KVKK Information Notice (Turkey)
Last updated: 9 November 2026
This notice is provided under Article 10 of Turkey's Personal Data Protection Law No. 6698 ("KVKK") and the related Communiqué on the obligation to inform. It explains how your personal data is processed in the YOPZO apps and web player; more detail is in our Privacy Policy. This is an English translation of the official Turkish text.
This notice is for information only: accepting it in the app confirms that you have read it. It is not explicit consent, which we ask for separately where needed.
1. Data controller
- Data controller: Sabahattin Çalışkan (a natural person — independent developer who publishes YOPZO under the name Caliskan Games), Turkey. There is no company behind YOPZO.
- Contact and applications: sebocaliskan@hotmail.com
YOPZO is a one-person project, and the developer's home address is not published in this notice. If your application must be made in writing, the postal address to use will be sent to you by email on request.
2. Personal data we process
- Account and profile: nickname, avatar, friend code, installation ID and a hashed form of your device secret.
- Age: age tier (13–17 or 18+) and the date you turn 18. Birth year is not stored; answers from under-13s are not recorded.
- Device and preferences: app language, country (from device region or IP address; the IP address is not stored), time zone, platform, app version, push notification token and notification quiet hours.
- Gameplay: answers, scores, XP, streaks, friends list, squads, duels, poll votes, personal quizzes and attempts on them (nickname, answers and score), inbox items, and items and rewards you have unlocked.
- Temporary free text: what you write in "Who Wrote It", "Whose Memory" and "Truth or Lie" is kept only in temporary room memory, deleted within about 2 hours and never written to our database.
- Safety and legal records: reports, blocks, moderation records and consent records.
- Advertising (18+ only): advertising ID (IDFA/GAID), ad interactions, ad consent choices and rewarded-ad records (the reward chosen, the ad network's transaction ID and confirmation, and when the reward was granted and used).
- Purchases (Android only, Yopzo Premium): the Google order number, product ID, purchase date, status of the purchase (valid, refunded or revoked), whether it was a test purchase, how many times it has been moved to another account, and an irreversible summary (hash) of the purchase token issued by Google. Google Play takes the payment; we don't process card or payment details.
- Usage records: a record of the questions you have seen and ad events; turned into aggregate statistics on our own servers to improve the game. No third-party analytics or crash-reporting service is used.
We don't ask for special categories of personal data (such as health or religion); please don't write such information in games.
3. Purposes and legal grounds
- Creating your account, running the game and its social features, saving progress, sending push notifications and giving you the rewards of rewarded ads you choose to watch (confirming completion with the ad network, granting each reward once and applying daily limits) — KVKK Art. 5(2)(c) (performing a contract).
- Providing the Premium you bought (verifying and acknowledging the purchase with Google Play, moving it to your new account with "Restore purchases", processing refunds and cancellations) — Art. 5(2)(c) (performing a contract).
- Preventing duplicate or fraudulent purchases and abuse of refunds and chargebacks — Art. 5(2)(f); record-keeping obligations under tax and consumer law — Art. 5(2)(ç); keeping the purchase record, without a link to your account, after the account is deleted for refunds and disputes — Art. 5(2)(ç) and Art. 5(2)(e).
- Applying age rules (blocking under-13s, protecting teens, showing ads only to adults) — Art. 5(2)(ç) (legal obligation) and Art. 5(2)(f) (legitimate interest).
- Security, reviewing reports, moderation, preventing cheating and abuse — Art. 5(2)(f) and, where applicable, Art. 5(2)(ç).
- Keeping consent records as required by law and answering requests from authorities — Art. 5(2)(ç).
- Establishing, exercising or defending legal rights — Art. 5(2)(e).
- Fixing bugs and improving the game with usage statistics; showing non-personalized ads to adults — Art. 5(2)(f).
- Showing personalized ads to adults and sharing data with ad partners for that purpose — Art. 5(1) (explicit consent). You can withdraw it any time in Settings → Privacy & ads.
- Showing your nickname and score on the public leaderboard of a personal quiz — Art. 5(1) (explicit consent), only if you give it.
Teens (13–17) never see ads, and their data is never used for advertising.
4. How we collect data
Your data is collected electronically through the apps and web player, from what you enter and partly or fully automatically while you play, and through Google's Firebase Cloud Messaging and AdMob services (including AdMob's confirmation that a rewarded ad was completed). On Android, Premium purchase details are obtained from Google Play (Google Play Developer API).
5. Recipients and purposes
- Our hosting provider — Turkey (Istanbul) — servers and data storage.
- Google (Firebase Cloud Messaging; AdMob for adults only) — USA and other countries — push notifications and ads.
- Apple and Google — app stores.
- Google (Google Play) — USA and other countries — taking the Yopzo Premium payment; verifying and acknowledging the purchase and tracking refunds. Google processes payment data under its own responsibility, as a separate controller.
- Other players — nickname, avatar, scores and room answers, as part of the game. Adult players (18+) can find each other by exact username (nickname) to send friend requests; accounts of 13–17-year-olds cannot be found by username.
- Authorized public authorities — when legally entitled and upon request.
Our servers are in Turkey. Because Google, which provides push notifications, ads and Google Play, processes data outside Turkey, the personal data sent to these services is transferred abroad under KVKK Article 9: based on a processing condition in Article 5 and, where there is no adequacy decision, appropriate safeguards such as the standard contracts announced by the Personal Data Protection Board.
6. Retention
We keep data only as long as its purpose requires, then delete, destroy or anonymize it — for example, free text up to about 2 hours, room answers 30 days, daily-question answers 90 days, rewarded-ad records, ad events and the record of questions you have seen 90 days, reports 180 days. When you delete your account, it is anonymized immediately and permanently deleted within 30 days. Premium purchase records are kept as long as your account exists; if you delete your account, the record is kept without a link to your account for matching refunds, restoring purchases and legal obligations, for as long as those obligations require and for at most 10 years. See the Privacy Policy for all periods.
7. Your rights under Article 11
You have the right to:
- learn whether your personal data is processed,
- request information about it if so,
- learn the purpose of processing and whether data is used accordingly,
- know the third parties in Turkey or abroad to whom data is transferred,
- request correction of incomplete or inaccurate data,
- request deletion or destruction under Article 7,
- request that corrections, deletions or destructions be notified to recipients,
- object to a result against you arising solely from automated analysis,
- claim compensation for damage caused by unlawful processing.
8. How to apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can apply in Turkish:
- by email to sebocaliskan@hotmail.com (including applications signed with a secure electronic signature or mobile signature),
- in writing with a wet signature: the postal address will be sent to you by email on request.
Your application must include the information required by the Communiqué (name, surname, Turkish ID number for Turkish citizens or nationality and passport/ID number for foreigners, address for notifications, e-mail and phone if any) and your request. Please add your friend code so we can find your account; we may ask for more information to confirm the account is yours. You can also delete your account in the app via Profile → Settings → Delete account.
We will answer free of charge within 30 days at the latest; if the request involves additional cost, a fee under the Board's tariff may apply. If your application is rejected, you find our answer insufficient or we don't reply in time, you can complain to the Personal Data Protection Board within 30 days of learning our answer, and in any case within 60 days of your application.
9. Players under 18
YOPZO is for ages 13 and up. If you are under 18, please read this notice with a parent or guardian, who may also apply on your behalf.