**Privacy Policy** _Last updated: July 2026_ This policy applies to the xibalbasoftware.com website and to the mobile apps, games, and web services published under the name Xibalba Software. The data controller is Haldun Akkoyunlu, a natural person resident in Turkey; Xibalba Software is the trade name he uses. Because this is a one-person studio, when we say "we" here, we mean a single person. The text was not written to one country's laws alone, but to the shared highest standard of the rules that apply in the countries the products reach. Not all of these protections may be mandatory in your country; we still act the same way. The original of this text is Turkish. Translations into other languages are for information only; in case of conflict, the Turkish text prevails. **1. Contact** Haldun Akkoyunlu (Xibalba Software)
Email: info@xibalbasoftware.com
Web: https://www.xibalbasoftware.com All privacy-related requests come to this address. We usually reply within a few days; we never exceed the one-month upper limit provided by law. **2. What this policy covers** xibalbasoftware.com
Mobile apps and games: TerfiNET, Baby Grow Sense, WordWright, Husky Rush, Block Grid X, Medieval Tides: Orya WarsCorrespondence: support emails, the contact form, and the newsletter What is out of scope: tools used only inside the studio that are not sold or made public. Also, if a product has a separate privacy notice published on its store page, that notice takes precedence for that product.Usage and progress: number of questions you solved, your repetition intervals, level, score, achievements, app settingsDevice information: device model, operating system version, language and region, app version, app instance identifierDiagnostics: crash logs and performance metricsAnalytics: aggregated statistics such as which screens were opened and which features were usedPurchases: transaction information and subscription status from the store and subscription infrastructure — we never see your card numberAdvertising identifiers: GAID or IDFA on products that show adsIP address, browser information, cookies and similar technologies
Correspondence: what you send through the contact form or by direct emailNewsletter: if you subscribe, your email address, language preference, and subscription dateBaby information entered by a parent: only in Baby Grow Sense — date of birth, sex, height and weight measurements, notes, and photos We do not ask for any of the following in any product: a national ID number or equivalent official identity number, card details, continuous location tracking, your contacts, or microphone or camera recording.To create, verify, and protect your accountTo process purchases and subscriptions, and to restore your entitlements when you change devicesTo find bugs, fix crashes, and measure performanceTo show ads in the free versionTo respond to support requestsTo send the newsletter if you asked for itTo prevent fraud, abuse, and cheating attemptsTo meet legal obligations We do not sell your personal data. We do not transfer data to advertising networks for money. **6. Legal bases** Where GDPR and UK GDPR apply, our bases are:Performance of a contract — your account working, your purchases, your game progressConsent — newsletter, personalised advertising, and non-essential cookies; you can withdraw consent at any timeLegitimate interest — security, debugging, basic analytics, and preventing abuseLegal obligation — tax, accounting, and official requests Under KVKK, processing is based on the establishment and performance of a contract, legal obligation, and legitimate interest under Article 5, and on explicit consent in cases outside those. If another country's law requires a different basis or additional notice, that rule applies for users in that country.Block Grid X, Pic Grid mode — the photo you choose is processed on the phone and turned into a puzzle; it is never uploaded to any server. -Google Firebase — authentication, database, file storage, analytics, crash reporting, notifications, remote configuration, and hostingGoogle AdMob and Google AdSense — advertisingRevenueCat — management of subscription and in-app purchase entitlementsApp stores — Google Play, Apple App Store, Samsung Galaxy Store; they collect the paymentEmail infrastructure — verification, support, and newsletter deliveryYouTube — embedded video in restricted mode in Baby Grow Sense Apart from these, we do not sell, rent, or share your data for marketing purposes. Information is provided to competent authorities only when required by applicable law and only to the extent necessary.Purchase records: for the period required by tax and accounting law (as a rule, ten years in Turkey)Crash and diagnostic logs: at most ninety daysAnalytics: in aggregated form, at most fourteen monthsSupport correspondence: at most two years after the request is closedNewsletter: until you unsubscribe; after that, only the minimum record needed to stop sending to you again is kept When the period ends, data is deleted or irreversibly anonymised.Have incorrect or incomplete data correctedRequest deletionRequest restriction of processingObject to processingReceive your data in a portable formatWithdraw consent you gaveObject to a decision made solely by automated means Additional details by region:European Economic Area and United Kingdom — all rights under GDPR and UK GDPR; the right to lodge a complaint with the data protection authority in your country. -info@xibalbasoftware.com
https://www.xibalbasoftware.com