Privacy Policy

Effective date: October 24, 2026

1. Who is responsible

The Earmonia app (on the App Store for iPhone and iPad, and on Google Play for Android) and the earmonia.app website are developed and run by Recep Kaan Çağlar, who is the data controller under the Turkish Personal Data Protection Law (KVKK) and the General Data Protection Regulation (GDPR). For any privacy question or request: [email protected]

2. Data we collect

2.1 Data that stays on your device

The game works without an account. The following is stored on your device and does not leave it unless you connect an account:

• Your game progress: cleared obstacles, stars, gold, boat stage, materials, water in the boat, Moni's outfits, your ship decorations, your achievements and your daily streak.
• The name you enter, so that Moni can call you by name.
• Your app settings.

Deleting the app deletes this information; you can also erase it at any time with Profile › Reset progress.

2.2 If you connect an account (optional)

You can connect an account under Profile › Account: with Sign in with Apple on iPhone and iPad, and with Sign in with Google on Android (through Android's Credential Manager). Both serve the same purpose: recognizing your account and linking your progress and purchase records to it. If you do, the following is stored on our server, linked to your account:

• Account identifier: with Sign in with Apple, the user identifier Apple issues for our app; with Sign in with Google, your Google account identifier.
• Email address: the address Apple shares with us. If you choose to hide your email when signing in, this is a private relay address provided by Apple. With Sign in with Google, it is your Google account's email address. We do not ask Apple for your first or last name. Google may also include the name on your Google account and the address of your profile picture in the sign-in information; these may be kept in the account record, but we do not use them, show them in the game or share them with anyone. Your email is never shown to other players.
• Your in-game name: the name Moni calls you by (up to 40 characters). It is also shown to your friends in the Harbor (see 2.3).
• Your friend code: a 4-character code assigned to your account (for example 7K3M in Kaan#7K3M). Friends find you with this code.
• Your progress backup: a copy and summary of the game progress in 2.1 (number of stars, the voyage you have reached, and your star count at the start of the week for the weekly ranking) and the time of the last backup.
• Your Deck card: your boat stage, ship decorations, Moni's outfit, your logbook (recent islands reached, boat repairs, achievements and their dates), the badges you put on display, your badge count and your daily streak.
• Your purchase records: which product you bought, the purchase date and any refund date; on the App Store, the Apple transaction number and Apple's signed transaction information; on Google Play, the purchase token, the Google order number and Google's purchase information. Your payment and card details never reach us.

2.3 The Harbor (friends)

The Harbor is where players with an account add each other by friend code and see each other's boats and progress. You need an account to use it; there is no Harbor when playing without one.

• What others see: your name, friend code, total and weekly stars, the voyage you have reached and your Deck card (2.2). This is visible to your friends and to a captain you have a pending request with, in either direction. If someone who knows your friend code sends you a request, they can see this card even before you accept, so share your code only with people you know. Your email, account identifier, full progress backup and purchase records are never shown to anyone. The Harbor has no public list or search; only people who know your code can find you.
• Harbor records on our server: your friendships and pending requests (who, to whom, when), captains you have blocked, greetings (from whom, to whom, which day, whether gold was awarded, whether it was seen), your friend-adding attempts (only the time, for the hourly attempt limit) and reports (2.4).
• No chat: the Harbor has no messaging and no free text. The only interaction between players is a one-tap preset greeting. The only written content others can see is your in-game name.

2.4 Harbor safety: name filter, reporting and blocking

• Name filter: a word list checks names for inappropriate content, in the app as you type and on our server whenever a name changes. A name caught by the filter is hidden from others (your friends see “Sailor”), and you are asked to change it.
• Reporting: you can report a captain you have met in the Harbor with “Report” in the ⋯ menu on their Deck or on their request (inappropriate name, harassment or another reason). A report records you, the captain you reported, the reason, their name at that moment, the time and our decision. The reported captain is not told who reported them. If three different captains report the same name, it is hidden automatically until we review it.
• Review: we review open reports within 24 hours. We may hide the name, remove the captain from the Harbor (their friendships are deleted and they can no longer send requests or be found; their game and progress remain) or dismiss the report.
• Blocking: you can block a captain with “Block” in the same menu, or choose to block them while reporting. Your friendship and any requests with a blocked captain are deleted, and they can no longer send you requests or find you. Removing a friend is in the same menu.

2.5 Anonymous usage statistics

To see where players struggle and balance the game, the app sends in-game events anonymously. Examples: which obstacle was started and how it ended, stars, number of mistakes, time taken, question type, which option was chosen for a wrong answer, the island and sea reached, onboarding steps, whether microphone access was granted, a range of days since installation, the app version, the platform (iOS or Android), the distribution channel (App Store, TestFlight or Google Play) and the language. In Sing obstacles only the measured pitch is sent (for example, target 262 Hz, sung 255 Hz), never a recording.

