ExistencePrivacy Policy
In short
- Existence has no accounts. We don't ask for your name, email, phone number, or location.
- The app creates a random device ID on your phone. Your save backup and diamond balance are stored on our server under that ID.
- If you report a bug, we receive what you wrote, your game state, and a screenshot of the game screen.
- If you allow notifications, your notification token is stored.
- The game has rewarded ads: they open only from a button you press, and no ad ever appears on its own. We don't use analytics or crash reporting services. We don't sell your data, and we don't track you across other apps or websites.
- For ads, your phone's advertising ID is shared with Google (AdMob): Who we share data with.
- The game is for adults 18 and older: Children.
- You can ask us to delete your data from Settings, and we'll process your request within 30 days: see Deleting your data.
1. Scope
This policy covers Existence: Life Simulator (released in Turkish as Varoluş: Hayat Simülasyonu, Android package name dev.zippex.varolus) and the oyun.zippex.dev server the game connects to. The game is distributed through Google Play and the App Store; both stores and the service providers named below have their own privacy policies. Some features work on only one platform; which data is collected on which phone is spelled out row by row below.
Which laws apply: the Turkish Personal Data Protection Law No. 6698 (KVKK) in Türkiye, and the General Data Protection Regulation (GDPR) in the European Union and the European Economic Area. If you live elsewhere, your country's data protection rules may also apply.
2. Data controller
The data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR) is:
- Name
- YESEY Kurumsal Hizmetler
- Address
- Şenlikköy Mah. Yeşilköy Halkalı Cad. No: 93/2 Bakırköy / İstanbul
- info@yesey.com.tr
"We" and "us" in this policy mean the data controller.
3. How we recognize you
There are no accounts, logins, or passwords in the game. The first time you open the app, it creates a random device ID on your phone along with a matching secret token. Our server recognizes you by these two. The token stops anyone who guesses your ID from writing to your save.
This ID doesn't contain your name or your phone's hardware identifiers. It is still an online identifier that can be linked to you, so it counts as personal data, and this policy treats it that way.
If you uninstall and reinstall the app, a new ID is created. If your phone's backup restores the app's data, the old ID may come back too.
4. Data we collect
| Data | What it includes | When |
|---|---|---|
| Device ID and token | Random ID and token; when our server first and last saw you; the total time the app was open on screen (playtime, in seconds); the app version you're running (release stamp, update package ID, device runtime version) - so we can see which update reached you; which kinds of fix your app understands, so the admin panel doesn't queue a fix your device can't apply. | With every request to our server. |
| Save backup | The lives in your save slots: your character's first and last name, gender, country and city, stats, education, job, in-game money, items, relationships (including the names of people in the game), game log, and last played time. A signature showing the save hasn't been altered. | Whenever the save changes, at most once a minute. |
| Past lives | A copy of a life's final state when it dies or is replaced by a new life in the same slot. When we delete a character from the admin panel, the copy is deleted too. | On the server, when the backup is overwritten. |
| Profile backup | Achievements earned, packs unlocked, ad-free entitlement, daily ad counter; sound, vibration, notification, and language preferences; whether the intro was shown, which surprises you found, which news items you read. | Whenever the profile changes. |
| Diamond balance and ledger | Your balance. For each diamond transaction: amount, type, what it was spent on, and time. | When you spend diamonds and when the app opens. |
| In-game activity log | Purchases and sales made with in-game money (items, vehicles, homes, gold, investments), a daily income and expense summary, in-game money after each transaction, your character's age and game day. What you chose in the notification permission window (did you turn it on or put it off; what your phone's permission said before and after), and if notification registration fails, the reason: permission status, platform, error message. | While you play, sent in batches every thirty seconds. |
| Bug report (optional) | The description you type, your full game state, a screenshot of the game screen (only the app's own screen, nothing else on your phone), operating system and version, save format version. | Only when you send the form, either by shaking your phone or from Settings > Report a bug. |
| News | Our replies and announcements; when you read the ones written only to you. | When you read them in Settings > News. |
| Fixes and gifts | What gift or fix we gave you, its note, and when it was applied. If we moved one of your lives to another device at your request, a record of the move. | When we create it; applied when the app opens. |
| Deletion request (optional) | When you sent the request, your optional note, the outcome, and when it was processed. | Only when you ask to delete your data from Settings. |
| Notification token (optional) | Expo notification token, platform, which notification types you keep on, when it was registered and last seen. The title and text of notifications we send you, and whether they were delivered. | Only if you allow phone notifications. |
| Server logs | IP address, request time, requested address, app or browser information (user agent). These are kept by the hosting software; we don't write IP addresses to the game database. | With every request to our server. |
The names you give your character and the people in the game are free text and are sent to our server with your backup. We recommend not using your real name or anyone else's personal information.
