Privacy Policy

At a glance

• We do not collect personal information from children: no names, email addresses, photos, voice recordings or location.
• No accounts or sign-in, no ads, no third-party analytics and no tracking.
• No chat or social features: nothing your child creates is shared with other people.
• Your child's town, coins and answer history are stored only on your device.
• Only a grown-up can buy. Purchases go through Apple or Google, behind a parental gate, and we never see payment details.
• Subscription checks use only anonymous purchase data.
• We never sell personal information or use it for advertising.

1Who we are

Matobur and this website are provided by Edict Digital Bilgi Teknolojileri A.Ş. (“Edict Digital”, “we”, “us”), Istanbul, Türkiye. We are the operator of the Matobur app and the data controller for the limited information described in this policy.

This policy applies to the Matobur app on iPhone, iPad and Android devices and to this support website. You can contact us at any time at support@edict.com.tr.

2Made for children

Matobur is made for children aged 5 to 10. These protections apply to everyone who plays:

• No account, registration or sign-in.
• We don't ask children for, and don't collect, their name, email address, phone number, home address, photos, videos, voice recordings or location.
• No third-party advertising, no third-party analytics and no tracking. The app does not access the device's advertising identifier and does not track anyone across other companies' apps or websites.
• No chat, social features, online leaderboards or user-generated content shared with other people.
• No push notifications.
• The app doesn't use the camera, the microphone, contacts or location services.
• Grown-ups only: purchases, the Parent Zone (reports and settings) and every link that leaves the app are protected by a parental gate.

3Information stored only on your device

To make the game work, Matobur saves the following in the app's private storage on your device:

• Game progress: the town and its buildings, coins, stars, badges, quests, streaks, residents, friends and decorations.
• Names chosen in the game: the names your child gives their buddy and their town, and the school grade picked at the start, which is used to choose puzzles at the right level.
• Answer history for the parent reports: which questions were asked, whether each answer was right, how long it took and when each game was played.
• Settings: language, sound effects, music and vibration.
• Subscription status: the last confirmed Premium status, so that Premium keeps working offline.

This information is not sent to us, we cannot see it, and it is never shared with other people. Your device's own backup service (such as iCloud or Google backup) may include app data, depending on your device settings. Those backups are handled by Apple or Google under their own privacy policies, and we have no access to them.

Deleting it: Parent Zone → Settings → Reset progress deletes the town, coins, stars, friends and reports on that device. Your subscription is not affected, and settings such as the language are kept. Deleting the app removes all of its data from the device.

4Purchases and subscriptions

Matobur is free to play and offers an optional auto-renewing subscription, Matobur Premium. Only a grown-up can start a purchase: the Premium screen opens only after the parental gate.

Payments are handled by Apple and Google

Purchases are made with the App Store or Google Play account on the device and are processed by Apple or Google. We never receive your name, email address, payment card or billing address. Apple's and Google's privacy policies apply to your store account and payments.

Checking your subscription

To show prices, confirm purchases, unlock Premium, restore purchases on another device and keep the subscription status up to date (for example renewals, cancellations, refunds and billing problems), the app checks with Apple or Google and, where used, with our payment and subscription-management provider, RevenueCat, Inc. (United States). This happens, for example, when the app starts and when a purchase is made or restored. The information RevenueCat receives is limited to:

• a random, anonymous app user ID created by the app, which is not connected to your or your child's name or email address;
• on Apple devices, Apple's “identifier for vendor”: a random code that Apple gives the apps of one developer on a device. It is not the advertising identifier;
• the plans offered and purchased, the purchase and subscription status (such as free trial, renewal, expiry, cancellation or refund) and the store's transaction receipts or purchase tokens;
• technical details needed to answer the request: device type and model, operating-system and app version, store country, language settings and the device's IP address, which is part of any internet connection.

The app never sends RevenueCat a name, email address or other contact details, sets no customer attributes, does not access advertising identifiers and has RevenueCat's optional diagnostics switched off. RevenueCat processes this information on our behalf, as our service provider, under a data processing agreement.

We use this information only to provide and verify purchases and the Premium subscription, to prevent fraud and to meet legal obligations. It is never used for advertising, tracking or profiling, or to contact anyone. Under the U.S. Children's Online Privacy Protection Act (COPPA), these identifiers are persistent identifiers used solely to support the internal operations of the app.

5What we never collect

• Names
• Email addresses
• Phone numbers
• Home addresses
• Photos or videos
• Voice or audio
• Location (GPS)
• Contacts
• Advertising IDs
• Browsing history
• Health data
• Payment details

We don't use any information for advertising, and we don't build profiles of children.

