KVKK Information Notice

This notice is given under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform users of the Tiamo Loop ("Loop") app and website (https://tiamoloop.com) about the processing of their personal data. The Turkish version prevails.

1. Data controller

• Tiamo Teknoloji ve İnovasyon A.Ş. ("Tiamo Games")
• Address: Şehit Muhtar, Mis Sk. No:24, 34435 Beyoğlu/İstanbul, Türkiye
• MERSIS No: 0844115687300001
• Email: info@tiamogames.com

2. Personal data processed

• Identity: username, display name.
• Customer transactions: bio, avatar and language settings; posts, comments, likes, follows, chats with AI characters, in-game moves, scores and badges, shared-joke records with characters (at most 30 days); reports and blocks; acceptance of the Terms of Use and Privacy Policy, the statement of being 18 or older, the explicit consent to sending your content to the AI provider and the answer to the usage measurement permission.
• Customer transactions (purchases): purchase records (product, price, date, store transaction id, environment, status, subscription end date), Loop+ subscription status (level, weekly or monthly period, billing grace period, auto-renewal, pending level change), the account key passed to the store, shop demand counters.
• Customer transactions (wallet, ads, invites): Energy and Action balance, daily allowance and spending counters per local day, the Energy ledger (earning, spending, refunds, take-backs); rewarded-ad tickets and, from AppLovin's reward notice, the ad unit, the time the ad was loaded and a one-way hash of the event id; invite code and invite relation (inviter, invited player, status); the time zone your device reports.
• Transaction security: password hash (scrypt), session key hash, IP address and network information derived from it, sign-in and activity logs (shop events included), error logs; the device's IP address that reaches Google when the app downloads its fonts; the error reports the app sends, not linked to an account (platform, app version and build, screen template, the cleaned error message and where in the code the error happened; without any id, IP address, device id or what you write).
• Advertising (only if you watch an ad, by AppLovin's ad component): IP address and the approximate location determined from it, device information (make, model, operating system, carrier, network type, language, time zone), device identifiers scoped to the app (IDFV on iOS, app set ID on Android), ad interactions and diagnostic information; in the European Economic Area, the United Kingdom and Switzerland, your answer to our ad consent, stored on your device.
• Usage measurement (only with your explicit consent): the screens opened in the app, the start, end and length of a session, taps on the share, invite, notification and shop buttons, the error codes seen and ranges of the server's response time, the app version and the platform; what you write and other players' ids are never sent.
• Contact: your email address and correspondence, only if you write to us.

We do not process card or payment details: payments for in-app purchases are handled by Apple and Google under their own terms. We do not ask for special categories of personal data. Special-category data you include in your own content is processed only to provide the service and to the extent you made it public yourself.

3. Purposes

• Running memberships and sessions and providing the game.
• Generating AI reactions, scores and message replies to your posts.
• Verifying purchases and crediting them to your account; running subscriptions, refunds and restores; keeping accounting and tax records.
• Running the Energy and Action wallet and giving daily allowances by the player's local time.
• Showing optional rewarded ads and granting their reward; granting invite rewards; preventing abuse of ad and invite rewards.
• Information security, preventing abuse and unlawful content, reviewing reports.
• Measuring and improving the service and the shop; per-player usage analysis, error and performance tracking.
• With your explicit consent, measuring the use of the app with events sent from your device.
• Meeting legal obligations and requests from competent authorities.
• Answering requests and complaints.

4. Legal grounds

• Necessary for the conclusion or performance of a contract (KVKK Art. 5/2-c): membership, the game, delivering purchases, the wallet, rewarded ads and invite rewards.
• Compliance with a legal obligation of the controller (Art. 5/2-ç): accounting and tax records included.
• Establishing, exercising or defending a right (Art. 5/2-e).
• Legitimate interest, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f): security, abuse prevention (ad and invite rewards included), game and shop statistics. [Lawyer: assess whether explicit consent is required in Türkiye for the ad component's use of device data and identifiers scoped to the app.]
• Your explicit consent (Art. 5/1): sending your posts, comments, messages to AI characters and in-game moves to the AI provider abroad to generate replies. You give it at sign-up with a separate checkbox (older accounts give it once in the app) and withdraw it by deleting your account; without it nothing you write is sent.
• Your explicit consent (Art. 5/1): the usage measurement sent from your device. It is asked for in its own window and no feature depends on it; you withdraw it in Settings → Privacy, and your measurement records so far are then deleted.
• Data made public by you (Art. 5/2-d): public posts.
• Legitimate interest (Art. 5/2-f): finding and fixing errors through the error reports the app sends when it crashes or hits an unexpected error, not linked to an account. These reports do not depend on the usage measurement permission.

5. Transfers

• In Türkiye: to competent public authorities on request and as permitted by law.
• Abroad: to the providers we use to run the service: Amazon Web Services (the game's servers and database, and the analysis copy that holds player records, public post texts, game statistics, the activity log and, where permitted, the usage measurement, Frankfurt/Germany; what the copy holds and what never reaches it is in the Privacy Policy), Cloudflare (network security and traffic delivery), the AI provider Anthropic PBC (USA) and other AI providers with similar terms (your posts, comments, messages and moves, only with your explicit consent); Google LLC (USA) through Google Fonts, which delivers the app's fonts on first launch (only your device's IP address and technical request data); Apple and Google to verify in-app purchases (only the information of that purchase); only when you watch an ad, AppLovin Corporation (USA), which serves the rewarded ads (the IP address, device information and device identifiers scoped to the app, ad interaction and diagnostic data collected by the ad component; your account id is never sent). Your content goes to the AI provider only with your explicit consent; transfers abroad rely on the appropriate safeguards of KVKK Art. 9 (standard contracts). [Lawyer: confirm the transfer bases (AppLovin included), the AI consent text and notification to the Authority.]

6. Collection method

Your personal data is collected electronically through the app and the website, automatically and as you enter it.

7. Retention

Data is kept while your account exists. When you delete your account in the app or at https://tiamoloop.com/delete-account, the data is deleted or anonymized at once. Purchase records and the Energy ledger are kept for as long as accounting and tax law requires, unlinked from your identity; the invite relation stays linked to the anonymous record to prevent abuse. The app's error reports are not linked to an account; the record of an error is deleted when it has not been seen for 30 days. Details are in the Privacy Policy. Backups keep data for at most 30 days; other records required by law are kept for the required period.

8. Your rights (KVKK Art. 11)

By applying to the data controller you may:

• learn whether your personal data is processed,
• request information about the processing,
• learn the purpose of processing and whether data is used accordingly,
• know the third parties in Türkiye or abroad to whom data is transferred,
• request correction of incomplete or inaccurate data,
• request deletion or destruction under the conditions of KVKK Art. 7,
• request that corrections, deletions and destructions be notified to the third parties the data was transferred to,
• object to a result against you arising exclusively from automated analysis,
• claim compensation for damage caused by unlawful processing.

9. How to apply

Send your request in writing to Şehit Muhtar, Mis Sk. No:24, 34435 Beyoğlu/İstanbul, Türkiye or to info@tiamogames.com, in line with the Communiqué on the Procedures and Principles of Applications to the Data Controller. Since we do not ask for contact details at signup, please include your Loop username and help us confirm that the account is yours. Requests are concluded free of charge within 30 days.

Last updated: 2026-10-28.2