What stays on your phone
- Your main save and settings live in the app's database on your phone.
- The motion sensor is read on your phone only to detect "shake to report a bug." Its readings are never sent anywhere.
- Local notifications (reminders, offline earnings, daily allowance) are scheduled on your phone and never touch our server.
- If your phone's backup setting is on, Android may back up this data to your Google account. That backup is between you and Google.
What we don't collect
We don't ask for your location, contacts, photo library, microphone recordings, calendar, email, phone number, or real name. We don't use analytics or crash reporting services. We don't track you across other apps and websites, and we don't ask for tracking permission (App Tracking Transparency) on iPhone. The privacy page you're reading uses no cookies, measures nothing, and loads nothing from outside.
What we don't collect yet: in-app purchases
One thing is built into the game but doesn't work today. We're writing it down now so it isn't a surprise later. When it is switched on, we will update this page beforehand with a new version number and effective date, and announce the change in the app under Settings > News.
- In-app purchases. Diamonds will be sold through Google Play and App Store billing. On the day it is connected, our server records the ID of the product you bought, the receipt number the store issued, which store it was, and the time. We never see your card details or payment information; the store handles those. The retention period for that record is below (Retention); today no such record is created.
5. Purposes
- To run the game, back up your save, and restore it when you change phones.
- To keep your diamond balance reliable and weed out balances inflated by cheating.
- To find bugs and balance problems and fix the game.
- To give back what you lost to a bug, send gifts, and move a life to another device if you ask.
- To reply to bug reports and post announcements.
- To send phone notifications if you've allowed them.
- To protect our server against abuse.
- To meet legal obligations and respond to rights requests.
We don't use your data for profiling or automated decisions about you. The only thing that goes to Google for rewarded ads is your advertising ID (Who we share data with).
6. Legal basis
| Processing | KVKK Art. 5 | GDPR Art. 6 |
|---|---|---|
| Running the game; device ID, save and profile backup, past lives, diamond balance and ledger | 5(2)(c): entering into and performing a contract | 6(1)(b) |
| Finding bugs and balance problems (activity log, total playtime); fixes and gifts | 5(2)(f): legitimate interest | 6(1)(f) |
| Bug reports and replies | 5(2)(f): legitimate interest | 6(1)(f) |
| Security, anti-cheat, server logs | 5(2)(f): legitimate interest | 6(1)(f) |
| Phone notifications | 5(1): explicit consent (your phone's notification permission) | 6(1)(a) |
| Legal obligations: keeping purchase records, handling deletion and other rights requests, requests from authorities | 5(2)(ç): legal obligation | 6(1)(c) |
Our legitimate interest is running the game without bugs or cheating. You can object to processing based on it (see Your rights). You can withdraw notification permission at any time in your phone's settings. Withdrawing it doesn't affect processing that happened before.