6Sharing and international transfers

We do not sell, rent or trade personal information, and we do not share it for advertising. The only parties involved are:

• Apple and Google, which process purchases made through their stores (Apple Privacy Policy, Google Privacy Policy);
• RevenueCat, Inc., our payment and subscription-management provider, as described in section 4 (RevenueCat Privacy Policy);
• courts or authorities, if we are required by law to disclose information.

RevenueCat processes data in the United States, and Apple and Google operate worldwide. Where personal data is transferred outside Türkiye, the EU/EEA or the UK, the transfer relies on the safeguards required by law, such as the European Commission's standard contractual clauses and the transfer rules in Article 9 of the Turkish Personal Data Protection Law (KVKK).

7How long information is kept

8Your choices and rights

• See your child's information: Parent Zone → Reports shows the progress stored on the device.
• Delete it: use Parent Zone → Settings → Reset progress, or delete the app.
• Control purchases: purchases always need the parental gate. You can also block or approve purchases with Screen Time and Ask to Buy (Apple) or Google Family Link.
• Purchase records: to access or delete the anonymous purchase records held by RevenueCat, email us the order number from your App Store or Google Play receipt so that we can find them. Without it we can't tell which records are yours. Your store account itself is managed by Apple or Google.

Depending on where you live, you may also have the right to access, correct or delete your personal data, to receive a copy of it, to restrict or object to its processing and to complain to a data protection authority. Email us to use any of these rights. We answer free of charge within 30 days at the latest, and we will never treat you differently for using your rights.

9Children's privacy laws: COPPA, GDPR and KVKK

United States: COPPA

We do not knowingly collect personal information from children under 13. The only identifiers involved are the anonymous identifiers described in section 4. They are used solely to support the internal operations of the app (processing, verifying and restoring purchases), as COPPA allows without parental consent, and never to contact a child, build a profile or show ads. Parents can review the information stored on the device in the Parent Zone, delete it at any time (section 8) and contact us with any question. If you believe a child has sent us personal information, for example by email, contact us and we will delete it promptly.

European Union and United Kingdom: GDPR and the Children's Code

Matobur does not collect personal data from children and does not rely on a child's consent. Purchases are made by a parent through their own store account. We process the limited purchase data in section 4 because it is necessary to perform the subscription contract with the purchaser (GDPR Article 6(1)(b)), for our legitimate interest in running the in-app store, preventing fraud and keeping the service secure (Article 6(1)(f)) and to meet legal obligations (Article 6(1)(c)). Matobur is private by default, in line with the UK Age Appropriate Design Code: no profiling, no geolocation, no advertising and no sharing features. You can complain to your local data protection authority (in the UK, the Information Commissioner's Office).

Türkiye: KVKK

Under Law No. 6698 on the Protection of Personal Data (KVKK), the data controller is Edict Digital Bilgi Teknolojileri A.Ş. The limited purchase data described in section 4 is collected electronically through the app, for the purpose of providing and verifying subscriptions, on the legal grounds in KVKK Article 5(2)(c) (performance of a contract), (ç) (legal obligation) and (f) (legitimate interest). It is shared with Apple, Google and RevenueCat, including abroad, only for that purpose and in accordance with Articles 8 and 9.

Under Article 11 you may ask whether your personal data is processed and request information about it; learn the purpose of processing and whether it is used for that purpose; know the third parties in Türkiye or abroad to whom it is transferred; ask for it to be corrected if it is incomplete or inaccurate, or to be deleted or destroyed; ask that these actions be notified to the third parties to whom it was transferred; object to a result against you that arises exclusively from automated analysis; and claim compensation for damage caused by unlawful processing. Send requests to support@edict.com.tr; we reply free of charge within 30 days at the latest. You can also complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

10Security

Information on the device is kept in the app's private storage, protected by the operating system's app sandbox and, when a passcode is set, by device encryption. Communication with the stores and RevenueCat is encrypted (HTTPS). Access to purchase records is limited to the people who need it to support you, and we maintain reasonable administrative, technical and physical safeguards for the information we handle.

11Emails to us and this website

Emails to support. If you email us, we receive your email address and whatever you write. We use it only to answer you. Please don't include personal information about your child. Support is for grown-ups; children should ask a parent to contact us.

This website uses no cookies, no analytics and no trackers, and loads nothing from other websites. It is hosted on GitHub Pages by GitHub, Inc., which may log visitors' IP addresses for security purposes (GitHub Privacy Statement).

12Changes to this policy

If we change how Matobur handles information, we will update this page and its effective date. If a change would significantly affect children's information, we will make it clear in the app and on this page before it takes effect and, where the law requires, ask for a parent's consent.