Privacy Policy
Last updated: 2026-10-19
This text explains what personal data the İlim Rush app processes, for what purpose and on what legal basis. It is prepared to meet our disclosure obligation under Turkish Law No. 6698 on the Protection of Personal Data (KVKK).
1. Data controller
- Data controller: WEBARISI INTERNET TEKNOLOJILERI VE BILISIM LTD STI
- Address: OSTİM OSB MAH UZAYCAGI CD NO 60 YENIMAHALLE ANKARA
- E-mail: [email protected]
2. Personal data we process
| Category | Data | Source |
|---|---|---|
| Identity and account | Provider user identifier and e-mail address when signing in with Apple/Google, guest session information, date of birth declared for the social profile, country | Apple or Google sign-in, guest session and details you enter in Profile |
| Profile | Nickname, profile photo, bio, interface language, languages you speak | Entered by you |
| Gameplay | Level, experience points, trophies, match and answer records, diamond/gold movements, power usage | Generated during play |
| Social and messaging | Private messages, friendships, likes, blocks and reports | Generated while using the app |
| Transaction security | IP address, client information, session records, push notification device token, last active time | Generated automatically on connection |
| Purchases | Store transaction identifier, purchased product, transaction status, subscription period | App Store / Google Play |
| Advertising | Rewarded ad completion verification and the reward granted | Server-side notification from the ad provider |
We never receive your payment details. For in-app purchases the store collects the payment; all we see is the verified transaction identifier and which product was bought. Card numbers, bank details and billing addresses never exist on our servers.
We do not store passwords. There is no e-mail/password registration in the app; you can sign in as a guest or through Apple or Google authentication. If you use Apple's private e-mail relay, we do not see your real address either.
3. Purposes and legal bases
- Creating and maintaining your account, matchmaking, rankings and progression — establishment and performance of a contract (KVKK art. 5/2-c).
- Granting purchase and subscription entitlements, refunds and cancellations — performance of a contract and legal obligation (art. 5/2-c, 5/2-ç).
- Security, fraud and abuse prevention, moderation and complaint review — legitimate interest (art. 5/2-f) and legal obligation.
- Checking the 18+ requirement for personal social features, using the date of birth you declare in Profile — legitimate interest.
- Sending notifications — performance of a contract; marketing notifications additionally require your explicit consent, which you may withdraw at any time.
- Legal claims and defence — establishment and protection of rights (art. 5/2-e).
4. Private messages and moderation
Private messages are stored encrypted on the server. However, the product does not offer end-to-end encryption: authorised moderators can read messages for complaint review and safety reasons. We state this plainly because we do not want you to assume otherwise.
Every moderation access is logged with the administrator's identity, the time and the reason. Administrators with the content editor role cannot see private messages. Message content is never written to application logs.
5. Recipients
- Apple — sign-in verification, purchase and subscription processing, push notification delivery.
- Google — sign-in verification, purchases on Android, ad delivery and reward verification.
- Hosting and infrastructure providers — server, database, file storage and e-mail delivery services.
- Competent public authorities — only where legally required and limited to the scope requested.
Some of these providers are located abroad; transfers are made in accordance with KVKK's provisions on cross-border transfers. We do not sell your personal data to third parties for advertising or marketing.
6. Retention periods
| Data | Period |
|---|---|
| Account and profile data | As long as the account exists |
| Private messages | 180 days; normal chat history is also deleted if the account is deleted earlier |
| Limited report evidence and moderation records | May be retained separately for abuse review and any necessary legal process |
| Session and connection records | As long as needed for security review |
| Purchase and invoice records | The mandatory retention period set by law |
You can delete your account inside the app through Profile → Delete my account; the normal deletion flow does not require an e-mail. Accounts linked to Sign in with Apple require reauthentication with the same Apple account, and that authorization is revoked. Once deletion succeeds, profile and sign-in details, sessions, social connections and normal conversations are removed. Past match results and limited purchase and balance transaction records are retained with your identity and profile details removed. Limited evidence separately saved for a report may be retained for the relevant abuse review and any necessary legal process. You must manage your Apple subscription separately. See Account Deletion for details.
7. Your rights
Under article 11 of the KVKK you have the right to learn whether your personal data is processed, request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties to whom it is transferred domestically or abroad, request correction of incomplete or inaccurate data, request erasure or destruction, request that corrections and erasures be notified to recipients, object to results produced solely by automated analysis, and claim compensation for damage caused by unlawful processing.
Send your request to the e-mail address above. Requests are concluded within thirty days at the latest. We will not disclose data on a request whose owner we cannot verify — this protects you from someone else taking over your account.
8. Age limit
Date of birth is not requested at first sign-in to start playing or use the store. Personal social features are only for people aged 18 and older. To enable profile discovery, likes, admirers, friendships and private chat, select and confirm your date of birth in Profile after signing in and complete your social profile. Date of birth is processed as your declaration for this social eligibility check; we do not independently verify your identity or age. A declared date that does not meet the 18+ requirement does not enable social features. Age and parental or guardian consent requirements that apply in your location and the store you use also apply.
9. Changes
This text may be updated. Significant changes are announced inside the app, and the update date at the top of the page is refreshed with every change.