Privacy Policy

Data controller: Kerem Kandıralı (Kandkerapps).

Address: Tuna Mah. 1690 Sok. No:48 D:102 35600 Karşıyaka İzmir/Türkiye.

Contact: [email protected]

Our apps do not require you to create an account. We do not collect direct identifiers such as your name, email address, phone number, or physical address. The data processed to operate, improve, and monetize the app through ads is listed below:

• A randomly generated device identifier (UUID) — created by the app to identify your device and meaningful only to our own systems.
• Advertising ID (Google Advertising ID) — collected by the Unity LevelPlay (ironSource) advertising service and Google Analytics for Firebase to serve ads and measure ad performance. You can reset or delete this identifier at any time in your device settings (see Section 7).
• App usage data — interaction events such as which screens are opened and which features are used, collected via Google Analytics for Firebase to improve the app.
• Firebase Cloud Messaging (FCM) push notification token — used to deliver live match notifications to your device.
• Operating system version, app version, and device language preference.
• In-app preferences you set: selected team, player, and illustration.
• In-app progress data: your rights balance, daily streak status, task progress, and referral code — stored on our servers linked to your device identifier.
• Google Play purchase tokens — used to verify your purchase. Credit card or payment information is never transmitted to us; it is handled exclusively by Google Play Billing.
• Application crash reports — collected via Firebase Crashlytics for debugging purposes.

For the sake of transparency, we explicitly do not collect any of the following data categories (see Section 7 for data processed by advertising services):

• Name, surname, email address, phone number
• Precise location data (GPS)
• Contacts, address book, or social network data
• Photos, media, or file contents
• Microphone or camera data
• Browsing history
• IMEI, MAC address, or hardware serial numbers

We use the data we collect solely for the following purposes:

• Delivering live match scores and updates to your widget
• Syncing your preferences (team, player, illustration) across devices
• Verifying your purchases and granting access to premium content
• Showing ads in the app; verifying rewarded-ad views and crediting your reward
• Analyzing usage statistics to improve the app
• Detecting and fixing application errors and crashes
• Complying with our legal obligations

We do not share your data with any third party for marketing or sales purposes. We use the following service providers strictly to operate our app:

• Unity LevelPlay (ironSource) — the ad mediation service operated by Unity Technologies / ironSource, used to serve in-app ads. Advertising ID, IP address, device information, and ad interaction data are processed by Unity/ironSource and the ad networks it mediates (ironSource Ads, Unity Ads); see Section 7 for details.
• Google Analytics for Firebase — for collecting usage statistics (screen views, feature usage).
• Google Firebase Cloud Messaging — for delivering push notifications. Your FCM token is transmitted to this service.
• Google Firebase Crashlytics — for collecting and analyzing crash reports.
• Google Play Billing — for processing in-app purchases. Payment details are handled entirely by Google.
• API-Football — a third-party provider of football match and player data. No personal user data is sent to this service; only our server fetches sports data from it.
• Cloudflare R2 — object storage used to host player illustrations. Contains no user data.
• Railway — infrastructure provider that hosts our web and API servers.

Our mobile apps do not use cookies; however, the advertising and analytics services rely on device identifiers such as the advertising ID described in Section 7. The kandkerapps.com website does not use any cookies, analytics, or tracking tools.

Ads in our apps are served through Unity LevelPlay, an ad mediation service operated by Unity Technologies / ironSource; ads are delivered by the ad networks it mediates (ironSource Ads and Unity Ads; additional networks may be added over time). There are two types of ads: banner ads shown on the home screen and the "Earn Cards" page, and rewarded ads that play only when you choose to start them. When you watch a rewarded ad, ironSource sends a signed verification callback containing your device identifier to our server so that your reward can be credited.

As part of serving ads, Unity LevelPlay and its mediated ad networks may process the following data: advertising ID, IP address (including approximate location inference), device model and operating system information, and ad interactions. For details on how Unity processes data, see: https://unity.com/legal/privacy-policy

Ad content shown in the app is restricted to age-appropriate categories through our ad platform's content controls.

You can manage your ad preferences: disable personalized ads, and reset or permanently delete your advertising ID, under your device's Settings > Google > Ads.

Users with an active subscription are not shown any ads.

The technical data we collect is retained while the app remains installed on your device. When you uninstall the app, local data on your device is removed. Records kept on our servers are retained only for as long as necessary for the purposes listed above.

Data processed by Unity LevelPlay (ironSource) and Google Analytics for Firebase is subject to Unity's and Google's own retention policies, respectively.

If you want us to delete the device record associated with you from our servers, you can send a deletion request to the contact address below. Your request will be processed within 30 days at the latest.

Deletion requests: [email protected]

Please indicate which app you use in your request. Because we do not use an account system, you may need to share the device identifier shown in the app's Settings screen so we can match your deletion request.

Our apps are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that a child has submitted data to us, we will delete that data as soon as possible. Ad content in the app is also restricted to age-appropriate categories through our ad platform's content controls.

Some of our service providers (Google, Unity/ironSource, Cloudflare, Railway) operate their servers across different jurisdictions, including the European Union and the United States. The data listed in this policy, including identifiers such as the device identifier and advertising ID, may be processed through those infrastructures.

Technical identifiers such as the device identifier and the advertising ID may qualify as personal data under the Turkish Law on Protection of Personal Data (KVKK) and similar regulations. We process this data only for the purposes described in this policy and strictly limited to those purposes.

Under applicable data protection laws, you have the right to learn whether your data is being processed, to request its contents, to request deletion, and to exercise related rights. To exercise these rights, please contact us at the address above.

You can also reset or delete your advertising ID, and disable personalized ads, at any time in your device settings (see Section 7).

We may update this policy from time to time. Changes are published on this page and the effective date is updated accordingly. We may notify you of significant changes from within the app. We recommend reviewing this policy periodically.

For any questions, requests, or complaints regarding our privacy policy, you can reach us at:

Kerem Kandıralı (Kandkerapps)

Tuna Mah. 1690 Sok. No:48 D:102 35600 Karşıyaka İzmir/Türkiye

[email protected]