Mobile Apps Privacy Policy

CerebrAI-VortX respects the privacy of its users. This Privacy Policy explains how your information is collected, used, disclosed, and safeguarded when you use any mobile application published by CerebrAI-VortX on the Google Play Store, Apple App Store, or other distribution platforms (collectively, the "Apps").

This single policy applies to all mobile games and applications published by CerebrAI-VortX. Specific Apps may use a subset of the third-party services listed below; the full set is disclosed here for transparency.

If you do not agree with this Privacy Policy, please do not install or use our Apps.

1.1 Personal Information

We do not directly collect personally identifiable information (such as name, email address, or phone number) from users of our Apps. The Apps do not require account registration.

1.2 Non-Personal Information

• •Device type and model
• •Operating system version
• •App usage statistics and interactions
• •Crash logs and diagnostic information
• •Game progress and level completion data (stored locally on your device)

1.3 Information Collected by Third-Party Services

Google AdMob (Advertising)

• •Device identifiers (Android Advertising ID / Apple IDFA)
• •IP address (used to estimate general location)
• •Ad interaction data (clicks, views, watch time)
• •Diagnostic and performance information

Google's privacy policy: https://policies.google.com/privacy

Google Firebase Analytics & Crashlytics

• •App usage data (session duration, screen views, in-app events)
• •Device information (model, OS version, screen size, language)
• •General location (country/region based on IP address)
• •Crash reports and performance metrics
• •In-app purchase events (product identifier, price, and currency of completed purchases — we never receive your payment card or billing details)

Firebase privacy: https://firebase.google.com/support/privacy

OneSignal (Push Notifications)

• •Device push tokens and identifiers
• •IP address (for general location and timezone)
• •Notification interaction data (delivery, opens)
• •Device information (OS version, app version, language)

OneSignal privacy policy: https://onesignal.com/privacy_policy

We use the collected information to:

• •Display advertisements via Google AdMob
• •Send push notifications about app updates and reminders via OneSignal (where supported)
• •Analyze app usage and performance via Firebase Analytics
• •Process in-app purchases via Google Play's billing system and analyze aggregate purchase data
• •Diagnose crashes, bugs, and technical issues
• •Improve user experience and develop new features
• •Prevent fraud and ensure security

We do not sell your personal information to any third party.

In-App Purchases

All purchases are processed by Google Play. We do not collect, store, or have access to your payment information (credit card numbers, billing address, etc.). Purchase completion events are logged to Firebase Analytics for revenue analytics.

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is CerebrAI VortX Nöroteknoloji ve Yazılım Sistemleri Ltd. Şti..

Categories of Data Processed

• •Device data: model, OS version, language setting, advertising ID
• •Location: approximate country/region from IP address (no precise location)
• •Usage data: session duration, screen views, event triggers, crash logs
• •Purchase data: in-app purchase events (product, price, currency) — no payment instrument details

Purposes of Processing

• •Ad delivery and performance measurement (AdMob)
• •App analytics and crash tracking (Firebase)
• •Push notification delivery (OneSignal, where supported)
• •Improving user experience
• •Compliance with legal obligations

Legal Bases (KVKK Art. 5)

• •Explicit consent (Art. 5/1): for personalized ads and analytics — obtained via in-app consent flow.
• •Contractual necessity (Art. 5/2-c): technical data required to operate the App.
• •Legitimate interest (Art. 5/2-f): security, fraud prevention, aggregated (anonymized) reporting.

Cross-Border Transfers

Your data may be transferred to data processors located abroad, including Google LLC (USA) and OneSignal Inc. (USA). Transfers comply with KVKK Art. 9 using appropriate safeguards and contractual guarantees (Standard Contractual Clauses).

Your Rights under KVKK Art. 11

• •Learn whether your personal data is being processed
• •Be informed about the purpose and proper use
• •Know third parties to whom data is transferred (domestically or abroad)
• •Request correction of incomplete or incorrect data
• •Request deletion or destruction within legal limits
• •Request notification of correction/deletion to third parties
• •Object to results derived solely from automated analysis
• •Claim compensation for damages caused by unlawful processing

Submit requests to info@cerebrai-vortx.com. We respond within 30 days.

