Privacy Policy

1. Who we are and scope

This Privacy Policy explains how Uğur Berk Ergün, a sole proprietor registered in Türkiye and operating under the trade name "TRYQ" ("we", "us", "our"), handles personal data in connection with our websites, mobile applications, games and online services (together, the "Services"). This single policy covers every application and service we publish, on any platform, including applications distributed through the Apple App Store and Google Play.

For the purposes of applicable data protection law, including Türkiye's Law No. 6698 on the Protection of Personal Data ("KVKK") and, where applicable, the EU/UK General Data Protection Regulation ("GDPR"), the data controller is Uğur Berk Ergün. "TRYQ" is a trade name only and is not a separate legal entity. Privacy contact: hello@tryq.io.

The data a specific product actually uses depends on its features, platform and version. Where a product provides additional detail — through in-app notices, App Store privacy labels or Google Play Data safety forms — that information supplements this policy for that product.

By downloading, installing, accessing or using any of the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, you must not use the Services.

2. Information we collect

We aim to collect only what a feature needs in order to work. Depending on the product you use, this may include:

• Account data — name, email address, Sign in with Apple / Google identifiers, profile photo, where an account feature exists.
• Content you provide — photos, images, text, prompts, documents and other material you upload or create within the Services, including inputs you submit to AI features and the outputs generated from them.
• Purchase data — product, subscription status, trial status, transaction identifiers, country and price tier. We never receive or store your full payment card details; Apple, Google or the relevant payment processor handles payment.
• Device and usage data — device model, operating system, language, app version, IP address, app and device identifiers, session information and feature usage events, collected automatically.
• Advertising identifiers — IDFA on iOS (only with your permission via App Tracking Transparency) and the Google Advertising ID on Android, where an app includes advertising.
• Diagnostics — crash logs and performance data, collected automatically.
• Game data — progress, settings, scores and achievements, which are mostly stored locally on your device.
• Communications — emails, contact form messages and feedback you send us.
• Website data — pages visited, referrer, browser type and cookies, as described in section 8.

Permissions. We request camera, photo library, notification or similar device permissions only when a feature needs them. You can change or revoke permissions at any time in your device settings.

Sensitive data. We do not intentionally collect special categories of personal data (such as health, religious or biometric data). We do not use photos to create facial-recognition templates or to identify individuals. You must not submit sensitive data through the Services; if you choose to do so, you do so entirely at your own risk and we accept no responsibility for it.

3. How we use information and legal bases

We use personal data only for the following purposes:

• Providing and operating the Services, creating and managing accounts, running AI generation features and syncing your content — performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• Processing purchases, subscriptions and purchase restores — performance of a contract.
• Security, fraud and abuse prevention, and enforcing our terms — legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• Crash reporting, bug fixing, performance measurement and product analytics — legitimate interests, or consent where required.
• Personalised advertising, cross-app tracking and ad measurement — your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)), including ATT permission on iOS.
• Responding to support requests and communications — contract or legitimate interests.
• Tax, accounting and other legal obligations, and responding to competent authorities — legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(a), (ç)).
• Establishing, exercising or defending legal claims — legitimate interests (KVKK Art. 5(2)(e)).

We do not sell your personal data. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

4. AI features, photos and user content

Some Services include AI-powered features. When you use them, the image or text you submit may be transmitted to our servers and to third-party AI service providers in order to generate the result you requested.

• Your inputs and outputs are used to deliver the feature you requested. We do not use your photos or generated content to train our own AI models, and we do not knowingly permit our AI providers to use them for training their models.
• Source material is retained only as long as reasonably needed to process your request and operate the feature. Generated results associated with an account remain available until you delete them or delete your account.
• You are solely responsible for the content you upload. Only upload material you have the legal right to use. If a photo shows other people, you are solely responsible for obtaining their permission. We accept no responsibility or liability for content you upload or for any claim arising from it.
• AI-generated content is produced automatically and may be inaccurate, incomplete or unexpected. It is provided for informational and entertainment purposes only, does not constitute professional advice of any kind, and must not be relied upon as such. We disclaim all liability for AI-generated outputs and for any decision made or action taken in reliance on them.
• We may automatically screen inputs and outputs to prevent illegal or harmful content, but we do not undertake any obligation to monitor user content and assume no liability for failing to do so.

