absolute security of data transmitted over the internet. In the event of a personal data breach that poses a risk to your rights, we will notify the relevant supervisory authority (and affected users where required) in accordance with applicable law.

9. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe that your child under 13 has used the App, please contact us at info.ctrsimpleapps@gmail.com. Upon verification, we will delete all data associated with that anonymous user immediately.

Users aged 13–17 (or below the applicable age of majority in their jurisdiction) must have a parent or guardian review and agree to these policies before using the App.

10. Your Rights (General)

Regardless of your location, you may exercise the following rights by contacting us at info.ctrsimpleapps@gmail.com:

We will respond to verified requests within 30 days. Because accounts are anonymous, we may ask you to provide information sufficient to verify your request (e.g., your anonymous user ID, accessible via the App settings).

11. KVKK Notice (Turkey)

This section is provided pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles for Fulfillment of the Obligation to Inform.

Veri Sorumlusu: Caner Tunçer — KIZILIRMAK MAH. 1443 CAD. NO: 25 B İÇ KAPI NO: 8 ÇANKAYA / ANKARA — info.ctrsimpleapps@gmail.com

Kişisel Verilerin İşlenme Amacı: Hizmetin sunulması, abonelik yönetimi, güvenlik, analitik, reklam (Free kullanıcılar için), yasal yükümlülüklerin yerine getirilmesi.

Kişisel Veri Aktarımı: Verileriniz; Google LLC, RevenueCat Inc. ve Apple Inc./Google LLC (uygulama mağazaları) ile — işbu Politika'nın 5. maddesinde açıklanan amaçlarla sınırlı kalmak kaydıyla — yurt içi ve yurt dışına aktarılmaktadır. Yurt dışı aktarımlar KVKK 9. maddesi kapsamında açık rızanıza dayanmakta veya ilgili istisnalar çerçevesinde gerçekleştirilmektedir.

Haklarınız (KVKK m. 11):

KVKK kapsamındaki taleplerinizi info.ctrsimpleapps@gmail.com adresine iletebilir veya KVKK'da öngörülen yöntemlerle yukarıdaki adrese yazılı başvuruda bulunabilirsiniz. Başvurular 30 gün içinde yanıtlanır. Başvurunuzun reddedilmesi veya yanıt verilmemesi durumunda Kişisel Verileri Koruma Kurulu'na (KVKK) şikâyette bulunabilirsiniz.

12. GDPR Notice (EU / EEA)

If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (EU) 2016/679. These rights are described in Section 10 above. In addition:

Our EU/EEA data processing is summarized in Section 3 (Legal Basis for Processing) above.

13. CCPA / CPRA Notice (California, USA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the CPRA provides you with specific rights:

To exercise these rights, contact us at info.ctrsimpleapps@gmail.com. We will verify your request using your anonymous user ID. We respond within 45 days (extendable to 90 days with notice).

Categories of personal information collected in the last 12 months: Identifiers (anonymous user ID, device ID), internet/network activity (analytics events, IP address), commercial information (subscription status), inferences drawn for gameplay purposes.

14. Push Notifications

The App may request permission to send push notifications to your device. Push notifications are used for:

Push notifications are not used for marketing or promotional messages from third parties.

You may opt out of push notifications at any time by:

Disabling notifications does not affect your ability to use any feature of the App.

15. Advertising and Opt-Out

Free-tier users see ads served by Google AdMob. AdMob may use your advertising identifier (IDFA on iOS, GAID on Android) to serve personalized ads. You can opt out of personalized advertising at the device level:

Opting out of personalized ads means you will still see the same number of ads, but they will not be tailored to your inferred interests. Trivia King Pro subscribers do not see any advertisements.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through an in-app notice and/or by updating the "Last updated" date at the top of this page. Changes are effective upon posting unless a later date is stated. Your continued use of the App after the effective date constitutes your acknowledgment of the updated Policy.

If we make changes to the way we use your data in a manner that requires consent under applicable law, we will request your consent before making the change effective.

17. Contact and Complaints

For privacy-related questions, requests, or complaints:

Caner Tunçer
KIZILIRMAK MAH. 1443 CAD. NO: 25 B İÇ KAPI NO: 8 ÇANKAYA / ANKARA
Email: info.ctrsimpleapps@gmail.com

We aim to respond to all requests within 30 days. If you are unsatisfied with our response, you may lodge a complaint with your local data protection authority: