Doku Labs games — Privacy Policy

Last updated: 12 October 2026 · Version games-2026-10-12 · Turkish version

Who we are

This policy covers the games listed below, published by DOKU YAPAY ZEKA YAZILIM TEKNOLOJİ LİMİTED ŞİRKETİ (“Doku Labs”, “we”), Caferağa Mah. Şifa Sk. No: 19, 34710 Kadıköy/İstanbul, Türkiye. We are the data controller for the personal data described here under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for users in the EU and UK, the GDPR.

In short

• The games have no accounts. We do not ask for your name, email, phone number, contacts, photos or precise location.
• Your progress, scores and settings are stored on your device. Deleting a game deletes them from the device.
• The third-party services listed below receive limited device data so the games can show ads, measure use and report crashes. Each game uses only the services marked for it in the table. We do not sell your personal data.

If you are signed in to iCloud, Cargo Bloom: Train Puzzle also keeps a copy of your progress and purchases in your own iCloud account, so it comes back on a new device. It uses Apple’s iCloud storage; we cannot see or reach that copy. You can turn it off in iOS Settings under your name → iCloud.

Third-party services in the games

These providers process the data on their own systems as independent controllers or as our processors, under their own privacy policies.

Google AdMob (Google LLC / Google Ireland Ltd.)

Purpose: Shows the ads that keep the game free (banner, full-screen and optional rewarded ads).
Data: Advertising identifier (IDFA, only if you allow tracking), device and app information, IP address, coarse location derived from it, and ad interactions.
Privacy policy ↗

Google Analytics for Firebase (Google LLC)

Purpose: Counts how the game is played (for example games started, levels reached, ads watched, items bought) so we can improve it.
Data: Game events (and, if you buy something in the game, which item and its price; never your payment details), an app-instance identifier, the advertising identifier (IDFA, only if you allow tracking), device model, OS version, country and approximate region.
Privacy policy ↗

Firebase Crashlytics (Google LLC)

Purpose: Sends a report when the app crashes, so we can fix the cause.
Data: Crash trace, device model, OS version, app version and an installation identifier.
Privacy policy ↗

Tenjin (Tenjin, Inc.)

Purpose: Measures which of our marketing campaigns brought an install and how much ad revenue the game earns.
Data: Advertising identifier (IDFA, only if you allow tracking), vendor identifier (IDFV), IP address, country, install and in-app event data, ad revenue data.
Privacy policy ↗

Which game uses which service

How the data is collected

Personal data is collected automatically, by electronic means, through the third-party software development kits (SDKs) built into each game, while you use it. We do not collect data through forms, and we do not buy data about you from others.

Categories of personal data

• Device and transaction security: IP address, device model, operating system, app version, vendor and installation identifiers, crash logs.
• Usage: in-app events such as games started, levels reached and ads watched.
• Marketing: the advertising identifier (only if you allow tracking), campaign and install-source data, ad impressions and ad revenue.
• Approximate location: country or region derived from the IP address. The games never ask for or use precise (GPS) location.

We do not process special categories of personal data (such as health, biometric or religious data) in these games.

Who receives the data

• The service providers listed above, for the purposes stated next to each.
• Public authorities and courts, when a law or a binding order requires it.
• Our legal, tax and technical advisers, under confidentiality, where needed to establish, exercise or defend legal claims.
• A buyer or successor, if Doku Labs or a game is merged, acquired or transferred; this policy keeps applying to data collected under it.

Apple processes the download, App Store account and any purchase data under Apple’s own privacy policy; we do not receive your Apple Account identity.

Tracking and your choices

On first launch each game shows its own screen, separate from accepting the Terms of Use, asking whether you consent to analytics, attribution and personalised ads. Firebase Analytics, Tenjin and personalised ads start only if you choose Allow. If you choose Don’t allow, the game works the same, the iOS tracking prompt is not shown, and ads are requested as non-personalised.

