This document applies only to the Harfiyen game.
This Privacy Policy explains how data is processed when you use the Harfiyen mobile application (the “App”), offered on iOS and Android, and the related legal and support pages. It has been prepared with regard to the Personal Data Protection Law No. 6698 (“Law No. 6698”), other data protection rules that may apply, and app store transparency requirements.
In short: Harfiyen runs entirely on your device. It does not create an account, send your app data to Avelas Studio, or provide any online features. Your games, optional username, statistics, and settings are stored only on your device. There are no ads, behavioral analytics, tracking, or remote notifications. Data can leave your device only when you choose to share, send a support email, or open a web link; app stores process their own platform data under their own policies.
Harfiyen is developed and published by Boran Güngör under the “Avelas Studio” brand. Under Law No. 6698, Boran Güngör, the developer and operator of the App, is the data controller (“we,” “us,” or “our”).
Harfiyen’s default and only operating mode is on-device. The App processes the daily game, game history, statistics, profile, and settings in storage allocated to the App on your device. This data is not transmitted to Avelas Studio.
The App itself does not initiate internet requests and does not use a mechanism that downloads code after installation. There is no content visible to other users, multi-user area, leaderboard, or online game feature.
The daily reminder is scheduled on your device only if you enable the notification toggle in Settings and grant the operating system permission. No remote notification is sent, and no notification token is generated or transmitted anywhere.
The share menu, support email, and legal-page links open another operating-system application only when you tap the relevant button. These user-initiated actions are explained separately in Section 4.
You may choose an optional username and avatar color. The username may be left blank. Before it is saved, the name passes through an on-device suitability filter intended to reject offensive expressions or names that impersonate another person. The name and avatar preference are stored only on your device; your chosen name may appear only on a result card that you choose to share.
A reserved storage area that is unused in the current App version remains empty. If unused local records from earlier versions are present, current features do not use them; Reset Data also clears these records.
All of the data above is kept in local storage allocated to the App by the operating system. Avelas Studio cannot remotely access this data, does not keep a copy of it, and cannot transfer it between devices.
The only way App data can leave your device is when you initiate one of the following actions.
When you tap Share, the result card or text is provided to the operating system’s share menu. Your optional username may appear on the card. You choose the destination app and recipient, and whether to share at all is entirely your decision. The destination you select may process the data it receives under its own privacy terms.
When you tap Report a Bug or Suggest a Word, a draft is opened in your own email app through a mailto: link. The subject and body template contains fields for describing the issue or suggestion, the App version, and the platform you use. You may edit or delete the draft or decide not to send it.
If you send the email, your sender address, message, attachments, and email headers reach us. Correspondence received at boran@avelasstudio.com is processed through Google’s Gmail infrastructure. You determine the message content; we recommend that you do not send passwords, identity documents, payment information, or sensitive data.
When you tap a legal or support link, avelasstudio.com opens in your device browser. These pages do not themselves run cookies, ads, or analytics code. The web-hosting service may process standard access logs, such as IP address, date and time, requested page, and browser information, for security and content delivery.
Apple and Google may process platform data—such as downloads, updates, store account data, store security data, and, depending on your settings, crash or performance reports—under their own policies. These operations are not initiated by Harfiyen and are not under the App’s control.
Local data on your device is used only for the following App functions:
No data is transferred to Avelas Studio during these operations. If you choose to email us, correspondence data is processed to respond to your request, assess your suggestion, review a security report, maintain communications, and comply with applicable legal obligations. Web access logs may be processed to serve the page securely and troubleshoot technical issues.
Data processed on your device (Section 3) is collected electronically and entirely on your device while you use the App: your inputs during gameplay, choices in Settings, and optional player name. There is no form submitted to us, call center, or automatic transmission channel for this data; Avelas Studio does not collect or access it.
Data that reaches us comes only through channels you initiate: by email when you send a support message, and through the hosting service’s standard server logs when you visit our legal or support pages (Section 4).
The legal bases on which we rely under Article 5 of Law No. 6698 are:
For data that stays on your device and never reaches us, no separate legal basis for transfer is required because we do not process that data. We do not carry out processing based on explicit consent; notification permission is not explicit consent within the meaning of Law No. 6698, but an operating-system device-permission mechanism that you may withdraw at any time.
