Privacy Policy

Data controller: Kerem Kandıralı (Kandkerapps).

Address: Tuna Mah. 1690 Sok. No:48 D:102 35600 Karşıyaka İzmir/Türkiye.

Contact: [email protected]

Our apps do not require you to create an account. We do not collect direct identifiers such as your name, email address, phone number, or physical address. The data processed to operate, improve, and monetize the app through ads is listed below:

• A randomly generated device identifier (UUID) — created by the app to identify your device and meaningful only to our own systems.
• Advertising ID (Google Advertising ID) — collected by Google AdMob and Google Analytics for Firebase to serve ads and measure ad performance. You can reset or delete this identifier at any time in your device settings (see Section 7).
• App usage data — interaction events such as which screens are opened and which features are used, collected via Google Analytics for Firebase to improve the app.
• Firebase Cloud Messaging (FCM) push notification token — used to deliver live match notifications to your device.
• Operating system version, app version, and device language preference.
• In-app preferences you set: selected team, player, and illustration.
• In-app progress data: your rights balance, daily streak status, task progress, and referral code — stored on our servers linked to your device identifier.
• Google Play purchase tokens — used to verify your purchase. Credit card or payment information is never transmitted to us; it is handled exclusively by Google Play Billing.
• Application crash reports — collected via Firebase Crashlytics for debugging purposes.

For the sake of transparency, we explicitly do not collect any of the following data categories (see Section 7 for data processed by advertising services):

• Name, surname, email address, phone number
• Precise location data (GPS)
• Contacts, address book, or social network data
• Photos, media, or file contents
• Microphone or camera data
• Browsing history
• IMEI, MAC address, or hardware serial numbers

We use the data we collect solely for the following purposes:

• Delivering live match scores and updates to your widget
• Syncing your preferences (team, player, illustration) across devices
• Verifying your purchases and granting access to premium content
• Showing ads in the app; verifying rewarded-ad views and crediting your reward
• Analyzing usage statistics to improve the app
• Detecting and fixing application errors and crashes
• Complying with our legal obligations

We do not share your data with any third party for marketing or sales purposes. We use the following service providers strictly to operate our app:

• Google AdMob — for serving in-app ads. Advertising ID, IP address, device information, and ad interaction data are processed by Google; see Section 7 for details.
• Google Analytics for Firebase — for collecting usage statistics (screen views, feature usage).
• Google Firebase Cloud Messaging — for delivering push notifications. Your FCM token is transmitted to this service.
• Google Firebase Crashlytics — for collecting and analyzing crash reports.
• Google Play Billing — for processing in-app purchases. Payment details are handled entirely by Google.
• API-Football — a third-party provider of football match and player data. No personal user data is sent to this service; only our server fetches sports data from it.
• Cloudflare R2 — object storage used to host player illustrations. Contains no user data.
• Railway — infrastructure provider that hosts our web and API servers.

Our mobile apps do not use cookies; however, the advertising and analytics services rely on device identifiers such as the advertising ID described in Section 7. The kandkerapps.com website does not use any cookies, analytics, or tracking tools.

Ads in our apps are served through Google AdMob. There are two types of ads: banner ads shown on the home screen, and rewarded ads that play only when you choose to start them. When you watch a rewarded ad, Google sends a verification notification containing your device identifier to our server so that your reward can be credited.

As part of serving ads, Google AdMob may process the following data: advertising ID, IP address (including approximate location inference), device model and operating system information, and ad interactions. Depending on the ad preferences in your Google account, ads may be personalized or non-personalized. For details on how Google uses data in its advertising services, see: https://policies.google.com/technologies/partner-sites

Ad content shown in the app is limited to a maximum content rating of "T (Teen)".

You can manage your ad preferences: turn off personalized ads in your Google account's ad settings (https://myadcenter.google.com), and reset or permanently delete your advertising ID under your device's Settings > Privacy > Ads.

Users with an active subscription are not shown any ads.

The technical data we collect is retained while the app remains installed on your device. When you uninstall the app, local data on your device is removed. Records kept on our servers are retained only for as long as necessary for the purposes listed above.

Data processed by Google AdMob and Google Analytics for Firebase is subject to Google's own retention policies.

If you want us to delete the device record associated with you from our servers, you can send a deletion request to the contact address below. Your request will be processed within 30 days at the latest.

Deletion requests: [email protected]

Please indicate which app you use in your request. Because we do not use an account system, you may need to share the device identifier shown in the app's Settings screen so we can match your deletion request.

Our apps are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that a child has submitted data to us, we will delete that data as soon as possible. Ad content in the app is also limited to a maximum rating of "T (Teen)".

Some of our service providers (Google, Cloudflare, Railway) operate their servers across different jurisdictions, including the European Union and the United States. The data listed in this policy, including identifiers such as the device identifier and advertising ID, may be processed through those infrastructures.

Technical identifiers such as the device identifier and the advertising ID may qualify as personal data under the Turkish Law on Protection of Personal Data (KVKK) and similar regulations. We process this data only for the purposes described in this policy and strictly limited to those purposes.

Under applicable data protection laws, you have the right to learn whether your data is being processed, to request its contents, to request deletion, and to exercise related rights. To exercise these rights, please contact us at the address above.

You can also reset or delete your advertising ID at any time in your device settings, and turn off personalized ads in your Google account (see Section 7).

We may update this policy from time to time. Changes are published on this page and the effective date is updated accordingly. We may notify you of significant changes from within the app. We recommend reviewing this policy periodically.

For any questions, requests, or complaints regarding our privacy policy, you can reach us at:

Kerem Kandıralı (Kandkerapps)

Tuna Mah. 1690 Sok. No:48 D:102 35600 Karşıyaka İzmir/Türkiye

[email protected]