Privacy Policy

This policy explains which data we collect when you use Tiamo Loop ("Loop": the iOS and Android app and the web version at https://tiamoloop.com), why we collect it, who we share it with and what rights you have. Loop is operated by Tiamo Teknoloji ve İnovasyon A.Ş. ("Tiamo Games", "we"). Our notice under Turkish data protection law is on the KVKK Information Notice page.

In short

• To create an account we only ask for a username and a password. We never ask for your email, phone number, location, contacts, camera or photos.
• Your posts, comments and profile are visible to other players.
• Your posts, comments, messages to AI characters and in-game moves are sent to our AI provider, Anthropic (USA), to generate the crowd's replies, only with the explicit consent you give at sign-up. You withdraw it by deleting your account.
• Payments for in-app purchases (coffee and Loop+) are handled by Apple and Google; we never see your card details. Your purchase records and your Energy ledger are kept for accounting even after you delete your account, unlinked from your identity.
• In the app we show rewarded ads through AppLovin only when you ask for one, and we tell AppLovin that you have not consented to interest-based advertising and that your data must not be sold. If you watch an ad, AppLovin collects some technical data from your device; your account id, username and what you write are never sent to AppLovin.
• We store your device's time zone on your account so that your daily allowances can renew at your local midnight.
• Your data is stored on Amazon Web Services servers in Frankfurt (Germany).
• We measure how you use the app (the screens you open, the buttons you tap, session length, the error codes you see) only if you give a separate permission; you can withdraw it at any time in Settings. Separately, when the app crashes or runs into an unexpected error it sends a short error report that is not linked to your account (below, under "Error reports"). We use no third-party analytics tools.
• You can delete your account at any time in the app (Settings → Delete my account) or on the account deletion page.
• Loop is for people aged 18 and over.

Data we collect

Data you give us

• Account: username, display name, optional bio, avatar color and emoji, language.
• Password: we never store the password itself, only a one-way hash (scrypt).
• Consents: when and which version of the Terms of Use and this policy you accepted, your statement that you are 18 or older, when and which version of the AI consent (sending your content to the AI provider) you gave, and your answer to the usage measurement permission (yes or no), when and for which version.
• Content: your posts, comments, likes, follows, messages with AI characters, in-game moves and the names you give your inner circle.
• Invite code: the code of the player who invited you, if you enter it at sign-up or later.
• Safety reports: reports you send (reason and optional note) and the users you block.
• Support: your email address and message if you write to us.

