Effective Date: May 3, 2026
Last Updated: May 7, 2026
1. Introduction
Kifu Master (“the App”) is a kifu (game record) viewing and analysis application for the game of Go (also known as Baduk or Weiqi), developed by Abdullah Utku Üzülmez (“Data Controller”, “we”, “us”). This Privacy Policy explains what data we collect when you use the App, how we use it, and your rights. By using the App, you agree to this Policy.
2. Data We Collect
Account information (via Firebase Authentication): email address, unique user identifier (Firebase UID), sign-in method (email/password or Google Sign-In), account creation and last sign-in dates. Your password is cryptographically hashed by Firebase; it is never stored in raw form, and we cannot access it.
Subscription information (stored on RevenueCat and Firebase Firestore): subscription status, type and duration, start and end dates, RevenueCat customer ID, and any redeem code used. Your payment information (credit card numbers, banking details, etc.) never reaches us; this information is processed and stored directly by Google Play.
Local data: SGF files you upload, save, or favorite within the App, together with your language, theme, and sound preferences, are stored only in your device’s local storage (IndexedDB). They are not transmitted to our servers and are not backed up. If you lose your device or uninstall the App, this data cannot be recovered.
Aggregate usage counts: To understand which games are popular in the Pro Database, per-game view and favorite counts are kept in aggregate form. These figures are not associated with any individual user; we do not record who viewed which game or when.
3. Data We Do Not Collect
Kifu Master does not access your camera, microphone, precise location (GPS), contacts, calendar, or photo gallery, nor your payment card details. It reads only the SGF files you explicitly select. We do not use your data for advertising or marketing purposes, and we do not sell it to third parties.
4. How We Use Your Data
We use the data we collect solely to create and manage your account, synchronize your premium subscription across your devices, authenticate your session and operate the App, respond to support requests, and meet our legal obligations (taxation, consumer protection law).
The legal bases for processing under the GDPR and the Turkish Personal Data Protection Law No. 6698 (KVKK) are the performance of a contract (account and subscription services), our legitimate interest (security of the App and prevention of misuse), and compliance with a legal obligation.
5. Third-Party Service Providers
Your data is processed by the following providers, acting solely as “data processors” on our behalf:
- Google LLC (Firebase) — authentication and Firestore database: policies.google.com/privacy
- RevenueCat, Inc. — cross-platform subscription management: revenuecat.com/privacy
- Google Play (Google LLC) — in-app purchases: policies.google.com/privacy
These providers may process your data on servers located outside Türkiye, notably in the United States and the European Union. Such international transfers are carried out under the GDPR-compliant Standard Contractual Clauses (SCCs) framework.
6. Data Retention and Account Deletion
- Account information is retained for as long as your account remains active.
- In-app deletion: You can delete your account from within the App via Profile > Delete Account. This action is irreversible; your personal data in Firebase Authentication and Firestore is deleted immediately, and data held by third-party providers (RevenueCat) is removed within 30 days at the latest.
- Web-based deletion: If you do not have access to the App or wish to delete your account from outside the App, you may follow the instructions at https://www.gotesensei.club/kifu-master-hesap-silme/. Your request will be completed within 30 days after confirmation from your registered email address.
- Active Premium subscription: Deleting your account does not automatically cancel your existing Premium subscription. You must first cancel your subscription via Google Play > Subscriptions.
- Data subject to legal retention obligations (invoices and financial records for 5 years under the Turkish Tax Procedure Law, data covered by consumer protection legislation for the applicable periods) and anonymized analytics data are retained until the end of the applicable statutory period.
7. Data Security
All network communication is encrypted using HTTPS/TLS, data is stored encrypted on Firebase servers, Firestore security rules ensure that each user can access only their own data, the administrator account is protected with two-factor authentication (2FA), and passwords are never stored in plain text. No system is 100% secure; however, industry-standard measures are applied.
8. Your Rights
Under Article 11 of the KVKK and the GDPR, you have the right to access, rectify, erase, restrict the processing of, port, and object to the processing of your personal data. Account deletion can be performed from within the App; for any other requests, please write to gotesensei@gmail.com. We respond to requests within 30 days at the latest. You may also lodge a complaint with the Personal Data Protection Authority of the Republic of Türkiye: kvkk.gov.tr
9. Children’s Privacy
Kifu Master is not intended for children under the age of 13 (or under 16 in European Union countries). We do not knowingly collect personal data from children in these age groups. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us and we will delete such data as soon as possible.
10. Changes to This Policy
This Policy may be updated from time to time. For material changes, an in-app notice will be displayed, you may be informed at your registered email address, and the “Last Updated” date at the top of this page will be revised. Your continued use of the App after such changes constitutes your acceptance of the updated Policy.
11. Contact
Data Controller: Abdullah Utku Üzülmez
Email: gotesensei@gmail.com
Web: gotesensei.club
This Policy has been prepared in compliance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and the European Union General Data Protection Regulation (GDPR).