ExistencePrivacy Policy
In short
- Existence has no accounts. We don't ask for your name, email, phone number, or location.
- The app creates a random device ID on your phone. Your save backup and diamond balance are stored on our server under that ID.
- If you report a bug, we receive what you wrote, your game state, and a screenshot of the game screen.
- If you allow notifications, your notification token is stored.
- The game shows ads: rewarded ads open only from a button you press, and at certain moments (a new stage of life, a new life, release from prison) an interstitial ad also appears. Tenjin and Firebase Analytics measure which ad an install came from, and crash reports go through Firebase Crashlytics (all three are in the table below); apart from these we use no analytics services. We don't sell your data, and we don't track you across other apps or websites.
- For ads, your phone's advertising ID is shared with Google (AdMob): Who we share data with.
- At the post office and in the Magazine, your character's first name, gender, age, city and country are visible to other players; you can turn this off with the "Visible to the world" switch at the post office: Data we collect.
- The game is for adults 18 and older: Children.
- You can ask us to delete your data from Settings, and we'll process your request within 30 days: see Deleting your data.
1. Scope
This policy covers Existence: Life Simulator (released in Turkish as Varoluş: Hayat Simülasyonu, Android package name dev.zippex.varolus) and the oyun.zippex.dev server the game connects to. The game is distributed through Google Play and the App Store; both stores and the service providers named below have their own privacy policies. Some features work on only one platform; which data is collected on which phone is spelled out row by row below.
Which laws apply: the Turkish Personal Data Protection Law No. 6698 (KVKK) in Türkiye, and the General Data Protection Regulation (GDPR) in the European Union and the European Economic Area. If you live elsewhere, your country's data protection rules may also apply.
2. Data controller
The data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR) is:
- Name
- YESEY Kurumsal Hizmetler
- Address
- Şenlikköy Mah. Yeşilköy Halkalı Cad. No: 93/2 Bakırköy / İstanbul
- info@yesey.com.tr
"We" and "us" in this policy mean the data controller.
3. How we recognize you
There are no accounts, logins, or passwords in the game. The first time you open the app, it creates a random device ID on your phone along with a matching secret token. Our server recognizes you by these two. The token stops anyone who guesses your ID from writing to your save.
This ID doesn't contain your name or your phone's hardware identifiers. It is still an online identifier that can be linked to you, so it counts as personal data, and this policy treats it that way.
If you uninstall and reinstall the app, a new ID is created. If your phone's backup restores the app's data, the old ID may come back too.
4. Data we collect
| Data | What it includes | When |
|---|---|---|
| Device ID and token | Random ID and token; when our server first and last saw you; the total time the app was open on screen (playtime, in seconds); the app version you're running (release stamp, update package ID, device runtime version) - so we can see which update reached you; which kinds of fix your app understands, so the admin panel doesn't queue a fix your device can't apply; your phone's brand and model, operating system and version, the phone's language and region setting, time zone; the country code looked up from the IP address you connect from (we don't store the IP address, only the two-letter country code); the days you opened the app, and when each play session started and ended and how long the app was on screen; on Android, a hash of Android's app-specific device ID (we don't store the ID itself; it lets us recognize the same phone if you reinstall the game); whether the app was installed from Google Play (including whether you came from a Google Ads ad; this does not depend on ad consent and we do not store the click ID) or another way (an APK file, Expo Go); the ad network and campaign name reported by Tenjin (in Europe only if you gave ad consent; on iPhone this is how we see whether an install came from a Google Ads ad; your advertising ID is not part of this record). We use these to see who plays, from which country and on which phone, and whether players come back. | With every request to our server. |
| Save backup | The lives in your save slots: your character's first and last name, gender, country and city, stats, education, job, in-game money, items, relationships (including the names of people in the game), game log, and last played time. A signature showing the save hasn't been altered. | Whenever the save changes, at most once a minute. |
| Past lives | A copy of a life's final state when it dies or is replaced by a new life in the same slot. When we delete a character from the admin panel, the copy is deleted too. | On the server, when the backup is overwritten. |
| Profile backup | Achievements earned, packs unlocked, ad-free entitlement, daily ad counter; sound, vibration, notification, and language preferences; whether the intro was shown, which surprises you found, which news items you read. | Whenever the profile changes. |
| Diamond balance and ledger | Your balance. For each diamond transaction: amount, type, what it was spent on, and time. | When you spend diamonds and when the app opens. |
