Privacy Policy
What we collect, why we collect it, how long we keep it and how you can have it deleted.
Last updated: September 19, 2026
Summary
Özet
- We collect only the data needed to run the game (account info, gameplay progress, and device identifiers for analytics).
- We do not sell your personal data to anyone.
- Ads are shown through Google AdMob and are limited to the G (General audiences) content rating; personalized advertising is served only with your consent.
- You can delete your account and all associated data at any time from the in-app profile settings.
- We take children's privacy seriously and comply with COPPA and GDPR.
1. Who We Are
1. Biz Kimiz
Modest Chibi is a mobile dress-up and mini-game application. This Privacy Policy explains how we collect, use, and protect your information when you use our app.
Modest Chibi is a general-audience app. Its declared target audience on Google Play is 13 and older, and its App Store age rating is 13+.
2. Information We Collect
2. Topladığımız Bilgiler
A. Information You Provide
A. Sizin Sağladığınız Bilgiler
| Data | When |
|---|---|
| Email address | When you sign up with email, Google, or Apple |
| Nickname (3-20 characters) | When you set your in-game display name |
| Profile selections | When you choose an avatar or profile frame |
B. Information Collected Automatically
B. Otomatik Olarak Toplanan Bilgiler
| Data | Purpose |
|---|---|
| Gameplay statistics (play time, items owned, currency balance, missions completed) | Game progress and synchronization |
| Device identifiers and app usage data | Analytics and crash reporting |
| Push notification tokens | Sending game notifications |
| Ad interaction data (impressions, clicks) | Ad serving and analytics |
| Purchase records (product ID, transaction ID) | In-app purchase validation |
| Country code only (derived from your device language settings) | Display a country flag emoji next to your name on weekly Bubble Pop leaderboards |
3. How We Use Your Information
3. Bilgilerinizi Nasıl Kullanıyoruz
- To operate and maintain the game (saving progress, syncing across devices)
- To enable social features (house visits, gifts, guest notes between players)
- To authenticate your account and prevent unauthorized access
- To process in-app purchases and validate transactions
- To display advertisements
- To analyze app usage and improve the game experience
- To send push notifications about game events
- To detect and fix crashes and bugs
4. Third-Party Services
4. Üçüncü Taraf Hizmetleri
We use the following third-party services that may collect data according to their own privacy policies:
| Service | Purpose | Data Collected |
|---|---|---|
| Firebase Authentication | Account management | Email, user ID, auth provider |
| Cloud Firestore | Game data storage & sync | Gameplay data, profile, economy |
| Firebase Analytics | Usage analytics | App interactions, device info, session data |
| Firebase Crashlytics | Crash reporting | Stack traces, device model, OS version |
| Firebase Cloud Messaging | Push notifications | Device token, platform, app version |
| Google AdMob | Advertising | IP address, ad interactions, device identifiers |
| Google Sign-In | Authentication | Email, Google account ID |
| Sign in with Apple | Authentication | Email (may be private relay), Apple user ID |
| Google Play / App Store | In-app purchases | Transaction data, purchase receipts |
For more information, please refer to Google's Privacy Policy and Apple's Privacy Policy.
5. Advertising
5. Reklamlar
We show ads through Google AdMob to support the free-to-play experience. The only ad type currently shown is:
- Rewarded ads — Ads you choose to watch to earn an in-game reward
We do not ask for your age, so we do not operate a per-user child-identification mechanism. Instead we constrain advertising at the source: all ad content is capped at the G (General audiences) rating — the strictest tier available — and sensitive categories such as gambling are blocked for every user.
Personalized (interest-based) advertising is served only where you have given consent through the Google UMP consent form. Without consent, ads are non-personalized and contextual only.
For details on how Google uses the information it collects from apps that use its services, see How Google uses information from sites or apps that use our services.
You may remove all ads permanently through an in-app purchase.
6. Social Features
6. Sosyal Özellikler
Modest Chibi includes optional social features that allow players to interact:
- House visits — View other players' decorated rooms
- Gifts — Send and receive virtual gifts between players
- Guest notes — Leave short notes on other players' guest walls
- Weekly leaderboards (Bubble Pop) — When you play the Bubble Pop mini-game and submit a score, your nickname, avatar, score, and country flag (derived from your device language setting) are visible to other players on weekly and all-time leaderboards. If you do not wish to appear on leaderboards, simply do not submit a score.
Social interactions are limited. There is no open chat, messaging or voice communication, and nicknames pass through a profanity filter.
7. Children's Privacy
7. Çocuk Gizliliği
We take the privacy of children very seriously.