These records contain no name, email, account, device, installation or session identifier; your account session is not sent, and IP addresses and times are not written to the statistics, only the day. The statistics therefore cannot be linked to anyone. You can turn them off at any time under Profile › Settings › Anonymous statistics; doing so also deletes any records still waiting on your device.

2.6 Technical logs

Whenever the app connects to our server, the infrastructure of our hosting provider Supabase keeps request information (such as IP address, time and the address requested) in its logs for a short period (a few days) for security and debugging. We do not combine these logs with the statistics or use them to track anyone. The app contains no separate crash or diagnostics tool (for reports shared by Apple and Google, see 10).

2.7 Contests

Weekly contests are open to players with an account; taking part is optional. The first time you join, you are told that you will appear on the leaderboard and asked to agree. There are no contests when playing without an account.

• What others see: on a contest's leaderboard, your rank, score and number of correct answers, your name and friend code, Moni's outfit, your boat and your trophy shelf. The leaderboard is visible to all players with an account; captains who have blocked each other do not see each other. Your email, account identifier and individual answers are never shown to anyone.
• Contest records on our server: your pre-registrations (which contest, when), each daily round (start and end time, score, number of correct answers, time taken, app version, the question order you were given), your answer to each question (what you chose, whether it was correct, how long it took, how many times you replayed it; in Sing questions only the measured pitch difference, never a recording), your best score and rank, and the trophies, gold and rewards you win.
• Fair play: scores are calculated on our server. Answers are checked against the question itself: an answer that does not match its question counts as wrong and is flagged, and rounds that arrive outside the allowed time or look abnormal are rejected and the reason is recorded. We may remove an entry that looks like cheating from the leaderboard.
• Contest archive: after a contest ends, we may download its records to our own computer to improve the questions and the game's difficulty. The archive contains no names, emails or account identifiers; each player appears only under a pseudonym (for example K-1A2B3C4D) computed with a secret key kept on our server. Because we can recompute this pseudonym, the archive still counts as personal data and is protected with the same care; it is never shared. Once the archive has been downloaded, individual answers may be deleted from the server; the leaderboard, rewards and summary remain.

3. Why we use data and the legal basis

• Account data is used to back up your progress, move it to another device, protect your purchases and provide the Harbor (adding friends, the Deck card, the weekly ranking, greetings). Legal basis: providing the service you asked for (KVKK art. 5/2-c, GDPR art. 6(1)(b)).
• Purchase records are also used to verify that a purchase is genuine (on the App Store with Apple's signature, on Google Play by asking the Google Play Developer API from our server) and to process refunds. Legal basis: the same.
• The name filter, report and block records and attempt limits are used to keep the Harbor safe for players, prevent abuse and review reports. Legal basis: providing the service and our legitimate interest in protecting players (KVKK art. 5/2-c and 5/2-f, GDPR art. 6(1)(b) and 6(1)(f)).
• Contest records (2.7) are used to run contests (rounds, scores, leaderboards, pre-registration, rewards), check fair play, and improve the questions and the game's difficulty. Legal basis: providing the service you chose to take part in and our legitimate interest in improving the game (KVKK art. 5/2-c and 5/2-f, GDPR art. 6(1)(b) and 6(1)(f)).
• Anonymous statistics are used only in aggregate, to improve the game's difficulty and content. Legal basis: our legitimate interest in improving the game (KVKK art. 5/2-f, GDPR art. 6(1)(f)); they cannot be linked to you and can be turned off.

Your data is never used for advertising, profiling or tracking across other apps.

4. Sharing and third parties

Your data is never sold or shared for advertising. What other players can see in the Harbor is described in 2.3, and what appears on contest leaderboards in 2.7. Only the following infrastructure is used to provide the service:

• Supabase hosts account data, Harbor and contest records and anonymous statistics on our behalf, on servers in Ireland (EU, AWS eu-west-1). Your data is therefore processed outside Türkiye; the transfer is made to provide the service and with safeguards in line with KVKK and the GDPR.
• Apple processes Sign in with Apple and App Store purchases under its own privacy policy. When you delete your account, we send Apple a request to revoke your Sign in with Apple authorization.
• Google processes Sign in with Google and Google Play purchases under its own privacy policy. To verify a purchase, our server sends its purchase token to the Google Play Developer API; Google notifies us of a refund or cancellation (through Google Cloud Pub/Sub) and the record is marked. We keep no Google sign-in token that would need to be revoked (see 9).
• Cloudflare delivers the website and our admin panel (see 11).

The app contains no third-party advertising, analytics or tracking SDKs. The Android version uses only Google's Credential Manager and Sign in with Google libraries for signing in, and the Google Play Billing Library for purchases.

5. Microphone and voice

In Sing obstacles you sing the notes you hear, and Earmonia uses the microphone to tell whether you sang the right one.

