Privacy Policy
- No sign-up. We do not ask for your name, phone number, location or photos. Your email is collected only if you choose to leave it in the feedback form.
- Your career is stored on your device (and, if iCloud is on, in your own iCloud account). For online features (friendlies, World Top 100, Weekly Event) the Game creates an anonymous online account and keeps a copy of your club (name, crest, strength, line-up) and your online results on our server in the EU (Frankfurt).
- No ads, no tracking across apps, and we never sell your data.
- You can delete your online account and all its server data at any time: Profile → Delete my online data.
1. Who we are
This policy applies to the iOS game Altın Nesil: Football Academy (the “Game”). The data controller under the EU General Data Protection Regulation (“GDPR”) and Turkish Personal Data Protection Law No. 6698 (“KVKK”) is the developer who publishes the Game on the App Store, Bilal Iyisoy.
Contact: keybridgeapp@gmail.com
2. What data we process
2.1 Data that stays on your device
The following is stored only on your device and is not sent to us:
- Game progress: squad, facilities, league and season status, coins and settings (sound, haptics, notifications, commentary).
- Age range: obtained through iOS's Declared Age Range feature only if you or your parent choose to share it. We receive a range (e.g. “18 or over”), never a birth date. It is used on your device only to decide which special offers may be shown.
- Reminders: local reminders are scheduled on your device.
- Crash diagnostics: Apple's MetricKit creates crash and hang summaries on your device; the Game does not send them to us.
iCloud backup: if iCloud is on for your iPhone, your game progress is also backed up to your private area of Apple's iCloud (Apple CloudKit private database) so it can come back if you reinstall the Game or move to a new iPhone. Only your Apple Account can access it; we cannot see or read it. You can delete the backup in iPhone Settings → [your name] → iCloud → Manage Storage.
Deleting the app removes the data on your device. You can also erase your progress via Profile → Reset Progress.
2.2 Online account and online features
When the Game connects to our server (it does so automatically when it opens), it creates an anonymous account: a random account ID, with no email or password. Linked to this account we store:
- Club profile: club name, crest, team strength, division, number of matches played, your match line-up (player names, positions, ratings), a friend code, and whether you accepted the fair-play rules or chose to hide yourself from rankings.
- Friends and friendlies: your friend list, friendly-match invitations, match choices (e.g. penalty corners) and results.
- Friend invites: if you enter a friend's invite code, who invited you, the invite status (pending, first season completed, rewarded) and its dates. Only the inviting player receives the reward.
- Weekly Event: your attempts, shots and scores, your weekly and all-time best, and rewards you claimed.
- Event attempt purchases: the App Store transaction ID of each “Event Attempt” you buy, so the attempt can be credited to your account (see 2.4).
- Safety records: players you block, reports you send or receive, and any suspension for breaking the rules; plus counters that limit how often an action can be repeated (to prevent abuse).
- Notification token: only if you allow notifications and the in-game Notifications setting is on — your device's push token, platform and language. Used to tell you when a friend invites you or waits for you in a match room, and for service announcements about the Game (e.g. a new version that fixes a bug, maintenance). We never send ads or sales offers by notification. Turning off Profile → Settings → Notifications deletes the token from our server.
Server announcements: when it opens, the Game reads the current announcements from our server (e.g. maintenance, a section temporarily closed, a call to update). It sends no account-linked data for this; whether an announcement applies to you (app version, platform) is decided on your device.
What other players see: your club name, crest, strength, line-up and event scores are shown to your friends and, after you accept the fair-play rules, in public rankings (World Top 100, Weekly Event). You can hide yourself from public rankings. Club names are filtered for offensive words on your device and on the server. There is no chat and no private messaging.
2.3 Feedback and reports
- Feedback (Profile → Send feedback): your message, its type, the app version, platform, operating system version, device model and language. Leaving your email address is optional; we use it only to reply.
- Reporting a club name: the reported club, the reason and any details you write. We review every report.
Feedback and reports are delivered to us by email through our email provider (see section 4).
