Privacy Policy

Version 4 · 2026-11-09

Last updated: 9 November 2026

This Privacy Policy explains what personal data YOPZO collects, why we use it, how long we keep it, who we share it with and what choices you have. It applies to the YOPZO apps for iOS and Android and to the YOPZO web player that opens when you follow an invite link in a browser.

Who we are

YOPZO is not made by a company. It is developed and published under the name Caliskan Games by Sabahattin Çalışkan, an independent developer living in Turkey ("we", "us"). This natural person is the "data controller" for the personal data described here; there is no legal entity behind YOPZO.

• Data controller: Sabahattin Çalışkan (a natural person — independent developer), Turkey
• Privacy requests and contact: sebocaliskan@hotmail.com
• Web: https://caliskangames.com

YOPZO is a one-person project, and the developer's home address is not published in this policy. Send your request to the email address above; if the law requires your request to be made in writing, the postal address to use will be sent to you by reply.

If you live in Turkey, please also read our KVKK Information Notice in the app.

The short version

• YOPZO is only for players aged 13 and over.
• You can play as a guest. We don't ask for your real name, email address or phone number.
• We don't store your birth year — only your age tier (teen 13–17 or adult 18+) and the date you turn 18.
• Free text you type in party games is deleted when the game room closes (within about 2 hours).
• YOPZO is funded by ads, which are shown only to adults — personalized ads only with consent.
• On Android, one optional, one-time purchase may be offered: Yopzo Premium. Google Play takes the payment; your card and payment details never reach us.
• We do not sell your personal information.
• You can delete your account in the app at any time.

What we collect

Account and profile

• An installation ID created by the app and a device secret issued by our server. Together they make up your guest account.
• Your nickname and the cartoon avatar you build from our preset parts.
• A random friend code, so friends can add you.

Your age

When you first open YOPZO, we ask a neutral question about your birth year.

• If you are under 13, you can't use YOPZO. We don't store your answer; we only keep a technical lock that stops new attempts from that device for 30 days.
• If you are 13 or older, we don't store your birth year either. We store your age tier (teen 13–17 or adult 18+) and the date on which you turn (or turned) 18, calculated from your answer, so your account can move to the adult tier automatically.

Settings and device

• App language, country and time zone. Country is derived from your device's region setting or your IP address. Our servers need your IP address to communicate with your device, but we do not store it.
• Device information: platform (iOS, Android or web) and app version.
• Your push notification token, if you allow notifications, and your notification quiet hours.

Gameplay

• Your answers in games, scores, XP, streaks, your friends list, squads, duels and poll votes.
• Personal quizzes you create with "Send a test" (their questions, answers and share link), and attempts on them (the solver's nickname and score).
• Inbox items, such as invites and duel results.

Safety and legal records

• Reports you make or that are made about you, and the players you block.
• Records of which legal documents you accepted and when (consent records).

Ads and usage records

• Ad-related events and rewarded-ad records (adults only) — for example, that you chose to watch a rewarded ad, the confirmation and transaction ID the ad network sends us when you finish it, which reward you received and when it was used — so we can give each reward only once and apply daily limits.
• A record of which questions you have seen, so the same questions don't keep coming back.
• The statistics we use to improve the game (for example, how many matches are played and how soon players come back) are calculated in aggregate on our own servers from the gameplay and ad records above. We do not use Firebase Analytics, Crashlytics or any similar third-party analytics or crash-reporting service.

Purchases (Android only: Yopzo Premium)

If you buy Yopzo Premium, Google Play takes and processes the payment. Your card number, bank details, name and email address are not passed to us. We receive and keep only:

• the Google order number (a code starting with "GPA."), the product ID, the purchase date and the status of the purchase (valid, refunded or revoked);
• whether it was a test purchase, and how many times the purchase has been moved to another YOPZO account;
• an irreversible summary (hash) of the purchase token that Google issues. We don't store the token itself.

We verify and acknowledge the purchase by checking it with Google Play, and once a day we fetch a list of refunds and cancellations from Google Play.

We don't ask for sensitive information such as health, religion or precise location. Please don't type such information into games.

Content that disappears

Some party modes let you type free text: answers in "Who Wrote It", memories in "Whose Memory" and statements in "Truth or Lie". This text is kept only in temporary game-room memory on our servers and is deleted automatically when the room expires (at most about 2 hours). It is not saved in our database.

The other players in the room see this text during the game and could take a screenshot, so only share what you're comfortable sharing. If you report a piece of text, your report may include a copy of it so that we can review it.

