Kapış Privacy Policy

Effective: 13 October 2026

This policy explains what personal data the Kapış mobile app (“Kapış”) collects, why, who receives it and what choices you have. Kapış is published by Kreative Center (Bedirhan Samsa and Kazım İhtiyar), who are responsible for your data (“we”). Contact: info@kreative.center.

In short

  • You can play as a guest. We never ask for your real name, phone number or address, so please don't use them in names or group names.
  • We use your data to run your account, games, friends, leagues and purchases, to keep the game fair and safe, and to fix bugs.
  • Kapış shows ads from Google AdMob. Your advertising identifier is used for personalised ads only if you allow it.
  • We do not sell your personal data.
  • You can download your data or delete your account in the app at any time.

What we collect and why

  • Account and device: a generated account ID, device ID, platform, operating system and app version, language, time zone and the result of app integrity checks (Apple App Attest, Google Play Integrity). We use them to create and protect your account and to stop cheating and abuse.
  • Profile: display name, username, avatar, frame and other cosmetics. Other players see them as your settings allow.
  • Gameplay: game sessions, scores, the inputs needed to verify a score, progress, XP, badges and league points. We use them to score games fairly, run rivalries, leaderboards and leagues, and detect cheating.
  • Friends and community: friends, invite codes, groups and their names, rivalry rounds, Rock Paper Scissors matches, emoji reactions, reports and blocks. We use them to run the friend features and keep the community safe: names are filtered for offensive words and we review reports.
  • Online status: while Kapış is open, your friends see that you are online, and your opponent sees when you have your Rock Paper Scissors match open. You appear offline about 15 seconds after you leave the app. This status is kept only in our server's memory and is not stored.
  • Sign in with Apple or Google (optional): the account ID and email address the provider shares and, for Apple, a token that lets us revoke the link. We use them to restore your account on another device.
  • Purchases: your account ID, display name, products, subscription status and transactions, processed by the App Store or Google Play and by RevenueCat. We use them to unlock Premium or Ad-Free. Payment card details stay with Apple or Google.
  • Advertising: ad requests and interactions, approximate location derived from your IP address, device information and your consent choices, and your advertising identifier (IDFA on iOS, advertising ID on Android) only if you allow it. Google AdMob uses them to show and measure ads and to prevent fraud; we use them to limit how often you see ads and to grant rewards for rewarded ads.
  • Notifications: your push token and delivery status, to send the notifications you allow.
  • Diagnostics and usage: crash reports and performance data (Sentry), and in-app events such as a screen or an offer being opened (our servers). We use them to fix bugs and improve Kapış.
  • Connection data: your IP address and the approximate country Cloudflare derives from it, to protect our servers and for aggregate statistics.
  • Support: what you send us by email.

Legal bases

We process your data to perform our contract with you (account, games, purchases); for our legitimate interests (security, preventing cheating, fixing bugs, measuring the service and non-personalised ads); with your consent (personalised ads and tracking, notifications); and to meet legal obligations. Residents of Türkiye can also read our KVKK notice.

Who receives your data

  • Other players: your profile, scores and activity, as your settings allow.
  • Service providers working for us: the hosting provider of our Kreative Orion servers in the European Union; Cloudflare (network security and delivery); Sentry (crash reports, stored in its EU region in Germany); Expo, Apple Push Notification service and Firebase Cloud Messaging (notifications); RevenueCat (subscriptions).
  • Apple and Google: sign-in, store purchases, app integrity checks and notifications, under their own privacy policies.
  • Google AdMob and Google's consent tools: advertising and consent management, under Google's privacy policy.
  • Authorities: only where the law requires it.

Tracking and advertising

On iOS, Kapış asks for your permission (App Tracking Transparency) before your advertising identifier is used to track you across other companies' apps and websites. In the EEA, the UK and Switzerland, Google's consent form asks for your choices first. If you say no, you still see ads, but they are not personalised. Premium removes all ads. Ad-Free removes banner and interstitial ads; rewarded videos that you choose to watch stay available. You can change these choices in Settings → Privacy (Privacy options, Ad tracking (iOS), Ad personalization) and in your device settings.

Your choices and rights

  • Visibility: in Settings → Privacy you choose whether people can find you in search (Show in search), whether other players see your full name on global leaderboards (Hide my name on global leaderboards, on by default) and whether your records and round wins appear in your friends' feed (Share my activity).
  • Download your data: Settings → Privacy → Download my data.
  • Delete your account: Settings → Delete account, or on the web at kreative.center/kapis/delete-account. This deletes your profile, friends, groups you own, games, points, linked sign-ins and the analytics events tied to your device. Reports you made are kept without your identity. Deleting your account does not cancel a subscription; cancel it in your App Store or Google Play account.
  • Your rights: depending on where you live, you can ask to access, correct, delete or export your data, restrict or object to its processing, withdraw consent at any time and complain to a data protection authority. Write to info@kreative.center; we answer within 30 days.
  • US state privacy laws (such as California's): we do not sell personal data. Personalised ads based on your advertising identifier may count as “sharing” under these laws; you can opt out by not allowing tracking, choosing non-personalised ads in the app or writing to us.

How long we keep data

  • Account, profile, friends and game data: until you delete your account.
  • Analytics events: until you delete your account, and no longer than 24 months.
  • Crash reports: up to 90 days.
  • Online status: only while you are connected.
  • Purchase records: Apple, Google and RevenueCat keep them under their own rules and as tax law requires.
  • Support emails: as long as needed to handle your request.

International transfers

Our Kreative Orion servers are in the European Union, so if you use Kapış from outside the EU (for example from Türkiye), your data is transferred abroad. Some of our service providers, such as Google, Apple, Cloudflare, RevenueCat and Expo, also process data in the United States and other countries. Where the law requires it (for example Article 9 of Türkiye's KVKK or the GDPR), we rely on standard contractual clauses or other lawful safeguards, or ask for your explicit consent.

Children

Kapış is not directed to children under 13, and we do not knowingly collect their data. If you are under 16 (or under the age of digital consent where you live), use Kapış only with the permission of a parent or guardian. If you believe a child has given us personal data, write to us and we will delete it.

Security

Data travels encrypted (HTTPS). Sign-in tokens and other secrets are stored encrypted, and access to our servers is restricted. No method is perfectly secure; if a breach affects you, we will tell you where the law requires.

Changes

We publish updates on this page with a new effective date and tell you in the app about important changes.

Contact

Kreative Center (Bedirhan Samsa and Kazım İhtiyar), Çengelköy Mah. Ordu Cad. Soner Sok. No 12 Daire 3, Üsküdar/İstanbul, Türkiye · info@kreative.center