Privacy Policy

Version 1.0. Last updated: 6 November 2026. This notice is provided under art. 13 of the EU General Data Protection Regulation (GDPR) and the UK GDPR, and under art. 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK).

1. Controller. Yasin Yılmaz, an individual developer publishing as "Pimi" (the "Publisher", "we"). All requests concerning personal data: privacy@pimi.com.tr. General support: support@pimi.com.tr. Our postal address is provided by e-mail on request.

2. In short. Pimi Chill Match is a single-player game for which we operate no game server. Your game data stays on your device and never reaches us; we create no accounts and track you only with your permission (Apple's App Tracking Transparency prompt, ATT); if you decline, the advertising identifier (IDFA) is not available. Personal data goes to a third party in only three cases: (a) to Apple when you make a purchase; (b) to Google when an ad is requested for rewarded ads (where consent is required, only after you consent); (c) when you e-mail us.

3. Game data that stays on your device. Your progress, gold/lives/booster balances, task and reward records, settings (sound, haptics, language, notification choices), purchase transaction identifiers and a randomly generated invite code are stored only in the app's storage on your device. We do not receive, see or process this data; it is used only so the app works on your device. Whether it is included in your device backups (iCloud or computer) depends on your iOS backup settings; Apple manages backups and we cannot access them.

4. Sign in with Apple (optional). If you use it, the anonymous user identifier Apple issues for this app is stored only in your device's Keychain. No name or e-mail is requested and the identifier is sent to no server. You can play the whole game as a guest. You can remove the link in iOS Settings > Apple ID > Sign in with Apple. Progress does not move between devices.

5. Purchases and Chill Pass. Payment, billing, refunds and subscription management are handled by Apple; we never see your card details, name or Apple ID. To unlock purchased items the app reads signed transaction information from Apple's StoreKit framework on your device and stores the transaction identifier on your device so the same transaction is never delivered twice. Legal basis: performance of the contract you entered into (GDPR art. 6(1)(b); KVKK art. 5/2-c).

6. Local notifications (optional). There are two kinds: your lives being full and a new seasonal event starting. They are scheduled on your device and not sent from a server; you can switch the permission off in iOS Settings at any time.

7. Ads (Google AdMob). The game uses Google's Google Mobile Ads SDK for optional rewarded ads. An ad is shown on screen only when you tap an ad button; however, so that it is ready, it is loaded in the background when the app opens (after you have consented, where consent is required) and after every ad, which sends an ad request to Google. If you never watch ads the game is fully playable without them. The app shows Apple's tracking permission prompt (ATT) when it first runs ads. If you allow it, Google may use the advertising identifier (IDFA) and related signals to serve personalised ads and measure ads, combined with data from other companies' apps and websites, under Google's own privacy policy. If you decline (or later withdraw it under Settings > Privacy & Security > Tracking), ads are requested as non-personalised, the advertising identifier is zero and Google's Publisher First-Party ID is disabled. When an ad is requested, Google, acting as an independent controller under its own privacy policy for this data, may process: approximate location derived from your IP address; device and app identifiers; data about ads you were shown and your interactions with them; and crash and performance diagnostics. The purposes are serving and measuring ads, preventing fraud and improving the SDK. This data is not passed on to us. The advertising identifier (IDFA) can only be used if you gave the ATT permission. Google's consent form (UMP) is shown before the first ad request in regions where the law requires it (European Economic Area, United Kingdom, Switzerland) and in other regions where Google shows the form; if you do not consent, no ad is requested and the ad rewards are unavailable, while the rest of the game is unaffected. You can change or withdraw your choice at any time under Settings > Legal > "Ad privacy options". Google may process the data outside Turkey and the EU/UK (for example in the United States) and applies the safeguards described in its own policy: https://policies.google.com/privacy.

8. Support correspondence. If you write to support@pimi.com.tr or privacy@pimi.com.tr we process your e-mail address, message and attachments to answer and resolve your request (legitimate interest; GDPR art. 6(1)(f), KVKK art. 5/2-f). Correspondence is kept for at most 12 months after the request is closed; deletion is done manually. Our e-mail infrastructure is Google Workspace (Google acts as a processor on our behalf).

9. Website. chillmatch.pimi.com.tr is hosted on Vercel Inc.'s infrastructure. When you view a page, server log data such as your IP address, browser information and the time of the request may be processed by Vercel for security and operation. The site uses no cookies, analytics or advertising tools.

10. Recipients and international transfers. Apple (purchases), Google (ads and e-mail), Vercel (website). We do not sell your data and do not share it for marketing. Google and Vercel may process data outside Turkey and the EU/UK (for example in the United States); such transfers are subject to KVKK art. 9 and GDPR chapter V and rely on the safeguards offered by the respective provider (Google: https://policies.google.com/privacy; Vercel: https://vercel.com/legal/privacy-policy).

11. Retention and deletion. Game data stays on your device until you delete the app or tap "Delete everything" in Settings; this cannot be undone and also removes purchased boosters. Because we cannot access data on your device, you perform that deletion yourself. To have e-mail correspondence deleted, write to privacy@pimi.com.tr.

12. Your rights. Under the GDPR you have the rights of access, rectification, erasure, restriction of processing, data portability and objection, and you may withdraw consent at any time (withdrawal does not affect the lawfulness of earlier processing). Under KVKK art. 11 you may ask whether your data is processed, request information, learn the purpose and the third parties to whom data is transferred in Turkey or abroad, request correction or deletion, object to adverse results of exclusively automated analysis, and claim compensation for unlawful processing. Send your request in writing to privacy@pimi.com.tr; we may ask for the minimum information needed to verify your identity. We answer free of charge within 30 days at the latest (a fee set by the Turkish Board may apply if the request causes extra cost). If you are not satisfied you may complain to the Turkish Personal Data Protection Board (kvkk.gov.tr) or to the data protection authority of your EU/UK country of residence.

13. Automated decisions. We make no automated decisions or profiling that produce legal effects concerning you.

14. Children. The game is not directed at children and we do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child e-mailed us, write to privacy@pimi.com.tr and we will delete the correspondence.

15. Changes and language. This text may be updated; important changes are announced in the app and on this page and published with the new version date. If the Turkish and English versions differ, the Turkish version prevails for users resident in Turkey.