Privacy Policy
Last updated:
This policy explains how personal data is handled in the mobile apps and games developed by Simurg Apps and on the simurgapps.com website. The data each app uses, and why, is described in detail on that app's own privacy page:
If an app's own policy differs from this general policy, the app-specific policy applies to that app.
Data controller
Simurg Apps — Ömer Koç (individual developer), Kadıköy, Istanbul, Türkiye. Contact: destek@simurgapps.com
Information required under Türkiye's Personal Data Protection Law No. 6698 (KVKK) is provided in our KVKK Notice.
Our principles
- Minimal data: We don't collect data that isn't needed to provide a feature.
- Transparency: Each app page clearly states what data is processed, for what purpose and by which service providers.
- No selling: We do not sell or rent your personal data.
- You're in control: You can change optional choices such as analytics and personalised ads in the app or in your device settings.
What data we may process
Depending on the app, the following categories may be processed:
- Account data: in apps that require an account, your email address, profile name and sign-in method (Apple, Google or email).
- Content you enter: for example birth details, notes or results generated when you use a feature.
- Purchase data: subscription status, product and transaction IDs. We never see your card number or security code; payments are handled by Apple or Google.
- Technical data: device model, operating system and app version, crash logs, and IP address for connectivity.
- Usage data: where you allow it, analytics such as screen views and interactions.
- Advertising data: in apps that show ads, the device advertising identifier (IDFA/AAID) and ad interactions.
- Communications: emails you send us and the information they contain.
Why we process data (purposes and legal bases)
| Purpose | Legal basis |
|---|---|
| Providing the app and the features you purchased, managing your account | Performance of a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)) |
| Security, abuse prevention, troubleshooting | Legitimate interests (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)) |
| Optional analytics, personalised ads, marketing notifications | Consent (KVKK Art. 5(1); GDPR Art. 6(1)(a)) |
| Legal obligations and protecting legal claims | KVKK Art. 5(2)(a), (ç), (e); GDPR Art. 6(1)(c), (f) |
Service providers and transfers
We rely on trusted service providers to run our apps. The providers used vary by app and are listed on each app's privacy page. In general:
- Cloudflare — servers, database, website hosting and security
- Google (Firebase, AdMob) — crash reporting, performance monitoring, analytics and advertising
- RevenueCat — in-app purchase and subscription management
- Apple and Google — sign-in, app store payments and device backup
- AI providers — only in apps with AI features, and only with the data the feature requires
Some of these providers may process data outside Türkiye (for example in the EU, the US or other countries). Transfers abroad are assessed under KVKK Article 9 and applicable law. We disclose information to authorities only when legally required.
Retention
We keep data only for as long as needed for its purpose. In apps with accounts, data is kept while your account is open and deleted when you delete your account. Technical logs and service provider records may be kept for shorter or longer periods according to their own retention settings. Records we are legally required to keep are kept only for that purpose. See Account & Data Deletion for details.
Your rights
Depending on where you live, you have the right to:
- know whether your data is processed and get a copy of it
- have inaccurate or incomplete data corrected
- have your data deleted
- object to or restrict processing
- receive your data in a portable format (GDPR)
- withdraw consent at any time (this does not affect earlier processing)
- lodge a complaint with the Turkish Personal Data Protection Authority or the data protection authority in your country
Send requests to destek@simurgapps.com. We may ask for additional information to verify that a request comes from you. Requests are answered free of charge within 30 days at the latest.
Children
Our apps are not directed to children under 13, and we do not knowingly collect personal data from children of that age. If a higher age applies in your country, that age applies. If you believe we have processed a child's data, contact us and we will delete it.
Security
We use measures such as encrypted connections (HTTPS/TLS), access controls and one-way hashing of passwords. No system can guarantee absolute security; please let us know if you notice a security issue.
Website
simurgapps.com does not use cookies and contains no analytics or advertising trackers. Only your light/dark theme choice is stored in your browser's local storage. The site is hosted on Cloudflare, which may process technical connection data such as IP addresses for security and service delivery. Fonts are loaded from Google Fonts.
Changes
We update this policy when our data practices change. We announce material changes in the app or on this page and ask for renewed consent where required. The date at the top shows the latest update.