| In-game activity log | Purchases and sales made with in-game money (items, vehicles, homes, gold, investments), a daily income and expense summary, in-game money after each transaction, your character's age and game day. What you chose in the notification permission window (did you turn it on or put it off; what your phone's permission said before and after), and if notification registration fails, the reason: permission status, platform, error message. If your save cannot be written to the phone, the error message the phone returned. Which screens of the game you spent time on and for how long, the screen that was open when you left the app or put it in the background, and how long it stayed in the foreground that time; which of the game's first steps you reached (creating a character, finishing the guide, your character reaching certain ages, each recorded once); whether an ad was shown and whether it was watched to the end; which places you went to in the game, which activities you did, which interactions you chose with characters, which option you picked in events, and whether you pressed the "Share your life" button on the death screen. We use these to see where the game gets boring or hard and how long people play in each country. Once a day, totals are also computed from this log and from the badge list in your profile backup; the game shows them as "the percentage of players who chose this or earned this". Device IDs and personal details are not part of these totals, no percentage is ever shown for a group of fewer than 100 different players, and the game receives only a rounded percentage, not raw counts. | While you play, sent in batches every thirty seconds. |
| Bug report (optional) | The description you type, your full game state, a screenshot of the game screen (only the app's own screen, nothing else on your phone), operating system and version, save format version. | Only when you send the form, either by shaking your phone or from Settings > Report a bug. |
| News | Our replies and announcements; when you read the ones written only to you. | When you read them in Settings > News. |
| Fixes and gifts | What gift or fix we gave you, its note, and when it was applied. If we moved one of your lives to another device at your request, a record of the move. | When we create it; applied when the app opens. |
| Deletion request (optional) | When you sent the request, your optional note, the outcome, and when it was processed. | Only when you ask to delete your data from Settings. |
| Notification token (optional) | Expo notification token, platform, which notification types you keep on, when it was registered and last seen. The title and text of notifications we send you, and whether they were delivered. | Only if you allow phone notifications. |
| Post office and Magazine | Your character's first name, gender, age, country, city and the number that draws its avatar; the state of the "Visible to the world" switch. Letters you send and receive (IDs of ready-made sentences; no free text) and when each letter was sent, delivered and read. News you congratulated in the Magazine, players you blocked or reported. Magazine news comes from the in-game activity log (started a company, got married, was born and similar). Other players only see the first name, age, country, city, avatar and this news; your device ID never goes to another player. While "Visible to the world" is off, your character doesn't appear in search or in the Magazine. The Magazine's "Favorites of the week" shows only totals from the activity log (such as the most visited place); it never shows who. | While the game is open and when you use the post office or the Magazine. |
| Server logs | IP address, request time, requested address, app or browser information (user agent). These are kept by the hosting software; we don't write IP addresses to the game database. | With every request to our server. |
The names you give your character and the people in the game are free text and are sent to our server with your backup. We recommend not using your real name or anyone else's personal information.
What stays on your phone
- Your main save and settings live in the app's database on your phone.
- The motion sensor is read on your phone only to detect "shake to report a bug." Its readings are never sent anywhere.
- Local notifications (reminders, offline earnings, daily allowance) are scheduled on your phone and never touch our server.
- If your phone's backup setting is on, Android may back up this data to your Google account. That backup is between you and Google.
What we don't collect
We don't ask for your location, contacts, photo library, microphone recordings, calendar, email, phone number, or real name. Apart from install measurement (Tenjin, Firebase Analytics) and crash reporting (Firebase Crashlytics), all listed in the table below, we use no analytics services. On iPhone we show Apple's tracking permission prompt (App Tracking Transparency): if you allow it, your advertising ID (IDFA) goes to Google and Tenjin so we can measure which campaign an install came from; if you don't, it isn't sent and you lose nothing in the game. On iPhone, Tenjin starts only after you answer that prompt. You can change your choice in Settings > Privacy & Security > Tracking. The privacy page you're reading uses no cookies, measures nothing, and loads nothing from outside.
What we don't collect yet: in-app purchases
One thing is built into the game but doesn't work today. We're writing it down now so it isn't a surprise later. When it is switched on, we will update this page beforehand with a new version number and effective date, and announce the change in the app under Settings > News.
- In-app purchases. Diamonds will be sold through Google Play and App Store billing. On the day it is connected, our server records the ID of the product you bought, the receipt number the store issued, which store it was, and the time. We never see your card details or payment information; the store handles those. The retention period for that record is below (Retention); today no such record is created.
