NemuPrivacy Policy
Last updated: 1 November 2026
This policy explains what personal data we process when you play Nemu on iOS or Android or visit playnemu.com, why we do it, and the rights you have. It is also our information notice under the Turkish Personal Data Protection Law No. 6698 (KVKK) and covers the EU and UK General Data Protection Regulation (GDPR).
- Who we are
- Data we process and why
- Advertising and analytics
- Who receives data
- International transfers
- How long we keep data
- Your rights
- Deleting your account
- Children
- Security
- Changes
- Contact
1. Who we are
The data controller is AppVision Yazılım Hizmetleri Limited Şirketi, Maslak Mah. AOS 55. Sk. 42 Maslak A Blok No: 2 İç Kapı No: 25, 34240 Sarıyer, İstanbul, Türkiye ("we", "us"). For privacy questions write to privacy@playnemu.com.
2. Data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Game data on your device: progress, settings, unlocked items. | Running the game. This data stays on your device unless cloud save is used. | Contract (GDPR art. 6(1)(b); KVKK art. 5(2)(c)). |
| Player account and cloud save: a random identifier created on your device, the account ID our server assigns to it, your saved game progress and the times it was saved. | Backing up your progress and restoring it on a new or reinstalled device. | Contract. |
| Sign-in with Apple or Google, if the game offers it and you choose to use it: the account identifier the provider gives us and, only if you agree to share it, your e-mail address. | Linking your progress to an account you control. | Contract. |
| Purchases: product, transaction ID, purchase time and status. Payments are handled by Apple or Google; we never see your card details. | Delivering what you bought, restoring purchases, handling refunds and keeping legally required records. | Contract; legal obligation (GDPR art. 6(1)(c); KVKK art. 5(2)(ç)). |
| Leaderboard, if you join a round: your nickname, picture and frame, your score in the round and your player account ID. | Running the 24-hour rounds, where the other players in your round see your nickname, picture, frame and score. | Contract. |
| Name reports and blocks: when you report or block a player on the leaderboard, your player account ID, theirs and the reported nickname; the same when someone reports or blocks you. | Hiding that name from you, reviewing reports and keeping offensive names off the leaderboard. A report reaches our support desk, and a name several players report is hidden from everyone. | Legitimate interests (GDPR art. 6(1)(f); KVKK art. 5(2)(f)). |
| Advertising data: see section 3. | Showing ads that keep the game free. | See section 3. |
| Game analytics: what happens in the game (screens and windows opened, levels started and finished with their results, tools, buttons and settings used, ads shown and what they earned, the steps of a purchase), together with a random identifier for your copy of the app, your player account ID, device and app information and an approximate location derived from your IP address. Nothing you type is included. | Understanding how the game is played so we can balance levels, fix problems and improve it, and measuring how ads and our campaigns perform. | See section 3. |
| Technical data: IP address, device and operating system type, app version and request times recorded in our server logs. | Operating the service, keeping it secure, preventing abuse and fixing errors. | Legitimate interests (GDPR art. 6(1)(f); KVKK art. 5(2)(f)). |
| Support messages: your e-mail address and what you write to us, by e-mail, in our help portal or in the game (Settings → Feedback, and the few words you may add when you rate the game). When you contact us from the game, our server tells our support desk your player account ID, the nickname you last used on the leaderboard and, if you signed in with Apple or Google and they shared it, your e-mail address, so we can find your account; our support staff can also see your account's details (when it was created, how you sign in, when your progress was last backed up and your level). | Answering you and handling your requests. | Legitimate interests; contract where the request concerns the game. |
| Website visits: playnemu.com sets no cookies and runs no analytics. Our hosting provider processes your IP address to deliver the pages and protect the site. | Delivering and securing the website. | Legitimate interests. |
We collect this data electronically through the game, our servers, the website and e-mail. We do not use it for automated decisions that have legal or similarly significant effects on you.
3. Advertising and analytics
Nemu is free to play and shows ads served by Google AdMob (Google LLC; in the EEA, the UK and Switzerland, Google Ireland Limited): a full-screen ad at the start of some levels, a banner under the board, and videos you choose to watch for a reward, such as a free hint or an extra fish. Buying "No ads" removes the full-screen ads and the banner; reward videos stay available because you start them yourself.
To show and measure ads, Google's ads software in the game processes your device's advertising identifier (on iPhone and iPad only if you allow tracking; on Android the advertising ID), your IP address, device and app information, and how you interact with ads. Google uses this to deliver ads, limit how often you see them, measure them and prevent fraud, and, where you agree, to personalise them. How Google uses this data is explained at policies.google.com/technologies/partner-sites.