Data created while you play

• Activity log: signup, sign-in (failed attempts included), sign-out and password changes; profile updates; opening, closing and deleting posts; writing and deleting comments; moves, likes, follows, sending messages, asking for ideas, your choice on a pile-on notice, naming your inner circle (only the role and the length), badges earned, flagging AI comments, reports and blocks, giving the AI consent; shop and wallet events (opening the shop, purchase attempts, purchases and refunds, changes to your Loop+ subscription, earning, spending, refunding and taking back Energy and Action, the daily allowance being given, rewarded ads, invites and invite rewards; running out of Energy or Action); time zone reports; account deletion. Each is kept with a timestamp. The text of your messages and comments never enters the activity log, only its length; shop and wallet events carry only the product, the amount and the source; the Action cost of a like, follow or block is written on that action's own record.
• Game data: scores, aura, followers, badges, streaks, daily goals and the in-game memory AI characters keep about you. A shared-joke record with a character (what kind of moment it was and at most three words taken verbatim from your own public text) is kept for at most 30 days; the character's line recalling it stays on the result card of the post it appeared on, together with that post.
• Today's Sentence: the sentence you write to the day's question (one a day), its score, your rank in that language and a character's short line; with your AI consent the sentence goes to the AI provider to be scored, and a sentence that reaches the Today's Final becomes a public post.
• Duels: both sides of a duel you start or accept (the sentences are kept as posts), its topic, status, winner and the judging character's one-line verdict; until the duel ends each sentence is visible only to its author.
• Personal cast: the closeness worked out from the characters' coded reactions to your posts (per character a score, like and objection counts, the last reaction, whether it follows you for your taste or is your rival, when it sent its one opening message); no AI is used for it.
• Humor identity: your humor type worked out from your recent posts, three bars and the character closest to you; with your AI consent your type and your last 5 posts go to the AI provider to write its one-line reading. The card is visible only to you unless you choose "Show on my profile".
• Wallet: your Energy and Action balance (permanent balance and today's allowance); for each local day the daily allowance given and spent, and that day's number of likes, follows, blocks, rewarded ads and ideas; your Energy ledger (every earning, spending, refund and take-back: amount, what for, date) and your permanent Action earnings. Your balance is calculated from these records. The balance of the test environment is kept apart from the real one.
• Purchases: for each purchase the product, price, date, the store's transaction id, environment (test or real purchase), status (refunds included) and the subscription's end date; your Loop+ subscription status (store, level, weekly or monthly period, start and end date, end of the billing grace period, whether auto-renewal is on, the level you move to at the next renewal); the account key passed to the store with a purchase (a code derived from your account id with no personal information in it, so the purchase is credited to your account); daily shop demand counters (how often you opened the shop, tried a purchase, or ran out of Energy or Action).
• Rewarded ads: the single-use ticket we create for each ad (when it was created, shown and rewarded, the platform and the outcome) and, from AppLovin's reward notice, the ad unit, the time the ad was loaded and a one-way hash of AppLovin's event id; rewards given without an ad on the ad-free Loop+ levels.
• Invites: your invite code; who invited you and whom you invited, how the invite was made (at sign-up or later), its status (pending, deferred to the invited player's 3rd active day because it came from the same network, rewarded, over the monthly limit, same network, void) and its dates; the friend's gift (Energy) given to a player who joins with a code and the "Founder" badge given to the inviter. For a deferred invite only the number of days the invited player opened the game is counted.
• Votes on a link page: if you vote "Legendary or Ratioed?" on the web page of a shared post (tiamoloop.com/p/…), we write a random vote cookie (`lv`, one year) in your browser so the same device is not counted twice. The server keeps only a one-way hash of that cookie made with a secret key for that post, your pick and the date, never the cookie itself; not your IP address, device details or anything you type, and nothing goes to the AI. If you vote from the app, the same hash is made from your account. Votes are free and earn nothing; they are deleted with the post, and your app votes with your account.
• Time zone: the name of the time zone your device reports (for example Europe/Istanbul) and, if any, a new zone that applies from your next local day. We do not use it as location data; we keep it only so your daily allowances renew at your local midnight. If your device has not reported one, your account counts as Europe/Istanbul.
• Market: a market code (e.g. TR, US) set at signup and later from the connection's country and the app language; used to show you local characters and your own country's helpline. In some markets the market reveals the country; we do not store the connection's country or your IP address for this.
• Technical data: your IP address and network information derived from it (abuse prevention, rate limits and deferring the invite rewards of accounts opened from the same network), a hash of your session key, error logs and the error reports the app sends, which are not linked to your account (below, under "Error reports").
• Usage measurement (only with your permission): usage events the app sends from your device; details below, under "Usage measurement".
• On your device: your session key, your language and theme settings, the app's fonts once downloaded, (if you asked for an ad in the European Economic Area, the United Kingdom or Switzerland) your answer to our ad consent and (if you voted on a link page) the vote cookie in your browser. They stay on your device.

We use no third-party analytics tools. On its first launch the app downloads its fonts (Manrope, Anton and JetBrains Mono) from Google Fonts, a service of Google LLC (USA); for that request Google receives your device's IP address and the usual technical request data. Nothing about your account is sent to Google, and the fonts are then kept on your device. Payments for purchases are handled by Apple (App Store) or Google (Google Play) under their own terms; we never see your card or payment details and only receive the result of the purchase and the store's transaction id. For rewarded ads we use AppLovin (below). If we add another ad network, an analytics tool or another way to pay, we will update this policy first.