5. Purposes
- To run the game, back up your save, and restore it when you change phones.
- To keep your diamond balance reliable and weed out balances inflated by cheating.
- To find bugs and balance problems and fix the game.
- To give back what you lost to a bug, send gifts, and move a life to another device if you ask.
- To reply to bug reports and post announcements.
- To send phone notifications if you've allowed them.
- To protect our server against abuse.
- To meet legal obligations and respond to rights requests.
We don't use your data for profiling or automated decisions about you. The only thing that goes to Google for rewarded ads is your advertising ID (Who we share data with).
6. Legal basis
| Processing | KVKK Art. 5 | GDPR Art. 6 |
|---|---|---|
| Running the game; device ID, save and profile backup, past lives, diamond balance and ledger | 5(2)(c): entering into and performing a contract | 6(1)(b) |
| Finding bugs and balance problems (activity log, total playtime); understanding our players (phone model, country, days the app was opened); fixes and gifts | 5(2)(f): legitimate interest | 6(1)(f) |
| Bug reports and replies | 5(2)(f): legitimate interest | 6(1)(f) |
| Security, anti-cheat, server logs | 5(2)(f): legitimate interest | 6(1)(f) |
| Phone notifications | 5(1): explicit consent (your phone's notification permission) | 6(1)(a) |
| Legal obligations: keeping purchase records, handling deletion and other rights requests, requests from authorities | 5(2)(ç): legal obligation | 6(1)(c) |
Our legitimate interest is running the game without bugs or cheating. You can object to processing based on it (see Your rights). You can withdraw notification permission at any time in your phone's settings. Withdrawing it doesn't affect processing that happened before.
7. Who we share data with
We don't sell your data. The only thing shared for advertising is the advertising ID listed in the table below. The following service providers process data on our behalf so the game can work:
| Provider | Purpose | Data |
|---|---|---|
| KEYUBU Internet ve Bilisim Tic. Ltd. Sti. (Turkey) | Hosting our server. | All data on the server, and server logs. |
| Expo (650 Industries, Inc., USA) | Delivering phone notifications; serving app updates; checking internet connectivity. | For notifications: token, notification title and text. For update checks: IP address, a random installation ID, platform, app version. For connectivity checks: IP address. |
| Google (Firebase Cloud Messaging) | Delivering notifications to Android phones; checking internet connectivity (gstatic.com). | Firebase notification registration, IP address. |
| Cloudflare, Inc. (USA) | Checking internet connectivity (cloudflare.com). | IP address. |
| Apple (Apple Push Notification service) | Delivering notifications to iPhones. | Your phone's notification registration, the notification title and text. Only on iPhone and only if you allowed notifications. |
| Google (AdMob, Google Ireland Limited and Google LLC) | Showing rewarded ads; presenting the ad consent screen in Europe. | Your phone's advertising ID (Android Advertising ID), IP address, the moment the ad was shown, device and app information. We don't store this data; Google processes it under its own policy. |
| Unity Technologies (Unity Ads), Liftoff (Liftoff Monetize, formerly Vungle), InMobi, Pangle (Bytedance), Yandex (Yandex Mobile Ads and the AppMetrica library it includes) and Start.io | Bidding for and showing ads through AdMob (mediation). In Europe they follow your choice on the ad consent screen. | Your phone's advertising ID (Android Advertising ID), IP address, the moment the ad was shown, device and app information. We don't store this data; each company processes it under its own policy. |
| Google (Firebase Crashlytics) | Seeing where the game crashed so we can fix it. | The technical trace at the moment of the crash (which code, which screen), phone model, operating system version, app version, time of the crash and Firebase's random installation ID. Your save and your name are not sent. Google keeps it for 90 days. |
| Google (Firebase Analytics) | Counting the game's first open and play sessions; reporting installs that came from a Google Ads ad back to the ad campaign. | The app's first open, session start and length, app version, phone model, operating system, language and country, Firebase's random app instance ID, advertising ID (Advertising ID on Android; IDFA on iPhone, only if you allow tracking). Your save, your name and your choices in the game are not sent. Google keeps it for the period set in Firebase (2 months). |
| Google (Play Integrity) | Checking during a purchase that the app was installed from Play and the phone hasn't been tampered with, to prevent fake purchases. | Only at the moment of a purchase: the integrity status of the app and the phone, and a hash of the purchase token. Google processes it under its own policy. |
| Tenjin (Tenjin Inc.) | Measuring which ad or campaign you found the game through (install attribution), so we can see whether our ads work. | Your phone's advertising ID (Advertising ID on Android; IDFA on iPhone, only if you allow tracking), the app's vendor ID on iPhone (IDFV), IP address, device and app information, Play's install referrer (Android), the moments the app was opened. In Europe it follows your choice on the ad consent screen. Tenjin processes this data on our behalf. |
| DiceBear (api.dicebear.com) | Drawing your character's avatar image. | Your character's random seed number, the hair set chosen from their gender, IP address. |
| The site hosting a news image | Showing the cover or an in-text image of a news item in Settings > News. | Your IP address and standard request information. We upload images to our own server; if a news item uses an address on another site, that site sees your IP address while the image loads. |
While the app is open, it sends a short request to three addresses every thirty seconds to tell whether you're online. These requests carry no game data; the recipient only sees your IP address and standard request information.