COPPA Compliance (United States)
COPPA Uyumluluğu (Amerika Birleşik Devletleri)
We comply with the Children's Online Privacy Protection Act (COPPA). For users under 13:
- We do not knowingly collect personal information beyond what is necessary to operate the game.
- All ad content is capped at the G (General audiences) rating, for every user.
- We do not knowingly use behavioral advertising or tracking for child users.
- The app can be used with anonymous accounts that require no personal information.
- Nicknames are filtered through a profanity filter containing 80+ blocked words.
GDPR Compliance (European Union)
GDPR Uyumluluğu (Avrupa Birliği)
For users in the European Economic Area (EEA), we process data in compliance with the General Data Protection Regulation (GDPR). The lawful basis for processing is:
- Contract performance — for operating the game and providing the service
- Legitimate interests — for analytics, crash reporting, and security
- Consent — for personalized advertising (where applicable, via UMP consent form)
KVKK Compliance (Turkey)
KVKK Uyumluluğu (Türkiye)
For users in Turkey, we comply with the Personal Data Protection Law (KVKK, Law No. 6698). You have the right to request information about your data, its correction, or its deletion by contacting us.
Parental Rights
Ebeveyn Hakları
Parents and guardians have the right to:
- Review the personal information collected from their child
- Request deletion of their child's data
- Refuse further collection or use of their child's information
To exercise these rights, please contact us at the email address below.
8. Data Security
8. Veri Güvenliği
We take appropriate measures to protect your information:
- All data transmitted between the app and our servers is encrypted using TLS (Transport Layer Security).
- Data stored in Firebase is encrypted at rest.
- Database access is controlled by security rules that restrict users to their own data.
- Sensitive operations (account deletion, account linking) require re-authentication.
- In-app purchases are validated server-side through secure Cloud Functions.
9. Data Retention and Deletion
9. Veri Saklama ve Silme
Retention
Saklama
| Data Type | Retention Period |
|---|---|
| Guest (anonymous) accounts | 90 days of inactivity, then a 30-day grace period before permanent deletion. Accounts with a decorated house or any purchase are never deleted for inactivity. |
| Registered accounts (email / Google / Apple) | Kept while the account is in use. Not deleted for inactivity — only when you ask us to delete it. |
| Analytics events | Up to 14 months (Firebase default) |
| Crash reports | 90 days |
| Push notification tokens | Until device unregisters or account deletion |
Account Deletion
Hesap Silme
You can delete your account at any time from the profile settings within the app. Deletion is not immediate: it runs on a 14-day grace period, so an accidental deletion can be undone.
- During the 14 days, your account is marked for deletion but nothing is destroyed. If you sign in again during this period, the deletion is cancelled automatically and your account continues as normal. You can also contact us to restore it.
- After 14 days, all personal data (profile, gameplay progress, owned items, currency, messages) is permanently deleted from our servers and your authentication account is deleted. This cannot be undone.
- Purchase records are anonymised rather than deleted: the identifiers linking them to you are removed, while transaction details are kept for accounting and app-store reconciliation as required by law.
- Support messages you sent us are anonymised the same way: your name and the message text are removed; only non-personal details (category, app version, date) are kept.
- Push notification tokens associated with your account are removed.
- Aggregated analytics data (not personally identifiable) may be retained.
- Drawings and mini-game progress saved on your device are not affected — they stay on your device and are removed if you uninstall the app.
10. International Data Transfers
10. Uluslararası Veri Transferleri
Your data is processed and stored on Google's Firebase servers, which may be located in the United States and other countries. By using the app, you acknowledge that your information may be transferred to and processed in countries with different data protection laws than your own.
For EU users, these transfers are covered by Google's Standard Contractual Clauses and Data Processing Terms.
11. Your Rights
11. Haklarınız
Depending on your location, you may have the following rights regarding your personal data:
- Access — Request a copy of the data we hold about you
- Correction — Request correction of inaccurate data
- Deletion — Request deletion of your data (available in-app)
- Data portability — Request your data in a machine-readable format
- Objection — Object to certain types of data processing
- Withdraw consent — Withdraw previously given consent at any time
To exercise any of these rights, please contact us using the information below.
12. In-App Purchases
12. Uygulama İçi Satın Almalar
Modest Chibi offers optional in-app purchases for virtual currency and items. All payments are processed entirely by Apple (App Store) or Google (Play Store). We do not collect or store any payment information such as credit card numbers or billing addresses.
Purchase receipts are validated server-side to prevent fraud, but no financial data is retained beyond the transaction identifier.
13. Changes to This Policy
13. Bu Politikadaki Değişiklikler
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after changes constitutes acceptance of the updated policy.
14. Contact Us
14. İletişim
If you have any questions about this Privacy Policy, your data, or wish to exercise any of your rights, please contact us:
Modest Chibi