Only if you allow does iOS then ask, through Apple’s App Tracking Transparency prompt, whether the game may use the advertising identifier (IDFA). You can change either answer at any time: in each game under main menu → Privacy, and in iOS Settings → Privacy & Security → Tracking. Withdrawing consent stops future processing; it does not affect processing before it.

In the European Economic Area, the United Kingdom and Switzerland, Cargo Bloom: Train Puzzle also shows Google’s own consent message, after our consent screen and before the iOS tracking prompt. Google requires it there for personalised ads: it records your choices for Google and its advertising partners under the IAB Transparency and Consent Framework, and ads are requested only after you have answered. You can change these choices in the game’s Privacy settings under “Ad privacy choices”. Outside these regions the message is not shown.

Why we process data (legal bases)

• Providing the games and keeping them free with non-personalised ads: performance of the service you request (KVKK art. 5(2)(c); GDPR art. 6(1)(b))
• Crash reports, security and fraud prevention: our legitimate interest in working and safe games, which does not override your rights (KVKK art. 5(2)(f); GDPR art. 6(1)(f))
• Usage analytics, campaign attribution, personalised advertising and the transfers abroad they involve: your explicit consent given in the game, withdrawable at any time (KVKK art. 5(1) and art. 9; GDPR art. 6(1)(a)); the advertising identifier additionally needs your permission in the iOS tracking prompt

Transfers outside Türkiye

The providers above run their services on servers outside Türkiye, including in the European Union and the United States, so the data they receive is transferred abroad. Each provider’s privacy policy explains the safeguards it uses for such transfers.

How long data is kept

We do not run our own servers for these games and keep no copy of your data. Providers keep data according to their own policies and the retention settings of our accounts with them. Data stored on your device stays there until you delete the app.

Security

We do not keep app data on our own servers. Access to the provider dashboards we use is limited to authorised people. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; if a breach affecting your data occurs, we will make the notifications the law requires.

Ads and third-party links

Ads shown in the games are provided by third parties. If you tap an ad or a link to another app or website, that party’s own privacy policy applies, and we are not responsible for its content or practices.

Children

The games are not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided personal data, contact us and we will help remove it.

Your rights

Under KVKK article 11 (and, where it applies, the GDPR) you may ask whether we process your personal data and request information about it; learn the purpose and whether it is used accordingly; know the third parties it is transferred to in Türkiye or abroad; ask for correction, deletion or anonymisation and for those to be notified to recipients; object to a result that arises against you solely from automated analysis; and claim compensation for damage caused by unlawful processing.

Send your request to [email protected] or in writing to the address above. We answer free of charge within 30 days at the latest. Because the games have no accounts, we usually cannot identify you from our side; resetting the advertising identifier, refusing tracking or deleting the app removes the link between you and this data. You may also complain to the Turkish Personal Data Protection Authority (KVKK) or, in the EU/UK, to your local supervisory authority. To protect your data, we may ask for information that lets us confirm the request comes from you. A request that requires an additional cost may be charged according to the tariff set by the Personal Data Protection Board.

Users in the EU and UK

Under the GDPR you also have the right to restrict processing, to data portability, to object to processing based on our legitimate interest, and to withdraw consent at any time without affecting earlier processing. You can complain to the supervisory authority where you live or work.

Users in the United States

We do not sell personal data for money. If you allow tracking, the advertising identifier may be used for cross-context behavioural advertising, which some state laws call “sharing”; refusing tracking in the prompt or in iOS Settings opts you out. We do not knowingly sell or share data of anyone under 16. The app does not respond to browser “Do Not Track” signals, since it is not a browser.

Language

This policy is published in Turkish and English. If the versions differ, the Turkish version prevails.

Terms of use

Use of the games is also governed by our Terms of Use and Apple’s Standard End User License Agreement.

Changes

If this policy changes, we update this page and its date.

Contact

DOKU YAPAY ZEKA YAZILIM TEKNOLOJİ LİMİTED ŞİRKETİ, Caferağa Mah. Şifa Sk. No: 19, 34710 Kadıköy/İstanbul, Türkiye · [email protected]