Usage measurement (only with your permission)

We measure how you use the app only if you give a separate permission. The app asks for it in its own window; "Allow" and "Don't allow" are equal choices. If you do not allow it, no feature of the game is limited and no usage event is taken from your device.

• What is measured: opening the app, the start, end and length of a session, the screens you open, opening the compose screen and sending a post, seeing the result card, tapping the share, invite, notification and shop buttons, starting a rewarded ad, the error codes you see and the server's response time (as a range); for each, its time, the app version and the platform (iOS, Android or web).
• What is not measured: what you write, other players' ids, your location, your contacts, your device or advertising id. We use no third-party analytics tools; the measurement goes only to our own server and to the AWS copy described below.
• Where: measurement records are kept linked to your account in the copy at AWS Frankfurt; when the copy nears the size limit we set, only anonymous daily counts are kept. [Lawyer: assess the retention period of the usage measurement (proposed 13 months) and the wording of the permission window.]
• Withdrawing it: you can withdraw your permission at any time in Settings → Privacy; when you do, your measurement records so far are deleted too. If you delete your account, your measurement records are deleted with it.
• Legal basis: your explicit consent (KVKK Art. 5/1, GDPR Art. 6(1)(a)).

Error reports

When the app (iOS, Android or web) crashes or runs into an unexpected error, it sends a short technical report to our server. We use it to find and fix errors and to keep the game running safely.

• What is sent: the platform, the app version and build number, the template of the screen where the error happened (for example "/p/:id"; ids, usernames and tags in it are removed), the first line of the error message and the first lines that show where in the app's code the error happened.
• What is not sent or kept: your account id, username, IP address, device or advertising id, email address and phone number, session key, the query part of the address and what you write. Email addresses, phone numbers, IP addresses, long numbers, links and quoted text in the error message are removed before it is stored. A report is not linked to your account, also for errors before you sign in. To limit how many reports one network can send, your IP address is used only in a rate-limit counter in the server's memory, apart from the reports; it is never written into a report or to disk.
• Where and how long: reports are kept only in the game's own database (AWS Frankfurt) and never reach the AWS copy described below. Reports of the same error are counted in one record; the record of an error that is not seen again for 30 days is deleted. Reports are not used for tracking or advertising and are not shared with anyone.
• Independent of the usage measurement: error reports do not depend on the usage measurement permission; they are sent even if you do not allow it. Because they are not linked to your account, they are not deleted separately when you delete your account; the 30-day rule deletes them.
• Legal basis: our legitimate interest in a safe and error-free service (KVKK Art. 5/2-f, GDPR Art. 6(1)(f)).

Rewarded ads (AppLovin)

Loop uses rewarded ads that a player chooses to watch.

The app (not the web version) has optional rewarded ads: if you tap the button to watch one, you watch a short ad and earn 1 Energy. There are no banner or interstitial ads; an ad loads only when you ask for it.