2.4 In-app purchases (Apple and RevenueCat)
Apple processes payments; we never see your card or payment details. To validate, deliver and restore purchases, our purchase infrastructure provider RevenueCat, Inc. (USA) processes a user ID, purchase records (Apple receipt, product, date, transaction details) and technical information (device type, OS version, language/region and currency). The user ID starts as a random ID that RevenueCat generates; once your online account exists, the Game links it to your anonymous online account ID so purchases reach your account and can be found for support requests, and sends your club name to RevenueCat as a display name (your club name is already public in rankings). For Event Attempts our server also asks Apple (App Store Server API) to confirm the transaction before granting it.
2.5 What we do not collect
Name, phone number, address, location, contacts, photos, microphone, camera, health data, or the advertising identifier (IDFA). The Game has no ads, no ad tracking and does not request App Tracking Transparency permission. We do not use analytics SDKs.
3. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Providing online features (friendlies, rankings, Weekly Event, notifications) | Online account and the data in 2.2 | Performance of a contract (GDPR Art. 6(1)(b) · KVKK Art. 5/2-c) |
| Validating, delivering and restoring purchases | User ID, purchase records, transaction IDs, technical information | Performance of a contract (GDPR Art. 6(1)(b) · KVKK Art. 5/2-c) |
| Fair play and safety: name filtering, reports, blocks, suspensions, rate limits, fraud prevention | Safety records, club profile, purchase records | Legitimate interests (GDPR Art. 6(1)(f) · KVKK Art. 5/2-f) |
| Answering feedback and support requests | Feedback, optional email | Performance of a contract and legitimate interests (GDPR Art. 6(1)(b), (f) · KVKK Art. 5/2-c, f) |
4. Service providers and international transfers
We do not sell your data or share it for advertising (including “sale” or “sharing” under U.S. state laws such as the CCPA/CPRA). We use these processors, who act only on our instructions:
- Supabase, Inc. — online server and database, hosted on Amazon Web Services in the EU (Frankfurt, Germany).
- RevenueCat, Inc. — purchase infrastructure, data stored in the USA.
- Resend — delivers feedback and report emails to us, USA.
- Apple — payments, App Store Server API and push notifications (APNs), under the Apple Privacy Policy.
Transfers outside your country rely on appropriate safeguards under GDPR Chapter V and KVKK Art. 9 (data processing agreements and standard contractual clauses). We may disclose data to competent authorities where required by law.
5. Retention
- On-device data: until you delete the app or reset your progress.
- Online account: until you delete it (Profile → Delete my online data). An account that has not been used for 90 days is deleted automatically with all its data.
- Weekly Event attempts and shots: deleted after 8 weeks; your all-time best stays until your account is deleted.
- Reports and feedback: kept as long as needed to handle them and keep the game safe; when you delete your account, your link to reports and feedback you sent is removed.
- Purchase records (RevenueCat): as long as needed to restore purchases and to meet legal obligations (e.g. tax law).
6. Your rights
Depending on where you live, you have the right to access, rectify and erase your data, to restrict or object to processing based on legitimate interests, to data portability, and to know who your data was shared with (GDPR Arts. 15–21; KVKK Art. 11; similar rights under U.S. state laws).
Delete your online data yourself: Profile → Delete my online data deletes your online account and the server data linked to it immediately. For other requests email keybridgeapp@gmail.com and include your friend code (shown in the Friendly screen). We respond free of charge within 30 days.
You may also complain to your local data protection authority (in Türkiye, the Personal Data Protection Authority).
7. Children's privacy
The Game is suitable for football fans of all ages. We do not ask anyone for a name, phone number or contact details (email only if voluntarily left in feedback). There is no chat, no private messaging and no ads; the only content other players see is the club name and crest, which are filtered for offensive words and can be reported and blocked. Players known to be under 18, or whose age is unknown, are not shown time-limited or personalized special offers; players under 13 are not shown any special offers. Purchases can require parental approval through Apple's Family Sharing and Ask to Buy. We do not knowingly collect personal information from children under 13 beyond what is needed to run the Game (COPPA). If you believe there is an issue regarding your child, contact us and we will act promptly.
8. Security
All connections use encryption (HTTPS/TLS). On the server, players can read only their own data and their friends' public club data; access is enforced by database rules (row-level security), sensitive tables are not reachable from the app at all, and actions are rate-limited. Purchases are verified with Apple before an Event Attempt is granted. On-device data is protected by iOS sandboxing and encryption.
9. Changes
If we update this policy, we change the effective date and announce material changes in the Game. Previous versions are available on request at keybridgeapp@gmail.com.