Privacy Policy

This Privacy Policy explains how Carafe Yazılım ve Bilişim Anonim Şirketi ("Carafe", "we", "us") collects, uses, shares and protects personal information when you visit carafe.cc or use our mobile games and apps (together, the "Services"). Please read it together with any additional notice shown inside a specific app.

01Who we are

Carafe is operated by Carafe Yazılım ve Bilişim Anonim Şirketi, a company established in Türkiye. Carafe is a studio that makes simple, fun mobile games and apps built with the help of AI. Carafe is the controller of personal information described in this policy. You can reach us at hello@carafe.cc.

02Information we collect

Information you give us

• Contact details and the content of your message when you email us or ask to be notified about new releases.
• Account and profile information if an app offers accounts, such as a username, email address and progress or settings you save.
• Support requests and any information you choose to include in them.

Information collected automatically

• Device and app information, such as device model, operating system and version, language, app version, time zone and crash or performance diagnostics.
• Identifiers, such as an install or player identifier and, where permitted by your device settings, an advertising identifier.
• Usage information, such as gameplay events, features used, session length and purchases made through the app stores.
• Approximate location derived from your IP address. We do not collect precise location unless an app clearly asks for your permission first.

Website analytics

Our website uses Vercel Web Analytics to measure visits and page views in aggregate. It is designed to work without cookies and does not track you across other websites.

AI features

Some of our apps may use AI to generate content or responses. When you use such a feature, the text or other input you submit may be processed by third-party AI service providers on our behalf in order to produce a result. Please do not enter sensitive personal information, such as health details or government identifiers, into AI features.

Purchases

Payments are handled by Apple App Store or Google Play. We do not receive your full payment card details. We may receive confirmation of a purchase, its amount and the product bought.

03How we use information

• To provide, operate and maintain our Services and to save your progress.
• To improve gameplay, fix bugs, measure performance and develop new features, including AI features.
• To personalize content and, where applicable, to show or measure advertising.
• To respond to your questions and requests, and to tell you about new releases if you asked us to.
• To detect and prevent fraud, cheating, abuse and security incidents.
• To comply with legal obligations and to establish, exercise or defend legal claims.

04Legal bases

Where the GDPR, the UK GDPR or the Turkish Personal Data Protection Law No. 6698 (KVKK) applies, we rely on the following bases:

• Performance of a contract, to provide the Services you request.
• Legitimate interests, to secure, analyse and improve the Services, provided your rights do not override those interests.
• Consent, for example for advertising identifiers or optional permissions. You can withdraw consent at any time in your device settings or by contacting us.
• Legal obligation, where we must keep or disclose information by law.

05Who we share information with

We do not sell your personal information in exchange for money. We share information only as described below:

• Service providers that act on our behalf, such as website hosting (Vercel), domain and email routing (Cloudflare), analytics, crash reporting, cloud infrastructure and AI service providers.
• Advertising and measurement partners, if our apps show advertising. These partners may use device identifiers to show and measure ads. You can limit this through your device's advertising settings.
• Apple and Google, as operators of the app stores through which you download our apps and make purchases.
• Authorities and advisers, where required by law or to protect rights, safety and security.
• Business transfers, if Carafe is involved in a merger, acquisition or sale of assets. We would tell you if your information became subject to a different privacy policy.

06International transfers

Our providers may process information in countries outside your own, including Türkiye, the European Economic Area, the United Kingdom and the United States. Where required, we use safeguards such as standard contractual clauses or adequacy decisions to protect transferred information.

07How long we keep information

We keep personal information only as long as needed for the purposes in this policy. Account and gameplay data are kept while your account is active and deleted when you ask us to delete it, as described on our account deletion page. Support emails are kept for as long as needed to handle your request and our legal obligations. Aggregated or anonymized data that can no longer identify you may be kept longer.

08Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct inaccurate or incomplete information;
• delete your information;
• restrict or object to certain processing, including direct marketing;
• receive your information in a portable format;
• withdraw consent where processing is based on consent;
• complain to your data protection authority, such as the Turkish Personal Data Protection Authority (KVKK), your EU supervisory authority, or the UK Information Commissioner's Office.

California residents may also request to know, delete or correct personal information, and may opt out of the sale or sharing of personal information. We will not discriminate against you for exercising these rights.

To exercise a right, email hello@carafe.cc. We may need to verify your identity first and will reply within the time required by law, normally within 30 days. To delete your account and data, see Delete your account and data.

Device controls. You can reset or limit your advertising identifier and manage permissions (such as notifications) in your device settings at any time.

09Children

Our Services are not directed to children under 13, or under the higher age required in your country for consent to data processing. We do not knowingly collect personal information from children below that age. If you believe a child has given us personal information, please contact us and we will delete it.

10Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit. No system is completely secure, so we cannot guarantee absolute security.

11Changes to this policy

We may update this policy from time to time. We will post the new version here with a new "Last updated" date and, if the changes are significant, give you additional notice, for example within an app.

12Contact us

Questions or requests about this policy or your personal information: