Who we are (data controller)
Mustafa Baykal (Individual Developer), jurisdiction: Republic of Türkiye.
For all privacy-related questions: mustafabaykal91@gmail.com
What we collect
- Nothing personal. EnglishCase does not require an account or collect identifying information about you.
Third-party services we use
- RevenueCat (subscription receipt validation — no personal data)
- Apple StoreKit (in-app purchase processing)
Data processors and international transfers
We use the following processors. All have signed Data Processing Agreements (DPAs); transfers to the United States are additionally protected by Standard Contractual Clauses (SCCs) per GDPR Articles 44–49 (post-Schrems II).
| Processor | Purpose | Location | DPA | SCC |
|---|---|---|---|---|
| RevenueCat, Inc. | Validates your App Store subscription receipt and manages premium entitlement. Keyed to an anonymous, randomly-generated app-user id — never your name, email, or Apple ID | USA | ✓ | ✓ |
| Apple, Inc. | App Store distribution and in-app purchase processing (StoreKit). Apple handles all payment data; we never see your card or billing details | Global | ✓ | N/A |
Data retention
We keep data only as long as necessary for the purpose collected, or as required by law (GDPR Art. 5(1)(e); KVKK Art. 7).
| Data type | Retention period | Reason |
|---|---|---|
| Local game progress (which cases you've solved, stars, streak, settings, chosen language) | until-you-uninstall | Stored only on your device. Deleting the app erases it completely. It never leaves your phone |
| Anonymous subscription entitlement (via Apple + RevenueCat) | 7-years | Subscription receipts are retained for tax/accounting records required by Turkish tax law (Vergi Usul Kanunu), keyed to an anonymous id |
No account, no sign-up, nothing personal
EnglishCase has no login. You do not create an account, and you never give us an email, a name, a phone number, or any personal information to play. Your progress — which cases you've closed, your stars, your streak, your settings and your chosen language — is saved only on your own device. It never leaves your phone and we never see it.
What we do NOT collect
We do not collect or use: your name, email, precise or coarse location, contacts, photos, microphone, camera, health/fitness data, calendar, browsing history, the advertising identifier (IDFA), or any biometric data. EnglishCase contains zero advertising SDKs and zero analytics/tracking SDKs. We do not sell, rent, or share your data with anyone. Our App Store privacy manifest declares NSPrivacyTracking: false — we do not track you across apps or websites.
How the lessons were made (AI)
The detective stories and grammar questions inside EnglishCase were authored with the help of AI writing tools during development, then reviewed by a human. This happens entirely on our side, before the app ships. The app itself does NOT send any of your data, answers, or activity to any AI service while you play — there is no live AI in the app.
Children
EnglishCase is rated for older children and up because its noir detective cases reference mild, text-only crime themes (theft, a missing person, a 1940s mystery). It collects no personal information from anyone, including children. There is no chat, no social feature, no user-to-user contact, and nothing a child could share publicly. If you have any concern, email us at mustafabaykal91@gmail.com.
International data transfer
EnglishCase keeps your game data on your device. The only data that leaves your phone is the anonymous subscription receipt check, which passes through RevenueCat's USA infrastructure under Standard Contractual Clauses (post-Schrems II), and Apple's global StoreKit pipeline. We have a Data Processing Agreement in place with RevenueCat.
Your choices
Because we store nothing about you on any server, there is nothing to export or erase on our side. To remove all local data, simply delete the app. To manage or cancel your subscription, use iOS Settings → Apple ID → Subscriptions, or the Manage Subscription link inside the app. If you'd like your anonymous RevenueCat subscription record anonymized further, email mustafabaykal91@gmail.com.
Your rights
- Access — request a copy of any data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion (see Delete account).
- Portability — receive your data in a machine-readable format.
- Restriction — restrict processing in certain circumstances.
- Objection — object to processing based on legitimate interests.
- Object to automated decisions — the app does not make consequential automated decisions; you may still email us per GDPR Art. 22.
- Withdraw consent — for any processing based on consent.
- Lodge a complaint — with your local supervisory authority (in Türkiye: KVKK; in EU: your national DPA).
Legal bases for processing (GDPR Art. 6)
- Performance of a contract — processing payment receipts via Apple/RevenueCat to provide your subscription.
- Legitimate interests — anonymized analytics + crash reporting to improve the app.
- Consent — health permissions, push notifications, ATT tracking (you can withdraw at any time in iOS Settings).
- Legal obligation — retaining payment records per applicable tax law.
Children
EnglishCase is not directed at children under 9. We do not knowingly collect data from children under that age. If you believe a child has provided us data, contact mustafabaykal91@gmail.com and we will delete it within 30 days.
Security
We implement industry-standard security measures: TLS 1.3 for all network traffic, encrypted at rest where stored on third-party services, no plaintext credentials, principle of least privilege for data access. No system is 100% secure; if a breach impacts you, we will notify per GDPR Art. 33–34 (within 72 hours of discovery).
California / CCPA
California residents have the right to: (i) know what personal info we collect; (ii) delete personal info; (iii) opt out of sale (we do not sell); (iv) non-discrimination. To exercise: email mustafabaykal91@gmail.com with subject "CCPA request".
Changes
If this policy changes materially, the "Last updated" date will be revised. Significant changes will be flagged in-app and we will provide a 30-day notice period for objection where required by law.
Contact
Privacy questions: mustafabaykal91@gmail.com · Data subject requests: same email, subject "Data subject request".