7. Who we share data with
We don't sell your data. The only thing shared for advertising is the advertising ID listed in the table below. The following service providers process data on our behalf so the game can work:
| Provider | Purpose | Data |
|---|---|---|
| KEYUBU Internet ve Bilisim Tic. Ltd. Sti. (Turkey) | Hosting our server. | All data on the server, and server logs. |
| Expo (650 Industries, Inc., USA) | Delivering phone notifications; serving app updates; checking internet connectivity. | For notifications: token, notification title and text. For update checks: IP address, a random installation ID, platform, app version. For connectivity checks: IP address. |
| Google (Firebase Cloud Messaging) | Delivering notifications to Android phones; checking internet connectivity (gstatic.com). | Firebase notification registration, IP address. |
| Cloudflare, Inc. (USA) | Checking internet connectivity (cloudflare.com). | IP address. |
| Apple (Apple Push Notification service) | Delivering notifications to iPhones. | Your phone's notification registration, the notification title and text. Only on iPhone and only if you allowed notifications. |
| Google (AdMob, Google Ireland Limited and Google LLC) | Showing rewarded ads; presenting the ad consent screen in Europe. | Your phone's advertising ID (Android Advertising ID), IP address, the moment the ad was shown, device and app information. We don't store this data; Google processes it under its own policy. |
| DiceBear (api.dicebear.com) | Drawing your character's avatar image. | Your character's random seed number, the hair set chosen from their gender, IP address. |
| The site hosting a news image | Showing the cover or an in-text image of a news item in Settings > News. | Your IP address and standard request information. We upload images to our own server; if a news item uses an address on another site, that site sees your IP address while the image loads. |
While the app is open, it sends a short request to three addresses every thirty seconds to tell whether you're online. These requests carry no game data; the recipient only sees your IP address and standard request information.
Provider policies: Expo, Google, Cloudflare, DiceBear.
Your advertising ID is shared with Google (AdMob), and that too is a transfer abroad.
We may disclose data to competent authorities when the law requires it.
A bug report goes only to us. If it can't reach our server, the report isn't sent: the form stays open, what you wrote is kept, and the reason is shown on screen. There is no path that hands the report to another app or person.
8. International transfers
Our server is located in Turkey. Expo, Google, Cloudflare, and Apple are US-based companies. The servers of these services and of DiceBear may be outside Türkiye and the European Union, so data sent to them is transferred to those countries. Your advertising ID is transferred abroad in the same way.
We make these transfers under KVKK Article 9 and Chapter V of the GDPR. Safeguard: performance of the contract so the service can be provided (Turkish DPL art. 5/2-c, GDPR art. 6/1-b) and, for the advertising identifier, your explicit consent (Turkish DPL art. 9/1, GDPR art. 49/1-a).
9. Retention
| Data | How long |
|---|---|
| Device ID, total playtime and app version, save and profile backup, past lives, diamond balance and ledger, fixes and gifts, news | As long as you use the app, until you ask us to delete it. |
| Bug reports and screenshots | Deleted 6 months after they're sent. |
| In-game activity log | Deleted after 1 year. |
| Notification token | Until you turn off notification permission or Expo reports the token as invalid. |
| Record of notifications sent to you | Deleted after 90 days. |
| Purchase records (once in-app purchases are switched on and you make one; no such record exists today) | Deleted 10 years after the purchase was recorded. Not deleted when you request deletion; instead, separated from your device ID and kept anonymously. |
| Record of your deletion request | Your device ID and note are deleted 30 days after the request is processed; the request's date and outcome remain. |
| Copy made during deletion | Deleted after 30 days. |
| Database backups | Deleted after 30 days. |
| Server logs | Deleted after 90 days. |
| The marker for a deleted save slot | Kept indefinitely. It contains neither the character's name nor any game data; the reason is below (What remains). |
We keep purchase records for 10 years because commercial records must be retained under the Turkish Commercial Code (Article 82). When a retention period ends, we delete the data.
10. Security
- All traffic between the app and our server is encrypted with HTTPS.
- Our server checks every request against the device token. One device can't read or overwrite another device's save.
- The database isn't exposed to the internet; the app reaches it only through the API on our server.
- Only the data controller can access the admin panel, which is protected by a password, a separate key, and an IP restriction.
- Your save is signed on your phone, so a save altered outside the game can be detected.
No system can promise perfect security. If a security breach affects your data, we will notify the competent authority and, where required, you, as set out in KVKK Article 12 and GDPR Articles 33–34.
11. Your rights
Under KVKK Article 11, you have the right to:
- find out whether your personal data is being processed,
- request information about it if it is,
- learn the purpose of processing and whether the data is used for that purpose,
- know the third parties in Türkiye or abroad your data has been transferred to,
- ask for incomplete or inaccurate data to be corrected,
- ask for your data to be deleted or destroyed under the conditions in KVKK Article 7,
- ask that corrections, deletions, and destruction be passed on to the third parties your data was transferred to,
- object to an outcome against you that results solely from automated analysis,
- claim compensation if you suffer damage from unlawful processing.