5. Content you share with others

Some features are social or shared by design — for example shared albums, join codes, public pages or leaderboard names. Anything you share through such features can be seen, downloaded and further distributed by the people you share it with, and once content leaves our systems it is entirely outside our control and we accept no responsibility for it. Share access codes and content only with people you trust. You can delete content you uploaded, but copies others have already obtained are beyond our reach and responsibility.

6. Advertising, analytics and tracking

Some of our apps and games include third-party SDKs for analytics, crash reporting, attribution or advertising. A given provider is used only in products that include that integration.

• iOS (App Tracking Transparency). We request your permission before tracking you across other companies' apps and websites or accessing your IDFA. If you decline, we respect that choice, and declining never blocks core features.
• Android. You can reset or delete your Advertising ID in your device settings.
• EEA, UK and Switzerland. Where required, a consent prompt is shown before personalised ads or non-essential tracking, and you can change your choice at any time.
• If you decline tracking you may still see ads, but they will not be based on your activity across other apps.

7. Purchases, subscriptions and platform services

• In-app purchases are processed by Apple (App Store) and Google (Google Play) under their own terms and privacy policies. We receive only transaction information needed to unlock and restore your purchases.
• Subscriptions are managed in your Apple ID or Google Play settings. Deleting an app does not cancel a subscription, and we are not responsible for charges resulting from subscriptions you did not cancel through the platform.
• If you use Game Center or Google Play Games, your scores, achievements and player name may be shared with Apple or Google and shown on leaderboards. Those accounts are managed by the platform, not by us.
• Local game data (progress, settings, in-game currency) is mainly stored on your device. Deleting the app removes it unless it is backed up by iCloud, Google or a cloud-save feature. We are not responsible for loss of locally stored data.

8. Website, cookies and communications

Our websites may use cookies and similar technologies: strictly necessary cookies (security, language preference — no consent needed) and, where used, analytics cookies (subject to consent where required). On tryq.io we use Google Analytics only after you accept it in the cookie banner; you can change your choice at any time via “Cookie preferences” at the bottom of every page. You can also block or delete cookies in your browser. When you contact us through a form or by email, we use your name, email address and message only to respond to you.

9. Sharing and service providers

We share personal data only as described in this policy, with categories of providers such as: cloud hosting and storage providers; AI model providers; analytics and crash-reporting providers; attribution and advertising networks; subscription and payment infrastructure providers; email and support tooling; and the platforms themselves (Apple, Google). These providers process data under their own terms and privacy policies, and we are not responsible for the independent acts, omissions or policies of any third party, to the maximum extent permitted by applicable law.

We may also disclose data:

• when required by law, a court order or a competent authority;
• to protect the rights, safety or property of users, ourselves or others;
• to a buyer or successor in a merger, acquisition or sale of assets;
• with your consent or at your direction.

10. International transfers

We are based in Türkiye, and our service providers may process data in other countries, including the United States and EU member states. Where we transfer personal data abroad, we rely on the safeguards applicable law requires — under KVKK Article 9, an adequacy decision or another lawful transfer mechanism; and from the EEA, UK or Switzerland, an adequacy decision (including the EU-U.S. Data Privacy Framework where the recipient is certified) or the European Commission's Standard Contractual Clauses.

11. Data retention

We keep personal data only as long as needed for the purpose it was collected, and then delete or anonymise it. In general: account data and your content are kept while your account is active and deleted within a reasonable period after account deletion; backups are overwritten on a rolling cycle; analytics and diagnostics are kept for a limited period and then aggregated or deleted; and invoices, billing and tax records are kept as long as Turkish commercial and tax law requires. Data held by Apple, Google or third-party SDK providers is retained under their own policies, not ours.

12. Your rights and choices

Depending on where you live, you have rights over your personal data. To exercise them, email hello@tryq.io, naming the product and your request. We may ask for reasonable information to verify your identity, and we respond within the deadlines the law sets (30 days under KVKK; one month under GDPR, extendable where the law allows).