- EEA, UK and Switzerland: before any ad loads, the game shows Google's consent form (a consent management platform certified under the IAB Transparency and Consent Framework). Without your consent you see only limited, non-personalised ads. You can change your choice at any time in the game under Settings → Privacy choices.
- iPhone and iPad: the game asks through Apple's App Tracking Transparency prompt before the advertising identifier can be read. You can change your answer in iOS Settings → Privacy & Security → Tracking.
- Android: you can reset or delete your advertising ID in your device settings.
Legal basis: your consent for personalised ads and, where the law requires it, for reading identifiers from your device (GDPR art. 6(1)(a); KVKK art. 5(1)); our legitimate interest in funding the game for non-personalised ads, frequency limits and fraud prevention (GDPR art. 6(1)(f); KVKK art. 5(2)(f)).
To learn how the game is played, the game sends the usage events described in section 2 to Google Analytics for Firebase (Google LLC; in the EEA, the UK and Switzerland, Google Ireland Limited), which processes them on our behalf. The events are linked to a random identifier for your copy of the app and to your player account ID, not to your name. Whether they may also be used for advertising (ad measurement and personalisation) follows your choices above: without your consent in the consent form, Google Analytics does not use them for ads, and on iPhone and iPad the advertising identifier is read only if you allow tracking. The Mac version of the game sends no analytics.
Legal basis for analytics: our legitimate interest in understanding and improving the game (GDPR art. 6(1)(f); KVKK art. 5(2)(f)); your consent where the data is used for advertising.
4. Who receives data
- Service providers that run infrastructure and tools for us (server hosting, website hosting, e-mail, customer support software), only on our instructions.
- Apple and Google, which distribute the app and process payments under their own privacy policies.
- Google AdMob, which serves the ads described in section 3.
- Google Analytics for Firebase, which processes the game analytics described in section 3 on our behalf.
- Advertising partners on whose platforms we advertise the game, which receive app events (installs, purchases, progress in the game) with the advertising data described in section 3 to measure and improve our campaigns, as your choices there allow.
- Other players in your leaderboard round, who see your nickname, picture, frame and score.
- Authorities and courts, when the law requires it or to establish, exercise or defend legal claims.
We do not sell your personal data for money. Where you allow personalised ads, the advertising data in section 3 is shared with Google for that purpose, which some US state laws call "sharing" for cross-context behavioural advertising; you can stop it with the choices in section 3.
5. International transfers
Some providers process data outside Türkiye and the European Economic Area, for example in the United States. Such transfers rely on the safeguards the law provides, such as standard contractual clauses under Chapter V of the GDPR and article 9 of the KVKK.
6. How long we keep data
- Player account and cloud save: while your account exists. After you delete it, we erase it within 30 days.
- Purchase records: as long as tax and commercial law requires (up to 10 years).
- Server logs: up to 30 days, unless we need them longer to investigate a security incident.
- Leaderboard entries: for the round and 30 days after it ends.
- Name reports: 30 days on our server; the support ticket a report opens is kept like other support messages. Blocks: until either account is deleted.
- Advertising data: kept by Google under its own retention rules; we only receive totals, not data about you.
- Game analytics: up to 14 months in Google Analytics, then deleted automatically.
- Support messages: up to 3 years after the matter is closed.
7. Your rights
Under the GDPR you may ask for access to your data, correction, erasure, restriction of processing and a portable copy, and you may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time.
Under article 11 of the KVKK you may ask whether your data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties in Türkiye or abroad to whom it is transferred; request correction of incomplete or inaccurate data and the deletion or destruction of data; ask that these corrections or deletions be notified to those third parties; object to a result against you that arises solely from automated analysis; and claim compensation for damage caused by unlawful processing.
To use these rights, e-mail privacy@playnemu.com or write to our postal address. We may ask for information to confirm the request comes from you. We answer free of charge within 30 days. You may also complain to the Turkish Personal Data Protection Authority (KVKK) or to the data protection authority where you live.
8. Deleting your account
You can delete your player account and cloud save in the game under Settings → My Account → Delete Account. Other ways are described on the account deletion page.
9. Children
Nemu is made for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13 (or the higher age set by the law of your country). If you believe a child has given us personal data, contact us and we will delete it.
10. Security
Data travels between the game and our servers over encrypted connections (HTTPS), and access to our systems is limited to the people who need it. No system is perfectly secure, but we work to protect your data and will inform you and the authorities of a breach when the law requires it.
11. Changes
We will post any change on this page with a new date. If a change significantly affects how we use your data, we will also tell you in the game.
12. Contact
AppVision Yazılım Hizmetleri Limited Şirketi
Maslak Mah. AOS 55. Sk. 42 Maslak A Blok No: 2 İç Kapı No: 25
34240 Sarıyer, İstanbul, Türkiye
privacy@playnemu.com