Anonymous squad polls

Squad polls use only positive, pre-written prompts. When you vote, the person you pick is never shown who voted for them. We keep individual votes for 30 days to show results and prevent abuse; after that we keep only the totals.

Personal quizzes

Anyone who has the link to a personal quiz you create can open and try it, and link previews may show the quiz title and your nickname. Each attempt is saved with the solver's nickname, answers and score. The quiz creator can see attempts on their quiz and, with detailed quiz stats, which answer each solver picked. A solver's nickname and score appear on the public leaderboard on the quiz page only if that solver explicitly agrees.

Why we use your data

The legal bases below are those of the GDPR and UK GDPR. For Turkey, see our KVKK Information Notice.

• Running the game and your account (rooms, friends, squads, duels, quizzes, inbox, progress) — contract (our Terms of Use).
• Applying our age rules (keeping out under-13s, protecting teens, showing ads only to adults) — legal obligations and our legitimate interest in protecting young people.
• Keeping YOPZO safe (word filters, reports, blocks, moderation, preventing cheating and abuse, account security) — legitimate interests and legal obligations.
• Push notifications you allowed, such as your turn in a duel — contract. You can turn them off at any time in your device settings.
• Rewarded ads you choose to watch (confirming with the ad network that the ad was completed, giving you the reward once and applying daily limits) — contract.
• Providing the Premium you bought (verifying and acknowledging the purchase with Google Play, moving it to your own new account with "Restore purchases", processing refunds and cancellations, preventing duplicate or fraudulent purchases) — contract; our legitimate interests in handling refunds, chargebacks and abuse; legal obligations under accounting and consumer law.
• Personalized ads for adults — your consent, which you can withdraw at any time.
• Non-personalized ads for adults, which keep YOPZO free — legitimate interests, and consent where the law requires it (for example, for storing information on your device in the EEA or UK).
• Usage statistics, calculated in aggregate on our own servers to fix bugs and improve the game — legitimate interests.
• Legal compliance (consent records, lawful requests, legal claims) — legal obligations and legitimate interests.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects, other than applying the age rules to the birth year you give us.

Ads

• Adults only. Google AdMob shows ads only to players in the adult tier (18+). There are no ads for teens (13–17) or for players whose age we don't know. Ads appear only in the mobile apps.
• Consent. In the EEA, UK and Switzerland, Google's consent message (Google UMP, using the IAB Transparency & Consent Framework) asks for your choices. On iOS, we ask for App Tracking Transparency permission before any tracking; if you decline, your device's advertising ID is not shared for tracking.
• Personalized ads only with your consent. Otherwise, only non-personalized or limited ads are shown.
• Change your mind any time in Settings → Privacy & ads. You can also reset or limit your advertising ID in your device settings.
• Yopzo Premium (Android): Premium owners see no ads; the app doesn't start the ad SDK and sends no ad requests.
• Rewarded ads are always optional. You never have to watch an ad to play the core game, and everything a rewarded ad unlocks can also be reached through XP, levels and streaks. When you finish a rewarded ad, Google AdMob sends our server a signed confirmation with a transaction ID and your pseudonymous player ID, so we can check it and give you the reward.
• Google and the ad partners it works with may process advertising identifiers (IDFA on iOS, GAID on Android), device information, IP address and ad interactions under their own policies. Learn more: https://policies.google.com/technologies/partner-sites

Notifications, statistics and crash information

• Firebase Cloud Messaging (Google) delivers the push notifications you allow. For this, Google receives only your device's notification token and the content of the notification.
• Statistics are calculated in aggregate on our own servers; the app contains no third-party analytics SDK.
• Crash and freeze information on Android: if you chose in your device settings to share usage and diagnostics data with Google, Google collects information about the app's crashes and freezes under its own rules and shows it to us only in aggregate (in Google Play Console).

Teens' data is never used for advertising.

Who we share data with

• Other players see your nickname, avatar, level and scores, and your answers in rooms you join. People you give your friend code to can find you with it. Adult players (18+) can also find each other by exact username (nickname) and send a friend request; accounts of 13–17-year-olds cannot be found or search by username. Quiz leaderboards show solvers only with their consent.
• Service providers that work for us: our hosting provider in Turkey; Google (Firebase Cloud Messaging); and Apple and Google (app stores).
• Google AdMob and its partners, for adults only, as described above. For advertising, Google acts as an independent controller under its own policies.
• Google Play (payments): Google Play takes and processes Yopzo Premium payments, and your payment details are covered by Google's own privacy rules. We send the purchase token to Google Play to verify and acknowledge the purchase and to see refunds. In some countries, such as the EEA and the UK, Google sells the product on our behalf as "merchant of record"; in many countries, including Turkey and the United States, Google calculates and pays the VAT or sales tax on the sale. For payment details, Google acts as an independent controller under its own privacy rules.
• Authorities, when the law requires it, or to protect the rights and safety of our players and others.
• A buyer or successor, if our business is merged or sold; this policy will continue to apply to your data.