If you're in the European Union, the European Economic Area, or a country with a similar law, the GDPR also gives you the right to: access your data and get a copy (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), object to processing based on legitimate interest (Art. 21), and withdraw consent (Art. 7(3)).
How to make a request
To have your data deleted, use the deletion request in Settings (see Deleting your data). For other rights, you can make a request through the Settings > Report a bug form in the app, or by writing to info@yesey.com.tr. You can also send a KVKK request in writing to Şenlikköy Mah. Yeşilköy Halkalı Cad. No: 93/2 Bakırköy / İstanbul.
We'll respond free of charge within 30 days at the latest. If fulfilling a request involves a separate cost, a fee may be charged according to the tariff set by the Turkish Personal Data Protection Board.
If your request is rejected, you find the answer insufficient, or you get no answer within 30 days, you can file a complaint with the Turkish Personal Data Protection Board. The deadline is 30 days from the date you learn of the answer, and in any case 60 days from the date of your request. If the GDPR applies to you, you can also complain to the data protection authority in the country where you live.
Players in the United States
If California law or a similar state law applies to you: we do not sell your personal data; the only thing shared for advertising is the advertising ID sent to Google for rewarded ads (Who we share data with), we don't track you across apps and websites, we make no automated decisions about you, and we collect no sensitive data. That's why there's no separate "do not sell" button: there is no sale to opt out of. To access your data, or ask for it to be corrected or deleted, use the routes above. You lose nothing in the game for exercising a right.
12. Deleting your data
- In the app, go to Settings and tap Delete my data. Add a short note if you like, then send the request. The request carries your device ID, so you don't need to give us anything else.
- We process your request within 30 days at the latest. Once it's approved, your data is deleted from our server.
- If you want your data fully deleted, uninstall the app from your phone after sending the request.
Here's why step 3 matters: if the app stays on your phone and you open it again, the save on your phone is backed up to our server again under the same ID.
If we can't fulfill your request, we'll explain why in Settings > News. If you can't access the app, write to info@yesey.com.tr; we may ask for your character's name and roughly when you last played so we can find your data.
What gets deleted
Your device ID and everything linked to it: total playtime, app version, save and profile backup, past lives, diamond balance and ledger, activity log, bug reports, fixes and gifts, news, notification token.
What remains
- The copy made during deletion, kept so an accidental deletion can be undone: deleted after 30 days.
- The record of notifications sent to you (title, text, device ID): deleted 90 days after sending.
- Older copies in database backups: 30 days at most.
- Purchase records: not deleted, because commercial records must be retained. They're separated from your device ID, kept anonymously, and deleted 10 years after the purchase was recorded.
- The record of your request: its date and outcome remain; your device ID and note are deleted 30 days after it's processed.
- The deletion marker for a deleted save slot: your device ID, the slot number, the game's random seed, and two hashes derived from the character's name. It contains neither the character's name nor any game data, and they cannot be recovered from it. It is kept indefinitely: without it, the app on your phone would write the deleted life back to the server the next time you open it.
Deleted diamonds and backups can't be restored. Uninstalling the app only deletes data on your phone; use the steps above for data on our server.
Notification token only
If you turn off notification permission in your phone's settings, the app deletes your token from our server the next time it opens.
13. Children
Existence is designed for adults 18 and older. The game includes themes such as crime and prison, alcohol, and infidelity, and diamonds that can be bought with real money. The game does not participate in the Google Play Families program, is not part of the App Store Kids Category, and is not listed as designed for children in any store.
We don't ask your age, and we don't knowingly collect data from anyone under 18. For the purposes of COPPA in the United States, we likewise do not knowingly collect data from children under 13. If we learn that someone under 18 has sent us data, we will delete it. If you're a parent, you can write to info@yesey.com.tr and ask us to delete your child's data.
14. Changes
We may update this policy. The current version is always at this address, with the effective date and version number at the top. If an update significantly changes how we process data, we'll announce it in the app under Settings > News. If new processing requires your consent, we'll ask for it separately.
15. Contact
For questions, requests, or complaints: info@yesey.com.tr · Şenlikköy Mah. Yeşilköy Halkalı Cad. No: 93/2 Bakırköy / İstanbul
Existence: Life Simulator · Privacy Policy · Version 2 · 17 September 2026