1. About this policy

This policy covers the Futico app on iOS and Android and the futico.app website, including the invite pages that open a match room. Futico is developed and operated from Türkiye, and we are the data controller for everything described here. Wherever this policy says "we" or "us", it means the Futico team. To reach us about your data, email info@futico.app.

2. Playing as a guest vs. with an account

You can start playing without giving us anything: "Continue as guest" creates an anonymous account tied to your install rather than to your name or email. A guest profile still stores what the game needs in order to run on our servers — a random installation identifier, your progress, coins earned and the matches you play — but it has no email address, no username and no photo, and it does not identify you as a person. If you sign up later, that progress is carried over to your new account. Guest progress belongs to the install: delete the app or reset the guest session before signing up and it is gone for good.

3. What we collect

• Account & profile — your email address (only if you sign in with an email code, Google or Apple), your username, and optionally a display name, a profile photo, a favourite club and a country flag, plus your app language and theme choice. • Progress & gameplay — matches you play and their results, the grids and answers within a match, XP, level, rank and rating, streaks, daily and weekly quests, achievements, your Career collection, Connections puzzle results, energy and coin balances, hints (jokers) and emotes, Season Pass progress, and the cosmetics you own or have equipped (kits, stadiums, board themes, avatar frames, effects). • Social — your friends and friend requests, an online/offline presence signal so friends can see when you are around, match invites, and the private rooms you create or join. • Purchases — which product you bought, when, and what it unlocked (for example the "No Ads" entitlement). We never see your card details. • Device & technical — platform (iOS or Android), app version, a random installation identifier we generate on first launch and store on your device, the language and region your operating system reports, and a push token if you allow notifications. • Usage analytics — in-app events such as "app opened", "market opened", "matchmaking cancelled" and screen views, batched and sent to our own backend so we can see where the game confuses people. There is no third-party analytics SDK in the app, and these events are never used to build an advertising profile. • Support, reports & feedback — the category and text of any feedback you send (with your app version and platform), and reports you file about another player, with the reason and your note. • Website — see section 16.

4. How you sign in

There are four ways in: continue as a guest, a one-time code sent to your email, Google, or Apple. For the email code we pass your address to Resend, our transactional email provider, so the message can be delivered; we then store the address on your account. With Google or Apple we receive a signed identity token containing a stable identifier and the email address on that account — and with Apple you can choose to hide your real address, in which case we only ever see the relay one. We never receive your Google or Apple password, and we never post anything to those accounts.

5. Why we use your data

To provide the game you asked for — accounts, matchmaking, online duels, private rooms, leaderboards, quests, seasons, friends, cosmetics and keeping progress in sync across devices (to perform our contract with you). To keep the game fair and safe — anti-cheat, profanity and impersonation checks, handling reports and enforcing bans (our legitimate interest, and yours). To show ads, which is what pays for the free version (your consent where the law requires it — see section 6; otherwise our legitimate interest). To send the notifications you switched on (your consent). To improve Futico using aggregated, anonymous usage data (legitimate interest). To meet accounting, tax and legal obligations for purchases (legal obligation). We do not sell your personal data, we do not share it for cross-app advertising of other products, and we do not build advertising profiles ourselves.

6. Ads, and your ad choices

Futico is free and partly funded by ads served through Google AdMob. Only two formats appear. Full-screen interstitials are shown automatically at natural breaks — after a finished game, never mid-match — and are limited by a frequency cadence, a minimum time gap, a daily cap, and a grace period so new players see none at first. Rewarded video is entirely your choice: you watch it to refill energy, unlock a hint or top up in-game items, and nothing is taken away if you skip it. There are no banner ads anywhere in the app. Ad content is capped at a PG rating, and our ad requests are not tagged as child-directed. Ad providers may use device and advertising identifiers, your IP address, and coarse interaction data to deliver, cap and measure ads. Your choices: on iOS, we show Apple’s App Tracking Transparency prompt before any tracking and you can decline; in the EEA, the UK and Switzerland, Google’s consent form appears at first launch and no personalised ad request is made if you refuse; on Android you can delete or reset your advertising ID under Settings → Google → Ads; and the one-time "No Ads" purchase permanently switches off the automatic full-screen ads (optional rewarded video stays available if you still want the rewards). Google explains its own ad data processing at policies.google.com/technologies/ads.

7. In-app purchases

Purchases are optional: coin packs, the Coach Pack starter bundle, the Season Pass and the "No Ads" upgrade. They are billed by the Apple App Store or Google Play and managed through RevenueCat, our purchase infrastructure provider. Apple or Google take the payment and only tell us — through RevenueCat and a secure webhook to our backend — that a purchase succeeded for your account, so we can credit the coins or unlock the entitlement. We receive a store transaction identifier, the product, the price, the currency and the store country. We never receive or store card numbers, bank details or your billing address.