We do not sell your personal information.

Where your data is stored

Our servers are located in Turkey (in a data centre in Istanbul), and the developer is based in Turkey. Because some providers (such as Google) process data in the United States and other countries, some data — such as your notification token, ad data and Google Play purchase verification — may be transferred internationally.

When data leaves the EEA, the UK, Switzerland or Turkey for a country without an adequacy decision, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses (with the UK addendum where relevant) or the standard contracts under Article 9 of Turkey's KVKK — or another mechanism permitted by law. You can ask us for details at sebocaliskan@hotmail.com.

How long we keep data

• Free text in party modes: only until the room expires (at most about 2 hours).
• Room answers (choice keys): 30 days.
• Daily-question answers: 90 days.
• Individual anonymous poll votes: 30 days, then only the totals.
• Inbox items: 60 days.
• Reports: 180 days.
• Ad events (adults only): 90 days.
• Record of questions you have seen: 90 days.
• Rewarded-ad records: 90 days.
• Under-13 device lock: 30 days.
• Account, profile, progress, friends and consent records: as long as your account exists.
• Premium purchase records: as long as your account exists. If you delete your account, the record is kept without any link to your account — to match refunds and disputes, to let you restore the purchase to a new account with the same Google account, and for our legal obligations — for as long as those obligations require, and for at most 10 years.

Your choices and rights

In the app you can: change your nickname and avatar, change your ad choices (Settings → Privacy & ads), turn notifications and tracking permission on or off (device settings), block players and delete your account.

Deleting your account: go to Profile → Settings → Delete account, or use https://caliskangames.com/yopzo/account-deletion. Your account is anonymized immediately and permanently deleted within 30 days. Uninstalling the app does not delete your account. If you bought Premium, deleting your account does not refund your payment; the purchase record is kept without a link to your account, as described above, and can be moved to a new YOPZO account with the same Google account using "Restore purchases".

Your rights: depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict certain processing, and withdraw consent at any time (this doesn't affect processing done before you withdrew). Send requests to sebocaliskan@hotmail.com and include your friend code so we can find your account. We may ask you to confirm the account is yours, and we will reply within the legal deadline (usually one month; 30 days under KVKK).

Turkey (KVKK)

You have the rights listed in Article 11 of Law No. 6698. Our KVKK Information Notice explains these rights, how to apply and how to complain to the Personal Data Protection Board.

EEA, UK and Switzerland

You have the rights described above under the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection. You can also complain to your local data protection authority — for example, the authority in the country where you live or work, the UK Information Commissioner's Office or the Swiss FDPIC.

California and other US states

• We collect identifiers (such as installation ID, friend code and advertising IDs), rewarded-ad records, commercial information (Premium purchase records), gameplay and usage activity, and approximate location (country).
• We do not sell personal information. Letting ad partners use data for personalized ads may count as "sharing" for cross-context behavioral advertising under California law. We do this only for adult players who have agreed to personalized ads, and you can opt out at any time in Settings → Privacy & ads.
• We do not sell or share the personal information of anyone under 16.
• You can ask to know, access, correct or delete your personal information, use an authorized agent, and appeal if we decline your request. We won't treat you differently for using these rights.
• Residents of other US states with privacy laws (such as Virginia, Colorado and Connecticut) have similar rights, which you can use in the same way.

Brazil (LGPD)

You can ask us to confirm whether we process your data, access, correct, anonymize, block, delete or port it, get information about sharing, and withdraw consent. You can also complain to the ANPD.

Children

YOPZO is not directed at children under 13, and they may not use it. If we learn that we have collected personal data from a child under 13, we will delete it. If you are a parent and believe this has happened, please write to sebocaliskan@hotmail.com.

Security

We use technical and organizational measures to protect your data, such as encrypted connections, storing secrets and tokens (including purchase tokens) only in hashed form, and limiting access to people who need it. No system is perfectly secure, so please protect your device too.

Changes to this policy

When we change this policy, we update the date and the version number. If the changes are significant, we will ask you to review and accept the new version in the app.

Contact

Questions, requests or complaints: sebocaliskan@hotmail.com