Privacy Policy

Version 1 · Published: 11 October 2026

This Privacy Policy explains which personal data we process when you use the Riddlo mobile app ("Riddlo"), why, who we share it with, and your rights.

Riddlo is operated by İlker Doğan ("we", "us"). We are the data controller of your personal data under the Turkish Personal Data Protection Law No. 6698 ("KVKK"). Contact: support@riddlo.app

1. In short

You sign in to Riddlo with your Apple or Google account; we never hold your password.
Other users cannot see your exact location.
We do not read your messages; we review reported content only when there is a report.
Ads are not personalised; we do not track you across other apps and websites.
We do not sell your data and we do not share it with advertisers.
You can delete your account from the app at any time.

2. What data do we process?

Identity and account: your name, your email address (if Apple or Google shares it) and your Apple / Google account ID. If you signed in with Apple, we also keep the sign-in token Apple issues, so that we can remove Riddlo's connection in your Apple account when you delete your account.
Profile: your date of birth, gender, photos and bio. Location (GPS) information inside your photos is removed when they are uploaded.
Location (if you allow it): your approximate location, so we can show you people nearby. We do not track your location in the background.
Content you create and interactions in the app: the questions you choose for your gate and your answers, the gate questions you suggest, your messages (text, photos, audio), your likes, visits, blocks and when you were last active.
Safety records: reports you make and reports about you, and account closure decisions.
Consent records: which version of which legal document you accepted or read, and when.
Purchase information: your subscription type and status. Your payment details stay with Apple or Google and never reach us.
Device and technical data: your device's notification address and language so we can send notifications, the transaction ID that verifies a rewarded ad was watched, an irreversible digest (hash) of an identifier unique to your device so that closed accounts can't open new ones, and, as required by law, your IP address and the time when you open the app.

We do not access your contacts, camera or calendar, and we do not use analytics or behavioural tracking tools. We do not ask you for special categories of data such as health, religion or sexual orientation; we recommend that you do not put them in your profile or messages.

Photo, microphone (voice messages), location and notification permissions are optional and can be withdrawn at any time in your phone's settings; if you do not grant one, only the related feature will not work.

3. Why do we process it?

To provide the service (account, profile, gate and gate question suggestions, discover, likes, messaging, notifications, Premium): establishment and performance of a contract (KVKK art. 5/2-c).
Safety and moderation (reports, content that breaks the rules, preventing fake accounts and fraud, ad verification): legitimate interest (KVKK art. 5/2-f).
Legal obligations (age 18 check, access log, requests from competent authorities): legal obligation (KVKK art. 5/2-ç).
To protect our rights (consent, subscription and report records): establishment, exercise or protection of a right (KVKK art. 5/2-e).
Offer notifications (Premium offers, discounts, new features): only if you allow them in the app under Settings › Notifications › Offer notifications; your explicit consent (KVKK art. 5/1) and your approval under Law No. 6563. Not allowing them does not limit the service in any way; you can withdraw at any time in the same place. Each grant and withdrawal is recorded with its date.

We do not use your data for any other purpose, and we do not make decisions with legal effects about you through an automated system.

4. What do other users see?

Your profile (your name, age, gender, photos, bio, whether you are in the same district or city as them — no district or city name is shown — and an "online / active today" label) and your gate questions are visible. The person whose gate you try sees your score; the person you like or whose profile you visit can see this with Premium or by watching an ad. Only the person you are chatting with sees your messages. In Settings › Privacy & Safety you can turn off the "online / active today" label (Last seen) and whether you are in the same district or city (Show my location).

5. Who do we share it with?

We share your data only with the following providers that help us run the service, and only as much as necessary. These providers process your data on our behalf and with security equivalent to the protection in this policy:

Supabase (Germany): database and file storage. Account, profile and message data are kept here.
Apple and Google (USA): sign-in, notification delivery, finding your province and district from your location, store purchases; Google also serves AdMob ads.
Expo (USA): delivering notifications. Message notifications contain the sender's name and the message text and may appear on your lock screen.
RevenueCat (USA): tracking your Premium subscription status.

Because Riddlo has no servers in Türkiye, your data is transferred for these purposes to the countries where these providers are located, mainly Germany and the USA. Apart from this, we share your data with competent authorities and courts only when required by law.

Riddlo shows only optional rewarded ads. Ads are not personalised, and the app does not ask you for tracking permission. Google, which serves the ads, may process device information under its own policy to deliver ads and prevent fraud.

6. Retention and deletion

We keep your data while your account is open. When you delete your account, your profile, photos, gate, interactions and chats (including the copies on the other person's side) are deleted immediately; if you signed in with Apple, Riddlo's connection in your Apple account is removed as well. Only records we must keep by law or need to protect our rights in a possible dispute (consent, subscription, report and access records) are kept for as long as necessary and then deleted. In addition, to prevent deleting and re-creating an account to reset daily limits, an irreversible digest (hash) of your Apple/Google account identifier is kept for 24 hours and then deleted; during that time you can't sign up again with the same account. To protect people who blocked you, this digest is kept with their block for as long as their account is open; if you sign up again with the same account, they still have you blocked. For accounts closed for breaking the rules, the device identifier digest is kept for as long as the closure stands, to prevent new accounts from being opened. Gate questions you suggested are kept without any link to you when you delete your account; published ones remain available to all users.

In the app: Settings → Account → Delete account.
Without installing the app: at delete.riddlo.app, enter the email address linked to your account and confirm with the link you receive.
Deleting your account does not cancel your Premium subscription; you must also cancel it in the App Store or Google Play.

7. Security

Connections are encrypted (HTTPS); on the server side, each user can access only the data they are meant to see; message files and report attachments are kept in private storage. If a security breach affects your data, we will notify the Personal Data Protection Board and you as soon as possible.

8. Children

Riddlo is only for people aged 18 and over. If we learn that an account belongs to someone under 18, we close it and delete its data.

9. Your rights

Under KVKK art. 11, you have the right to learn whether your data is processed, to request information, to learn the purpose and the parties it is transferred to, to request correction or deletion, to object to an outcome against you resulting from automated analysis, and to claim compensation for damage.

You can apply to support@riddlo.app, stating your name and sign-in method (Apple / Google); we may ask for information to verify that the account is yours. We respond free of charge within 30 days at the latest. If you are not satisfied with our response, you can file a complaint with the Personal Data Protection Board.

10. Changes and contact

When we update this policy, the new version is shown to you when you open the app. The Turkish version of this policy is the reference version; this English text is a translation. For questions: support@riddlo.app