If you are located in the EEA, UK, or Switzerland, we process data under:

• •Consent (Art. 6(1)(a)): for personalized ads and analytics, obtained via Google's User Messaging Platform (UMP).
• •Legitimate interest (Art. 6(1)(f)): fraud prevention, security, performance monitoring, aggregated analytics.
• •Legal obligation (Art. 6(1)(c)): when required by law.

Your GDPR Rights

• •Access — request information about data we hold about you
• •Rectification — correct inaccurate data
• •Erasure — delete your data, subject to legal obligations
• •Restriction — limit processing
• •Portability — receive data in a structured, common format
• •Object — object to processing based on legitimate interest
• •Withdraw consent — at any time via in-app Settings → Privacy Settings, or by email

Exercise these rights by emailing info@cerebrai-vortx.com. We respond within 30 days.

When you first open one of our Apps from a location within the EEA, UK, or Switzerland, you are presented with a consent dialog powered by Google's User Messaging Platform (UMP) SDK. You can:

• •Consent to the use of your data for personalized advertising and analytics
• •Manage options to selectively consent to specific purposes and partners

Change or withdraw consent at any time via Settings → Privacy Settings within the App. Withdrawing consent disables personalized ads; non-personalized ads may still be shown.

If you are a resident of California, Virginia, Colorado, Connecticut, or another US state with applicable privacy law, you may have rights to:

• •Know what categories of data are collected
• •Request deletion of your data
• •Opt out of "sale" or "sharing" of personal information
• •Non-discrimination for exercising these rights

We do not sell your personal information within the meaning of CCPA/CPRA. To exercise your rights, contact info@cerebrai-vortx.com.

We use Google AdMob to display banner, interstitial, and rewarded video ads. AdMob may use the Android Advertising ID / Apple IDFA to serve personalized ads.

You can opt out of personalized ads by:

• •In-App (EEA/UK/Switzerland): Settings → Privacy Settings
• •Android: Settings → Google → Ads → Delete Advertising ID
• •iOS: Settings → Privacy & Security → Tracking → Disable "Allow Apps to Request to Track"

More info: https://policies.google.com/technologies/ads

For Apps that support push notifications, we use OneSignal. To opt out:

• •Android: Settings → Apps → [App Name] → Notifications → Disable
• •iOS: Settings → Notifications → [App Name] → Disable

We retain non-personal data only as long as necessary for the purposes described above. Third-party services retain data per their own policies — refer to their privacy policies linked in this document.

All data collected by third-party services is encrypted in transit using TLS. We apply appropriate technical and organizational measures to protect data against unauthorized access, alteration, disclosure, or destruction. No system is 100% secure; we cannot guarantee absolute security.

Your data may be transferred to and processed in countries outside your region — including the United States, where Google LLC and OneSignal Inc. operate — and Türkiye, where our company is established. These transfers comply with applicable data protection laws (GDPR Art. 44–49, KVKK Art. 9) using safeguards such as Standard Contractual Clauses (SCCs).

We do not sell or trade your personal information. Service-related data is shared with our processors:

• •Google LLC (AdMob, Firebase) — advertising, analytics, crash reporting
• •OneSignal Inc. — push notification delivery and analytics

These processors are contractually bound to use the data only for the purposes we specify.

Our Apps are intended for users aged 13 and older (16 in some EEA jurisdictions). We do not knowingly collect personal information from children under this age. If you believe a child has provided personal information, contact us and we will remove it.

Apps that participate in Google Play's "Teacher Approved" or "Designed for Families" programs follow stricter data practices in compliance with COPPA, GDPR-K, and Google Play Families Policy.

Our Apps may contain links to third-party websites or services. We are not responsible for their privacy practices. Review their policies before providing any data:

• •Google AdMob: https://policies.google.com/privacy
• •Google Firebase: https://firebase.google.com/support/privacy
• •OneSignal: https://onesignal.com/privacy_policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. Material changes will be communicated via in-app notice or update notes. Continued use of the Apps after changes signifies acceptance.