• Ad partner: the ads are served by AppLovin (AppLovin Corporation, 1100 Page Mill Road, Palo Alto, CA 94304, USA; EU and UK representative: Prighter Group). AppLovin participates in the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework and processes this data under its own policy: AppLovin Privacy Policy. [Lawyer: confirm the contracting party of the AppLovin agreement (AppLovin Terms / Publisher Policies) and AppLovin's role (independent controller or processor).]
• Non-personalized ads: before the ad component starts we tell AppLovin that you have not consented to interest-based advertising and that your data must not be sold, so ads are not picked from your past behaviour. On iOS we do not ask for tracking permission (App Tracking Transparency), so your device's advertising identifier (IDFA) is not sent to AppLovin. On Android the app does not hold the advertising ID permission, so the ad component cannot read that identifier.
• What AppLovin collects: to serve, measure and report ads and to prevent fraud, the ad component (AppLovin MAX SDK) collects from your device: device make, model, operating system and characteristics, carrier and network type, country, time zone and language, IP address (to determine your approximate location), device identifiers scoped to the app (the identifier for vendor, IDFV, on iOS; the app set ID on Android), app, session and install information, ad interactions (ads shown, taps, views) and diagnostic information. AppLovin generally keeps this data for up to 2 years.
• Consent: in the European Economic Area, the United Kingdom and Switzerland (and when the country of a request cannot be determined), the app shows you a short consent window before your first ad; for this consent we determine the country from the connection for that request only and do not store it for this purpose. If you do not consent, we do not start the ad component and you cannot watch ads; the rest of the game is not affected. You can change your choice in Settings → "Ad privacy options"; if you withdraw it, ads are turned off and we do not start the ad component from the next launch on. In every region we start the ad component only the first time you tap the button to watch an ad, and only then do we request an ad; the component's code is part of the app and loads with it. [Lawyer: assess whether players in Türkiye need to give explicit consent to the ad component's use of device data (KVKK cookie guidelines) and whether the consent window should be shown in Türkiye too, and whether our consent window is sufficient under ePrivacy Article 5(3) in the EEA, UK and Switzerland.]
• What we receive: so that we can grant the reward, AppLovin's server sends our server a reward notice: the ad unit, the platform, the time the ad was loaded, the name of the network that served it, AppLovin's event id and the single-use ticket we created for that ad. We keep the event id only as a one-way hash. Your account id, username and what you write are never sent to AppLovin.
• Ad-free levels: on Loop+ 20 and Loop+ 50 the daily ad rewards are given without watching an ad; no request goes to AppLovin then.

Why we use it

• To create your account, manage your session and provide the game (performance of a contract).
• To generate the AI crowd's reactions to your posts, your scores and message replies (performance of a contract); sending your content to the AI provider relies on your explicit consent.
• To run your wallet: keep your Energy and Action balance, give your daily allowances by your local time and process spending and refunds (performance of a contract).
• To credit what you buy to your account, manage your Loop+ subscription (level changes, billing grace period and renewals included) and process refunds and restores (performance of a contract); to keep purchase records and the Energy ledger as accounting and tax law requires (legal obligation).
• To grant the reward for rewarded ads and prevent abuse of the reward (performance of a contract and legitimate interest).
• To grant invite rewards and prevent abuse with fake accounts or accounts opened from the same network (performance of a contract and legitimate interest).
• To keep Loop safe: rate limits, automatic content filters, reviewing reports, preventing abuse (legitimate interest and legal obligation).
• To measure and improve the game and the shop: per-player and aggregate statistics from the activity log, the game's records and the shop demand counters, error and performance tracking including the app's error reports that are not linked to an account (legitimate interest); with your permission, also with the usage measurement sent from your device (explicit consent).
• To meet legal obligations and lawful requests from authorities.
• To answer support requests.

We do not sell your data or use it for ad targeting; we tell AppLovin that you have not consented to interest-based advertising and that your data must not be sold.

AI processing

The crowd, the characters and the scores in Loop are generated by AI models. To do that, the text of your posts, your comments and related comments, your messages to AI characters, your in-game moves and game context (your display name, language and a summary of earlier interactions) are sent to an AI provider. We currently use Anthropic PBC (USA); other providers with similar terms may be used later. Providers process this data only to produce responses for us; their commercial API terms state that it is not used to train models. Details are in each provider's own policies.

We send this data only with your explicit consent, which you give with a separate checkbox when you sign up. Accounts opened before this consent existed are asked for it once in the app; until they give it, nothing they write is sent to the AI provider, and they can read, like and follow but cannot post, comment, make moves or send messages. Loop cannot work without this consent, because every reaction in the game is written by the AI. You withdraw it by deleting your account (Settings → Delete my account); from then on nothing more is sent.