Provider policies: Expo, Google, Cloudflare, DiceBear.
Your advertising ID is shared with Google (AdMob), and that too is a transfer abroad.
We may disclose data to competent authorities when the law requires it.
A bug report goes only to us. If it can't reach our server, the report isn't sent: the form stays open, what you wrote is kept, and the reason is shown on screen. There is no path that hands the report to another app or person.
8. International transfers
Our server is located in Turkey. Expo, Google, Cloudflare, and Apple are US-based companies. The servers of these services and of DiceBear may be outside Türkiye and the European Union, so data sent to them is transferred to those countries. Your advertising ID is transferred abroad in the same way.
We make these transfers under KVKK Article 9 and Chapter V of the GDPR. Safeguard: performance of the contract so the service can be provided (Turkish DPL art. 5/2-c, GDPR art. 6/1-b) and, for the advertising identifier, your explicit consent (Turkish DPL art. 9/1, GDPR art. 49/1-a).
9. Retention
| Data | How long |
|---|---|
| Device ID, total playtime and app version, save and profile backup, past lives, diamond balance and ledger, fixes and gifts, news | As long as you use the app, until you ask us to delete it. |
| Bug reports and screenshots | Deleted 6 months after they're sent. |
| In-game activity log | Deleted after 1 year. |
| Days you opened the app | Deleted after 1 year. |
| Time and length of play sessions | Deleted after 1 year. |
| Notification token | Until you turn off notification permission or Expo reports the token as invalid. |
| Record of notifications sent to you | Deleted after 90 days. |
| Purchase records (once in-app purchases are switched on and you make one; no such record exists today) | Deleted 10 years after the purchase was recorded. Not deleted when you request deletion; instead, separated from your device ID and kept anonymously. |
| Post office profile (first name, gender, age, city) and letters | Deleted 1 year after the last update or after sending. |
| Congratulations in the Magazine | Deleted after 90 days. |
| Player reports | Deleted after 6 months. |
| Record of your deletion request | Your device ID and note are deleted 30 days after the request is processed; the request's date and outcome remain. |
| Copy made during deletion | Deleted after 30 days. |
| Database backups | Deleted after 30 days. |
| Server logs | Deleted after 90 days. |
| The marker for a deleted save slot | Kept indefinitely. It contains neither the character's name nor any game data; the reason is below (What remains). |
We keep purchase records for 10 years because commercial records must be retained under the Turkish Commercial Code (Article 82). When a retention period ends, we delete the data.
10. Security
- All traffic between the app and our server is encrypted with HTTPS.
- Our server checks every request against the device token. One device can't read or overwrite another device's save.
- The database isn't exposed to the internet; the app reaches it only through the API on our server.
- Only the data controller can access the admin panel, which is protected by a password, a separate key, and an IP restriction.
- Your save is signed on your phone, so a save altered outside the game can be detected.
No system can promise perfect security. If a security breach affects your data, we will notify the competent authority and, where required, you, as set out in KVKK Article 12 and GDPR Articles 33–34.
11. Your rights
Under KVKK Article 11, you have the right to:
- find out whether your personal data is being processed,
- request information about it if it is,
- learn the purpose of processing and whether the data is used for that purpose,
- know the third parties in Türkiye or abroad your data has been transferred to,
- ask for incomplete or inaccurate data to be corrected,
- ask for your data to be deleted or destroyed under the conditions in KVKK Article 7,
- ask that corrections, deletions, and destruction be passed on to the third parties your data was transferred to,
- object to an outcome against you that results solely from automated analysis,
- claim compensation if you suffer damage from unlawful processing.