• The microphone is on only in Sing obstacles, while you are singing.
• Your voice is analyzed on your device in real time. A short audio clip is kept temporarily on the device for the analysis and deleted as soon as it is done; recordings are never sent anywhere or stored.
• If anonymous statistics are on, only the measured pitch (as numbers) is sent (see 2.5).
• You can turn off access at any time in Settings › Earmonia on iPhone and iPad, or in Settings › Apps › Earmonia › Permissions on Android.

6. Purchases

Moni's outfit sets and ship decoration sets can be bought in the app. Apple takes and processes the payment on iPhone and iPad, and Google Play on Android; your card and payment details never reach us. What you buy is tied to your account with the store you bought it from (your Apple Account or Google account) and comes back with “Restore purchases”, with or without an Earmonia account; a set bought in one store does not unlock on the other platform. If you have connected an account, your purchase records are kept as described in 2.2. Our server verifies Google Play purchases with the Google Play Developer API. Records are updated when Apple or Google notifies us of a refund.

7. Notifications

If you allow them, reminder, “boat ready” and start notifications for contests you have pre-registered for are scheduled locally on your device; no server is involved. The Harbor sends no push notifications; greetings appear when you open the Harbor. You can turn notifications off at any time in your device settings (iOS Settings, or Settings › Apps › Earmonia › Notifications on Android).

8. Retention

• Account data (2.2) and Harbor records (friendships, requests, blocks, greetings, friend-adding attempts) are kept for as long as your account exists. When you remove a friend, decline a request or withdraw one, that record is deleted immediately.
• Reports are kept after they are resolved so that repeated abuse can be recognized; a report is deleted when either the reporter or the reported captain deletes their account.
• Contest records (2.7) are kept for as long as your account exists. After a contest ends and has been archived, individual answers may be deleted from the server; the leaderboard, rewards and summary remain.
• Contest archives (2.7) are kept for as long as needed to improve the questions and the game, for at most 3 years, and then deleted.
• Server logs (2.6) are deleted automatically within a few days.
• Because anonymous statistics cannot be linked to anyone, they cannot be deleted per person; they are kept only as aggregate statistics.

9. Deleting your account

You can delete your account in the app under Profile › Account › Delete account. Your account identifier, email, in-game name, friend code, progress backup, Deck card, purchase records, all Harbor records (friendships, requests, blocks, greetings, and reports you made or that were made about you) and your contest records (pre-registrations, rounds, answers, leaderboard places, rewards) are permanently deleted from our server, and you disappear from your friends' lists and from contest leaderboards. If you took part in a contest that has been archived, your pseudonym is recorded so that it can be removed from those archives too, which happens within 30 days. On iPhone and iPad, the Sign in with Apple authorization is revoked as well. On Android, we keep no Google token that would need to be revoked, so no request is sent to Google; your account and data are deleted. If you like, you can also remove Earmonia's connection to your Google account in your Google account settings. The game on your device and the purchases tied to your store account remain, and your purchase history stays in Apple's and Google's own records. If you cannot access the app, write to [email protected] (the steps are on the Delete account page) and we will delete your account within 30 days.

10. Information provided by Apple and Google

If you get Earmonia from the App Store or TestFlight, Apple processes download and purchase information under its own privacy policy. If “Share with App Developers” is turned on, Apple may share crash reports and usage statistics with us that do not identify you. Feedback you send through TestFlight (comments and screenshots) is delivered to us.

If you get Earmonia from Google Play, Google processes download and purchase information under its own privacy policy. If you have allowed your device to share usage and diagnostics data with Google, Google may share crash and performance information that does not identify you (Android vitals) with us in the Play Console. Feedback you send through Google Play on test versions is delivered to us.

11. Website and email

earmonia.app uses no cookies or analytics, and fonts are served from the site itself. The site is delivered through Cloudflare, which may briefly process technical information such as IP addresses for security and to run the service. If you email us, we use your address and message only to reply to you.

12. Children

Earmonia is suitable for all ages; the app has no ads, no chat and no free-text messaging. Connecting an account, the Harbor and contests are optional; on contest leaderboards names are visible to all players. Children under 13 (or up to 16, depending on your country in the EU) should get a parent's permission before connecting one. Our advice to parents: have your child share their friend code only with people they know, and use a nickname rather than their full real name. If you believe a child has connected an account without permission, write to [email protected] and we will delete it.

13. Your rights

Under KVKK art. 11 and the GDPR you have the right to be informed, to access your data, to have it corrected or erased, to object to processing and to data portability. You can change your name and delete your account yourself in the app (if you can't access the app, see Delete account); for any other request, write to [email protected] and we will reply within 30 days. You also have the right to complain to the Turkish Personal Data Protection Authority or to the data protection authority of the EU country where you live.

14. Changes

When we update this policy we change its effective date and announce important changes on this page.

15. Contact

For any privacy question or request: [email protected]