AI output is fiction: it is not the opinion of real people and can be wrong or harsh.

Who can see it

• Other players: your username, display name, bio, avatar, aura and follower count, badges, posts and comments. They cannot see your Energy and Action balance, your purchases or your Loop+ subscription. People you block cannot comment on your posts. The player who invited you gets a notification with your username when the invite reward is granted.
• Anyone with the link: a live post's link can be shared with "Share" by you or by any player who sees the post in Loop. Whoever opens the link sees, even without an account, the text of the post, the summary of the AI crowd (views, likes and comment counts, opinion and heat), the result and the total of the visitors' votes. That page shows no name or username of the author and no comments; other players' usernames tagged in the text (@username) are hidden, and the page is closed to search engines. Your invite link does not show your name either.
• Our service providers: Amazon Web Services (servers and database, Frankfurt), Cloudflare (network security and traffic delivery), AI providers and Google (delivery of the app's fonts through Google Fonts). They process data only on our instructions; Google Fonts runs under Google's own terms.
• Ad partner: AppLovin Corporation, only when you watch an ad and with the data described above; AppLovin processes it under its own terms.
• App stores: Apple and Google process payments under their own privacy policies. To verify a purchase we ask the store's server only about that purchase; the store sends us notices of refunds, reversed refunds, renewals, level changes, billing grace periods and subscription ends.
• Authorities: only on a lawful request and only as much as required.

Where it is stored and international transfers

Your data is stored on AWS servers and databases in the Frankfurt region (Germany, eu-central-1): both the game's database and the analysis copy our team keeps to follow and improve the game are at AWS Frankfurt. The analysis copy holds: your player record (profile, statistics and Energy), the text and scores of your posts while they are public, your likes and follows, your moves (without their text, only its length), your Aura and follower history, your badges, streaks and goals, the flags you put on AI comments, link-page votes (only the per-post hash, the pick and the date), your Today's Sentence entries (score and rank; the text only while its Today's Final post is public) and your duels (sides and result, without the verdict), your humor identity card (type, bars and closest character, without the AI line), a deletion record without your identity, the activity log (wallet, purchase, subscription, rewarded-ad and invite events included; invite events link the inviter and the invited player) and, with your permission, your usage measurement (above, under "Usage measurement"). In this copy, account and content ids are replaced by numeric keys that mean something only inside this copy. A record deleted from the game's database is deleted from this copy too; the text of a post that is deleted, or hidden or removed after reports, is removed from this copy as well. Your password hash is no longer sent to this copy, and the password hashes sent earlier are removed from it. The automatic backups that AWS keeps of this copy, however, hold the earlier state of the copy, password hashes included, for at most 10 days; after that they are deleted automatically. The text of your messages and comments, your notifications, your report notes and content copies, your purchase records, your Energy ledger, AI cost records, the memory the characters keep about you, the names of your inner circle, your invite code, your ad tickets, your IP address and your session key are not copied there; purchase and wallet events in the activity log carry only the product, the price, the amount of Energy and Action and the source, never a receipt or a transaction id (store transactions are only recognizable by a short one-way hash).

Through Cloudflare, the AI provider, Google Fonts and AppLovin, data may be transferred outside Türkiye and the European Economic Area (in particular to the USA). Your content goes to the AI provider only with the explicit consent you give at sign-up; these transfers rely on the safeguards of Article 9 of the Turkish KVKK and, where applicable, the GDPR (standard contractual clauses). [Lawyer: confirm the transfer bases (the AI consent text, Cloudflare, Google Fonts, AppLovin; the KVKK Article 9 basis for transfers from Türkiye to the USA).]