8. Notifications

If you allow notifications, we store an Expo push token for that device and use Expo’s push service — which relays through Apple’s APNs and Google’s FCM — to alert you about friend requests and accepts, reminders, events and system messages. You can turn each type off individually in Settings → Notifications, or all of them in your device settings. Because a push token belongs to the device rather than to an account, we re-assign it to whoever signed in last, so notifications never surface for the wrong person on a shared phone.

9. What other players can see

Your username, display name, profile photo, avatar frame, level and title, country flag, favourite club, rank and rating, achievements, equipped cosmetics and recent match history are visible to other players on your profile and on the global, country and friends leaderboards. Friends can additionally see an online/offline indicator. Your email address, your purchases, your coin balance and anything you send us privately are never shown to other players. If you would rather not be identifiable, leave the display name, photo, country and favourite club empty — none of them is required to play.

10. Moderation, reports & fair play

Usernames, display names and any custom text you put on a kit or a stadium pass through an automatic profanity and impersonation filter before they are saved, and can be reviewed and reset by us afterwards. When you report another player we store your account id alongside the report so we can follow up and prevent abuse of the reporting system; we never tell the reported player who filed it. We also log game events server-side — matches, purchases, currency changes — to detect cheating and fraud, because a client can be tampered with and the server cannot. Automated checks may flag or restrict an account; if you believe a restriction is wrong, email us and we will review it.

11. Service providers & international transfers

We share data only with providers that help us run Futico, each acting on our instructions under its own agreement and privacy policy: • Supabase — backend hosting, database, authentication and image storage (including profile photos). • Google AdMob and Google’s User Messaging Platform — advertising and ad-consent management. • Google Sign-In and Apple’s Sign in with Apple — optional authentication. • RevenueCat, together with the Apple App Store and Google Play — purchases and entitlements. • Expo — over-the-air app updates and the push notification service (via Apple APNs and Google FCM). • Resend — the transactional email that carries your one-time sign-in code. • Vercel — hosting and cookieless traffic analytics for the futico.app website. • jsDelivr and GitHub — only if you switch on the optional community logo pack in Settings. That content is community-provided, hosted outside our infrastructure, and downloading it means your IP address is visible to that CDN, as with any download. Some of these providers store or process data outside your country, including in the United States. Where that happens we rely on the transfer safeguards those providers offer, such as the EU Standard Contractual Clauses. We share your data with nobody else, and we never sell it.

12. How long we keep data

Account, profile and progress data is kept for as long as your account exists. When you delete your account we deactivate it immediately and then delete or irreversibly anonymise the personal parts — email, names, photo, push tokens — within 30 days; aggregate game statistics that can no longer be tied to you may remain. Purchase records are kept as long as accounting and tax law requires (up to 10 years in Türkiye). Moderation records — reports, bans and the evidence behind them — are kept for up to 24 months, so that a banned account cannot simply reappear. Guest accounts that are never converted and stay inactive for 12 months are deleted.

13. Security

Traffic between the app and our backend is encrypted in transit with TLS. The database uses row-level security so one account cannot read another’s private data, purchases and currency changes are verified and applied server-side rather than trusted from the app, and access to production systems is limited to the people who need it. No system is ever completely secure, but if a breach affects your personal data we will notify you and the competent authority as the law requires.

14. Your rights & deleting your account

You can ask for a copy of your data, have it corrected, restrict or object to a particular use, withdraw a consent, or have it deleted. Email info@futico.app from the address on your account and we will answer within 30 days. You can also delete your account yourself at any time: Settings → Delete account. Notification and tracking consents can be withdrawn in your device settings whenever you like. Depending on where you live you may have further rights under the GDPR, the UK GDPR, Türkiye’s KVKK or your local law, including the right to complain to your data protection authority — in Türkiye, the KVKK Board.

15. Children

Futico is made for a general audience, but it is not directed at children under 13, or under the higher minimum age that applies where you live (16 in some EEA countries). We do not knowingly collect personal data from children below that age, our ad requests are not tagged as child-directed, and ad content is capped at a PG rating. If you are a parent or guardian and believe your child has created an account, email us and we will delete it.

16. The futico.app website & cookies

The website is a marketing site: it sells nothing and needs no account. It sets no advertising or tracking cookies. It uses Vercel Web Analytics, which counts page views without cookies and without storing an identifier that could single you out, and it remembers your language choice locally in your browser. The /game/join invite page simply reads the room code from the link you clicked; if the app is installed, your device opens the app instead of the page. Store badges link out to the Apple App Store and Google Play, whose own policies apply once you are there.

17. Changes to this policy

We will update this page as the game changes. Substantial changes get a new "last updated" date here and, where they materially affect you, an in-app notice as well.

18. Contact

Questions about this policy, or a request about your data? Email info@futico.app and we will get back to you. You can also reach us from the app: Settings → Feedback.