There is no external service that automatically receives App data kept on the device by Harfiyen. The following parties may process data only based on your choice or as part of their own platform operations:
The App does not automatically transfer data kept on your device to any Harfiyen system in Türkiye or abroad.
If you choose to send a support email, share a result, or open a web page, the relevant email, sharing, or hosting service may process data outside Türkiye. Support correspondence is processed through Google’s Gmail infrastructure. Apple and Google may also process store and operating-system data through their global infrastructure and under their own policies. The scope of these operations depends on the service you choose, your settings within that service, and the relevant provider’s terms.
Because Avelas Studio does not keep a remote copy of the game, profile, statistics, or settings data on your device, there is no separate centralized retention or deletion period for that data.
Under Article 11 of Law No. 6698, you have the right to learn whether your personal data is processed; request information if it has been processed; learn the purpose of processing and whether it is used in accordance with that purpose; know the parties to whom it is transferred; request correction if it has been processed incompletely or inaccurately; request its erasure or destruction where the relevant conditions are met and notification of these operations to the parties to whom it was transferred; object to an adverse outcome resulting from analysis exclusively by automated systems; and request compensation for damage arising from unlawful processing.
Because Avelas Studio cannot remotely access data that remains on your device, controls for viewing, changing, and deleting this data are directly available in the App. You can change your optional username and settings, turn off the notification toggle, withdraw notification permission in the operating-system settings, and reset all data.
For a request concerning support correspondence or these web pages, you may contact boran@avelasstudio.com. We may request identity and authority verification to the extent required by law; we do not request more information than necessary. Requests are generally concluded within 30 days at the latest. Where the relevant conditions are met, your right to lodge a complaint with the Personal Data Protection Board remains available.
Requests concerning independent processing by your chosen sharing service, Apple, or Google may need to be directed to the relevant provider. Where the GDPR applies, you may also have rights of access, rectification, erasure, restriction of processing, data portability, objection, and lodging a complaint with a competent supervisory authority.
Settings → Reset Data deletes all data kept by the App on the device, including the profile, daily game, game history and statistics, settings, Terms version, and unused local records remaining from previous versions. The App verifies that deletion has occurred. This operation cannot be undone.
Removing the App from your device also deletes the data allocated to the App by the operating system. Because Harfiyen has no account and keeps no App data outside the device, no separate account-closure flow, code, or request for remote deletion of App data is needed.
Reset Data does not delete a support email you previously chose to send, a result you shared, web access logs, or store platform data; these are separate operations from Harfiyen data on the device. You may contact us regarding support correspondence and the relevant service provider regarding other processing.
Harfiyen is designed for a general audience aged 13 and over and is not directed to children under 13. The 13+ statement in the App is not an age gate for data processing: no account is created, no age information is requested, and App data is not sent to Avelas Studio.
We recommend that you do not enter a real name, contact information, sensitive data, or information about another person in the optional username field. If a user chooses to send an email or share through an external service, the relevant processing is subject to the user-action explanations in this Policy and applicable rules.
Game, profile, and settings data is kept in storage allocated to the App by the operating system and is not transmitted over a network by Harfiyen. Your device lock, operating-system security updates, and people with access to the device may affect the security of your local data.
Data that you choose to send outside the device through sharing or email becomes subject to the security and privacy practices of your chosen destination. We recommend that you review the content before sharing and avoid sending unnecessary personal information. You may report a security vulnerability to boran@avelasstudio.com.
The App does not use advertising tracking, profiling across devices or apps, or third-party behavioral analytics. Diagnostic events created during development are written only to a local console in developer builds; they produce no output in the production version and are not sent anywhere.
Game statistics are calculated on the device according to fixed rules. The username suitability filter also determines only whether the entered name will be saved on the device. These operations are not intended to produce legal or similarly significant effects through automated decision-making.
This Policy is updated when the product’s operation or data flows change. If a new internet-based feature, advertising or analytics tool, remote notification, or new data recipient is added, the Policy and store disclosures will be reviewed before the relevant feature is made available. The current version and date are shown at the top of the page.
For privacy, security, data access, or deletion requests: boran@avelasstudio.com
For other matters, please visit our Support and Contact page.