Draft: awaiting legal review before publication.

Privacy Notice

Last updated: 12 October 2026

Who we are

eightup play is provided by EIGHT UP BİLİŞİM ENERJİ VE TURİZM ANONİM ŞİRKETİ. We are the data controller under Turkey's Law No. 6698 on the Protection of Personal Data (KVKK). Address: Maslak Mah. AOS 55. Sk. 42 Maslak A Blok No: 2 İç Kapı No: 208, Sarıyer/İstanbul · MERSİS 0326066450100001 · İstanbul Ticaret Sicili 1025606 · info@eightup.ai

In short

• You don't need an account to play; we don't ask for your name, email, phone number or location.
• The daily round comes from our server. For this your phone gets a random guest player ID; the pins, scores and times of your rounds are stored on our server with this ID.
• The pin you drop on the map is a quiz answer, not your real location. We don't access your real location, contacts or photos.
• The app has no advertising SDK, no analytics tool and no cross-app tracking. We don't sell your data.
• You can delete your data on our server in one step under Settings → Privacy → Delete my online data.

Data that stays on your phone

Your language, appearance and sound settings; your game progress (rounds, scores, streak, level, badges); the places you have discovered; your reminder time and the question reports you prepare while offline are stored only on your phone and are not sent to us. The home screen widget sees only your language, the playable days and a summary of your scores. Daily reminders are local notifications created on your phone; permission is optional and can be changed at any time in your iPhone Settings. You can remove all of this by deleting the app.

Data processed on our server

To serve the daily round and to score it fairly, we process the following data:

• Guest player ID: an ID generated at random when the app is first opened. Your name, email or phone number are not linked to it. The session key stays in your iPhone's secure Keychain.
• Round data: the rounds you play, the coordinates of the pins you drop on the map, your scores, and question start and end times used to verify the 30-second timer.
• Question reports: the description you write when you report a question. If you are offline, the report goes to info@eightup.ai through the email app you choose.
• Security records: request counters that limit abuse, and technical logs kept by our server provider for security and operation (IP address, time, request details).

In this version your scores are not shown to other players; there is no public ranking.

Why, and on what legal basis

We process this data to serve the daily round and score it fairly on the server, to prevent cheating and abuse, and to fix reported questions.

Our legal bases are the following cases in Article 5(2) of the KVKK: processing is directly related to the conclusion and performance of a contract, so that we can provide the game (point c); it is necessary to fulfil our legal obligations (point ç); and our legitimate interest in security and cheat prevention, provided that it does not harm your fundamental rights and freedoms (point f). The data is collected through the app, electronically and by automated means. We do not process your data on the basis of explicit consent.

Who it is shared with, and where it is stored

• Our server provider: online data is processed and stored on our behalf by Supabase Pte. Ltd. (Singapore), which provides our server and database infrastructure, in its data centre in Germany (Frankfurt).
• Our website provider: the play.eightup.ai website is hosted by Vercel Inc. (USA); access logs are kept on Vercel's servers.
• Email: correspondence with info@eightup.ai is stored on Google Workspace (Google LLC / Google Ireland Ltd.).
• Apple: distributes the app through the App Store. If "Share with App Developers" is on in your iPhone, Apple passes crash and usage reports to us without your identity.
• Competent authorities: with competent public authorities where the law requires it.

These providers' servers are abroad. Transfers abroad are made under Article 9 of the KVKK, by signing the standard contracts published by the Personal Data Protection Board and notifying the Authority within 5 business days of signing; where a standard contract is not possible, they rely on the exceptions in Article 9(6) (in particular, that the transfer is necessary to provide the game). We obtain technical and organisational security commitments from our providers.

How long we keep it

• Your guest ID and round data are kept until you delete your online data. A guest ID that does not play at all for 12 months is deleted automatically, together with its data.
• Question reports are deleted at the latest 12 months after the question is fixed.
• Our server provider's technical logs are kept for 7 days and backups for 7 days; deleted data leaves the backups within 7 days at the latest.
• Support and KVKK request correspondence is kept for 3 years.
• The data on your phone stays on your phone until you delete the app.

Deleting your online data

In the app, go to Settings → Privacy → Delete my online data. Deletion happens immediately and cannot be undone; the offline game records on your phone are kept. Your phone gets a new guest ID with the next round. If you cannot reach the app, write to info@eightup.ai.

Your rights

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed; to request information if it is; to learn the purpose of the processing and whether it is used for that purpose; to know the third parties in Turkey or abroad to whom it is transferred; to ask for it to be corrected if it is incomplete or wrong; to ask for it to be deleted or destroyed under the conditions in Article 7 of the KVKK; to ask that these corrections and deletions be notified to the third parties it was transferred to; to object to a result against you that arises solely from analysis by automated systems; and to claim compensation if you suffer damage because of unlawful processing.

You can send your request, in line with the Communiqué on the Procedures and Principles for Applications to the Data Controller, with the form on the eightup.ai/yasal/kvkk-basvuru page to info@eightup.ai, or in writing to our company address. We conclude your request free of charge within 30 days at the latest. Because your guest ID is not linked to a name or email, we may ask for the player ID shown under Settings → Privacy so that we can find your data.

Children

eightup play is a knowledge game for everyone. In this version there is no field where a name, nickname or other personal information can be entered. We recommend that children play under the supervision of a parent or guardian.

This website

play.eightup.ai uses no cookies and does no visitor analytics. Vercel, which hosts the site, may keep short-lived access logs (IP address, browser details, time) for security and operation; these logs are processed on servers abroad.

Changes

When we update this notice we change the date at the top; we also announce important changes in the app. Before online features such as friends, groups, the league and challenges open, this notice will be updated to explain which data will be processed, for what purpose and shared with whom.

Contact

EIGHT UP BİLİŞİM ENERJİ VE TURİZM A.Ş. · Maslak Mah. AOS 55. Sk. 42 Maslak A Blok No: 2 İç Kapı No: 208, Sarıyer/İstanbul · info@eightup.ai