Privacy Policy
This Privacy Policy describes how Lettera (the "App") collects, uses, and protects your personal data when you use it. It is drafted under Turkey's Personal Data Protection Law No. 6698 (KVKK) and the related secondary legislation, and is the same policy made available in Turkish for KVKK compliance.
1. Data Controller
Name: Omid Safarzadeh
Contact: omidpoly@gmail.com
Country: Türkiye (Turkey)
2. Personal Data We Collect
2.1 Account data
- When you sign in with Google or Apple: email address, name, profile picture (if available).
- Display name and avatar that you choose in-app.
2.2 Gameplay data
- Match history, scores, experience points (XP), level, virtual-coin balance.
- Achievement progress and daily-reward records.
2.3 Device & technical data
- Device identifier, OS version, app version.
- IP address (kept temporarily, only for fraud prevention and regional matchmaking).
- Firebase Cloud Messaging (FCM) token for push notifications.
2.4 Advertising data
- On iOS, if you grant App Tracking Transparency (ATT) consent: Apple IDFA.
- On Android: Google Advertising ID (GAID), unless ad tracking is disabled on the device.
- If you decline, we serve non-personalized ads — ads are not disabled entirely.
2.5 Analytics
- Aggregated session, screen-view, and feature-usage events via Firebase Analytics.
3. Purposes & Legal Bases
We process your data for the purposes below, on the legal bases set out in KVKK Article 5/2:
- Providing the service (performance of a contract): account creation, multiplayer matchmaking, score tracking.
- Security & fraud prevention (legitimate interests): detecting cheating, automation, and abuse.
- Advertising (explicit consent): personalized ads for users who consent.
- Push notifications (explicit consent): based on the notification permission you grant at OS level.
- Legal obligations: compliance with applicable laws and court orders.
4. Third-Party Services
The App uses the third-party services below, each governed by its own privacy policy:
- Google Firebase (Authentication, Cloud Messaging, Analytics, Crashlytics) — firebase.google.com/support/privacy
- Google AdMob (advertising) — policies.google.com/privacy
- Apple Sign in with Apple and push notifications — apple.com/legal/privacy
- Heroic Labs Nakama game-server infrastructure (game logic and matchmaking) — self-hosted by us.
5. International Data Transfers
Services such as Firebase and AdMob may process data on Google's servers in the United States and other countries. Under KVKK Article 9, these transfers are carried out because they are necessary for the provision of the service, and are based on your explicit consent or the performance of the contract. Apple services process data on Apple's global infrastructure.
6. Data Retention
- Active account data: until you delete your account.
- After a deletion request: removed from primary systems within 30 days and from backups within 90 days.
- IP addresses: at most 30 days.
- Statutory retention obligations (e.g. invoicing records): for the period required by applicable law.
7. Your Rights Under KVKK
Under KVKK Article 11, you have the right to:
- Learn whether your personal data is being processed,
- Request information about the processing if it is,
- Learn the purpose of processing and whether your data is used in accordance with that purpose,
- Know the third parties to whom your data has been transferred, domestically or abroad,
- Request rectification of incomplete or incorrect data,
- Request erasure or destruction of your data under KVKK Article 7,
- Request notification of rectification or erasure to third parties,
- Object to results that arise solely from automated processing,
- Claim compensation for damages caused by unlawful processing.
To exercise these rights, contact omidpoly@gmail.com. We will respond within 30 days as required by KVKK Article 13.
8. Children's Privacy
The App is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe your child has provided us with personal data, please contact us and we will take steps to delete it.
9. Cookies and Similar Technologies
The mobile App does not use browser cookies. However, Firebase and AdMob may store small local identifiers on the device for session management and ad measurement.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be announced via an in-app notice or email. The "Last updated" date will be refreshed on every change.
11. Contact
For any privacy-related questions or requests, contact:
Omid Safarzadeh · omidpoly@gmail.com
You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority (kvkk.gov.tr).