If you're in the European Union, the European Economic Area, or a country with a similar law, the GDPR also gives you the right to: access your data and get a copy (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), object to processing based on legitimate interest (Art. 21), and withdraw consent (Art. 7(3)).
How to make a request
To have your data deleted, use the deletion request in Settings (see Deleting your data). For other rights, you can make a request through the Settings > Report a bug form in the app, or by writing to info@yesey.com.tr. You can also send a KVKK request in writing to Şenlikköy Mah. Yeşilköy Halkalı Cad. No: 93/2 Bakırköy / İstanbul.
We'll respond free of charge within 30 days at the latest. If fulfilling a request involves a separate cost, a fee may be charged according to the tariff set by the Turkish Personal Data Protection Board.
If your request is rejected, you find the answer insufficient, or you get no answer within 30 days, you can file a complaint with the Turkish Personal Data Protection Board. The deadline is 30 days from the date you learn of the answer, and in any case 60 days from the date of your request. If the GDPR applies to you, you can also complain to the data protection authority in the country where you live.
Players in the United States
If California law or a similar state law applies to you: we do not sell your personal data; the only thing shared for advertising is the advertising ID sent to Google for ads and to Tenjin for install measurement (Who we share data with), on iPhone only if you allow tracking, we make no automated decisions about you, and we collect no sensitive data. That's why there's no separate "do not sell" button: there is no sale to opt out of. To access your data, or ask for it to be corrected or deleted, use the routes above. You lose nothing in the game for exercising a right.
12. Deleting your data
- In the app, go to Settings and tap Delete my data. Add a short note if you like, then send the request. The request carries your device ID, so you don't need to give us anything else.
- We process your request within 30 days at the latest. Once it's approved, your data is deleted from our server.
- If you want your data fully deleted, uninstall the app from your phone after sending the request.
Here's why step 3 matters: if the app stays on your phone and you open it again, the save on your phone is backed up to our server again under the same ID.
If we can't fulfill your request, we'll explain why in Settings > News. If you can't access the app, write to info@yesey.com.tr; we may ask for your character's name and roughly when you last played so we can find your data.
What gets deleted
Your device ID and everything linked to it: total playtime, app version, save and profile backup, past lives, diamond balance and ledger, activity log, bug reports, fixes and gifts, news, notification token.
What remains
- The copy made during deletion, kept so an accidental deletion can be undone: deleted after 30 days.
- The record of notifications sent to you (title, text, device ID): deleted 90 days after sending.
- Older copies in database backups: 30 days at most.
- Purchase records: not deleted, because commercial records must be retained. They're separated from your device ID, kept anonymously, and deleted 10 years after the purchase was recorded.
- The record of your request: its date and outcome remain; your device ID and note are deleted 30 days after it's processed.
- The deletion marker for a deleted save slot: your device ID, the slot number, the game's random seed, and two hashes derived from the character's name. It contains neither the character's name nor any game data, and they cannot be recovered from it. It is kept indefinitely: without it, the app on your phone would write the deleted life back to the server the next time you open it.
Deleted diamonds and backups can't be restored. Uninstalling the app only deletes data on your phone; use the steps above for data on our server.
Notification token only
If you turn off notification permission in your phone's settings, the app deletes your token from our server the next time it opens.
13. Children
Existence is designed for adults 18 and older. The game includes themes such as crime and prison, alcohol, and infidelity, and diamonds that can be bought with real money. The game does not participate in the Google Play Families program, is not part of the App Store Kids Category, and is not listed as designed for children in any store.
We don't ask your age, and we don't knowingly collect data from anyone under 18. For the purposes of COPPA in the United States, we likewise do not knowingly collect data from children under 13. If we learn that someone under 18 has sent us data, we will delete it. If you're a parent, you can write to info@yesey.com.tr and ask us to delete your child's data.
14. Changes
We may update this policy. The current version is always at this address, with the effective date and version number at the top. If an update significantly changes how we process data, we'll announce it in the app under Settings > News. If new processing requires your consent, we'll ask for it separately.
15. Contact
For questions, requests, or complaints: info@yesey.com.tr · Şenlikköy Mah. Yeşilköy Halkalı Cad. No: 93/2 Bakırköy / İstanbul
Existence: Life Simulator · Privacy Policy · Version 7 · 26 October 2026