• Everyone: access a copy of your data; correct or delete it; withdraw consent at any time; change device permissions and tracking settings.
• Türkiye (KVKK Art. 11): learn whether and for what purpose your data is processed; know the third parties it is transferred to in Türkiye or abroad; request correction, deletion or destruction and notification of these to third parties; object to a result against you arising solely from automated analysis; and claim compensation for damage caused by unlawful processing. You may also complain to the Turkish Personal Data Protection Board.
• EEA, UK, Switzerland (GDPR): restrict processing; receive your data in a portable format; object to processing based on legitimate interests and always to direct marketing; and lodge a complaint with your local supervisory authority.
• United States (state privacy laws): know, access, correct and delete your personal information, and opt out of targeted advertising. We do not sell personal information, and we will not discriminate against you for exercising your rights.

13. Account deletion

Any app that lets you create an account also lets you delete it from within the app, or you can email hello@tryq.io. Upon deletion, your account, profile, uploaded content and generated content are removed within a reasonable period, except for records the law requires us to keep (such as invoices). Account deletion does not cancel App Store or Google Play subscriptions — cancel those in your store settings — and does not remove copies of shared content that others have already obtained. See Support for the step-by-step route.

14. Children

Our Services are not directed to children under 13 (or under the higher age local law sets). We do not knowingly collect personal data from children below these ages. If you believe a child has provided us personal data, contact hello@tryq.io and we will delete it. Parents and guardians are responsible for supervising minors' use of devices and applications.

15. Security

We take reasonable technical and organisational measures to protect personal data, including encryption in transit and access controls. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee absolute security. You provide data at your own risk. You are responsible for keeping your account credentials safe. If a data breach affects your personal data, we will notify the competent authorities and affected users as the law requires.

16. Disclaimers and limitation of liability

To the maximum extent permitted by applicable law, the Services and all content, features and AI-generated outputs are provided "as is" and "as available", without warranties of any kind, whether express, implied or statutory, including any implied warranties of merchantability, fitness for a particular purpose, accuracy or non-infringement.

To the maximum extent permitted by applicable law, Uğur Berk Ergün shall not be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for any loss of profits, revenue, data, goodwill or business opportunity, arising out of or in connection with your use of (or inability to use) the Services, the acts or omissions of any third-party provider or platform, content uploaded or shared by you or by other users, AI-generated outputs, unauthorised access to or alteration of your data, or any other matter relating to the Services — whether based on contract, tort, strict liability or any other legal theory, and even if advised of the possibility of such damages.

To the maximum extent permitted by applicable law, our total aggregate liability for all claims arising out of or relating to the Services or this policy shall not exceed the amount you paid us for the Services in the twelve (12) months preceding the event giving rise to the claim, or, if you paid nothing, the sum of fifty United States dollars (USD 50).

You agree, to the maximum extent permitted by applicable law, to indemnify and hold harmless Uğur Berk Ergün from and against any claims, damages, losses and expenses (including reasonable legal fees) arising from your violation of this policy, your violation of applicable law, or content you upload or share through the Services.

Nothing in this policy excludes or limits any liability that cannot be excluded or limited under mandatory applicable law, including mandatory consumer-protection and data-protection rights; in such cases our liability is limited to the minimum extent the law allows. The full disclaimers and limitations are set out in sections 14 to 16 of the Terms of Use.

17. Governing law and disputes

This policy and any dispute arising out of or in connection with it or the Services are governed by the laws of the Republic of Türkiye, without regard to conflict-of-law rules, and the courts and enforcement offices of Istanbul, Türkiye have exclusive jurisdiction — except where mandatory law grants you the right to bring proceedings in your own country. If any provision of this policy is held invalid or unenforceable, the remaining provisions remain in full force and effect.

18. Changes and contact

We may update this policy when our practices or the law change, and will revise the "Last updated" date above. For material changes we will provide notice in the app or by other reasonable means. Your continued use of the Services after an update takes effect constitutes acknowledgment of the updated policy, except where the law requires fresh consent.

Contact: Uğur Berk Ergün, Türkiye — hello@tryq.io