Privacy Policy

Data controller: Kerem Kandıralı (Kandkerapps).

Address: Tuna Mah. 1690 Sok. No:48 D:102 35600 Karşıyaka İzmir/Türkiye.

Contact: [email protected]

Our apps do not require you to create an account. We do not collect direct identifiers such as your name, email address, phone number, or physical address. The technical data we collect to operate the app is listed below:

• A randomly generated device identifier (UUID) — created by the app to identify your device and meaningful only to our own systems.
• Firebase Cloud Messaging (FCM) push notification token — used to deliver live match notifications to your device.
• Operating system version, app version, and device language preference.
• In-app preferences you set: selected team, player, and illustration.
• Google Play purchase tokens — used to verify your purchase. Credit card or payment information is never transmitted to us; it is handled exclusively by Google Play Billing.
• Application crash reports — collected via Firebase Crashlytics for debugging purposes.

For the sake of transparency, we explicitly do not collect any of the following data categories:

• Name, surname, email address, phone number
• Location data (GPS or IP-based)
• Contacts, address book, or social network data
• Photos, media, or file contents
• Microphone or camera data
• Browsing history or other application usage data
• Advertising identifiers or behavioral tracking data
• IMEI, MAC address, or hardware serial numbers

We use the technical data we collect solely for the following purposes:

• Delivering live match scores and updates to your widget
• Syncing your preferences (team, player, illustration) across devices
• Verifying your purchases and granting access to premium content
• Detecting and fixing application errors and crashes
• Complying with our legal obligations

We do not share your data with any third party for marketing or sales purposes. We use the following service providers strictly to operate our app:

• Google Firebase Cloud Messaging — for delivering push notifications. Your FCM token is transmitted to this service.
• Google Firebase Crashlytics — for collecting and analyzing crash reports.
• Google Play Billing — for processing in-app purchases. Payment details are handled entirely by Google.
• API-Football — a third-party provider of football match and player data. No personal user data is sent to this service; only our server fetches sports data from it.
• Cloudflare R2 — object storage used to host player illustrations. Contains no user data.
• Railway — infrastructure provider that hosts our web and API servers.

Our mobile apps do not use cookies. The kandkerapps.com website does not use any cookies, analytics, or tracking tools.

Our apps contain no third-party advertising networks. We do not conduct behavioral advertising, retargeting, or advertising identifier collection.

The technical data we collect is retained while the app remains installed on your device. When you uninstall the app, local data on your device is removed. Records kept on our servers are retained only for as long as necessary for the purposes listed above.

If you want us to delete the device record associated with you from our servers, you can send a deletion request to the contact address below. Your request will be processed within 30 days at the latest.

Deletion requests: [email protected]

Please indicate which app you use in your request. Because we do not keep personalized data, you may need to share the device identifier shown in the app's Settings screen so we can match your deletion request.

Our apps are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that a child has submitted data to us, we will delete that data as soon as possible.

Some of our service providers (Google, Cloudflare, Railway) operate their servers across different jurisdictions, including the European Union and the United States. The technical data listed above may be processed through those infrastructures. Because we do not process personal data under the Turkish Law on Protection of Personal Data (KVKK), explicit consent is not required; however, we want you to be aware that the technical data generated during usage may be processed by services hosted abroad.

Under applicable data protection laws, you have the right to learn whether your data is being processed, to request its contents, to request deletion, and to exercise related rights. To exercise these rights, please contact us at the address above.

We may update this policy from time to time. Changes are published on this page and the effective date is updated accordingly. We may notify you of significant changes from within the app. We recommend reviewing this policy periodically.

For any questions, requests, or complaints regarding our privacy policy, you can reach us at:

Kerem Kandıralı (Kandkerapps)

Tuna Mah. 1690 Sok. No:48 D:102 35600 Karşıyaka İzmir/Türkiye

[email protected]