How long we keep it

• Account data and content: for as long as your account exists.
• The app's error reports are not linked to your account; the record of an error is deleted when it has not been seen again for 30 days.
• You can also delete content one by one. A post you delete is hidden from everyone and its text is removed from the AWS copy; its record stays hidden on our server until you delete your account. A comment you delete is removed at once with its likes and notifications when nobody replied to it; when someone replied, or it was a move, only its text is removed and it shows as "This comment was deleted."
• Deleted at once when you delete your account: your profile, password hash, sessions, posts (with every comment, like and move under them), your comments on other people's posts, likes, follows, blocks, messages with AI characters, notifications, consent records, game data (badges, streaks, goals, memory, inner circle, stat history), your Today's Sentence entries, your duels, your link-page votes from the app, your personal cast closeness, your shared-joke records with characters, your humor identity card, your wallet (Energy and Action balance, daily allowance records), your rewarded-ad records, your invite code, your time zone, your shop demand counters and your usage measurement records; they are deleted from the AWS copy too. Your remaining Energy and Action (including what came from coffee) can no longer be used and are not refunded.
• Anonymized: a record without your identity stays in place of your account (username "silinmis-…", display name "Silinmiş kullanıcı", Turkish for "Deleted user"); your old username becomes free. Where someone already replied to one of your comments, only its text is removed and its author shows as "Silinmiş kullanıcı". Your name is removed from the reports you sent; open reports about you are closed and their content copies deleted. Your invite relation (who invited whom and the outcome) stays linked to the anonymous record to prevent abuse. The link to your AI cost records is cut; to prevent abuse, your AI spending of that day still counts, without your identity, towards the daily total of the network you signed up from until the day ends. Your player record on AWS is anonymized and the texts of your posts are removed; older activity log rows carry no text and stay linked to the anonymous record.
• Kept: your purchase records (product, price, date, store transaction id, environment, status), your Loop+ subscription record and your Energy ledger are kept under the anonymous record, unlinked from your identity, for as long as accounting and tax law requires. A Loop+ subscription running at the time of deletion ends at once; the subscription at the App Store or Google Play, however, keeps renewing and billing until you cancel it in the store, and those renewals are recorded under the same anonymous record. If you tap "Restore purchases" in a new Loop account with the same store account, the subscription and its records can move to that account. The hashes of the ids in the ad network's reward notices stay, not linked to your account, so that the same ad reward is never written twice. A deletion record without your identity (date, channel, number of removed rows) is also kept.
• The internal delivery queue keeps a record for at most 7 days after it has been delivered to the copy (a record that could not be delivered yet waits in the queue until it is), and backups for at most 30 days; deleted data leaves the backups when that period ends.
• Records the law requires us to keep, only for that period. [Lawyer: assess the traffic-data duty under Turkish Law No. 5651 and keeping the Energy ledger without end as an anonymous record that cannot be deleted.]

Your rights

Under Article 11 of the KVKK and (if you are in Europe) the GDPR you can access, correct and delete your data, object to processing, learn who it was shared with and complain. You can delete your posts, your comments and your account yourself in the app, and change your ad consent in Settings → "Ad privacy options" (shown in the regions where the consent window appears, once you have answered it). For any other request, write to info@tiamogames.com; we answer free of charge within 30 days. You may also complain to the Turkish Personal Data Protection Authority or the data protection authority in your country.

Security

Connections are encrypted with TLS, passwords and session keys are stored as hashes and database access is restricted. No system is perfect; if a data breach happens we will inform you and the authorities as the law requires.

Children

Loop is for people aged 18 and over. We do not knowingly collect data from anyone under 18 and delete such accounts when we find them.

Changes

We may update this policy. Important changes are announced in the app; the version date is below.

Contact

Tiamo Teknoloji ve İnovasyon A.Ş., Şehit Muhtar, Mis Sk. No:24, 34435 Beyoğlu/İstanbul, Türkiye. Email: info@tiamogames.com.

Last updated: 2026-10-28.2