1. Scope and controller
This policy explains what personal data is processed when you use the Aura Games mobile app (Android and iOS) and the auragames.app website, why, and what your rights are.
The controller is Mert Melih Aytemur, who develops and publishes the app as an individual (Türkiye). For any question about this policy or your data: sketchhero.team@gmail.com.
Aura is for people aged 18 and over. If you are under 18, do not use the app.
2. What we collect
Account
- Sign in with Google (Android): your Google account's unique ID, your verified email address, and your name as a suggestion for your display name. We never receive your Google password or access to your Google account.
- Sign in with Apple (iOS): your Apple account's unique ID, your email address (which may be Apple's private relay address) and your name if you share it.
Profile
- The display name you choose, an avatar from a fixed set, your country, a short bio of up to 30 characters, your app language and the language you speak in games.
- Your display name, avatar, country and bio are visible to other players. Your email address is never shown to anyone.
- There is no photo upload.
Friends and messages
- Your friends, friend requests, the people you block, and your notifications (such as game invites).
- Your conversations with friends: text messages and voice messages of up to 60 seconds. Voice messages are transcribed on our own server so they can be read; the audio is not sent to any other company for this.
- Messages are encrypted in transit but are not end-to-end encrypted.
- Your online/in-game status is shown to your friends and is not stored.
Games
- Room chat: text chat in a game room is kept only in the server's memory while the room is open and is gone when it closes. A message someone reports is kept as evidence.
- Voice chat: voice chat during a game is relayed to the other players through LiveKit. Voice chat is never recorded.
- Live captions: when captions are on, your speech is turned into text on your phone by its own speech recognition. The audio never leaves your phone; only the resulting text is passed through our server to the other players in the room, and it is not stored.
- Translation: other people's messages and captions are translated on your phone; the text is not sent to us or anyone else to be translated.
- Game history: the games you played, who with, points and places.
- Sentences you write yourself in some games are used only while the game lasts and are not stored.
Safety
- Reports you make or that are made about you (the reason and, where there is one, the reported message), removals from rooms, and the account restrictions based on them.
Device and technical data
- Notification token: your device's push token, so we can send you notifications. A notification never contains the message itself.
- App version and platform (Android/iOS): for update prompts and announcements.
- IP address: in server logs and to limit abuse.
- Crash reports: on Android, when the app crashes, Google Firebase Crashlytics receives the device model, operating system version and the technical details of the error. On iOS, the technical diagnostic reports Apple provides are sent to our server.
- Device backup: Android may include the app's data (including your profile details and a cache of recent messages) in your device backup to your Google account, according to your own settings. Your session key is encrypted so that it cannot be restored from that backup.
What we do not collect
We do not collect location, contacts, photos, advertising IDs, analytics or tracking data, or payment details. There are no ads in the app.
Permissions
The microphone is used only for voice chat, voice messages and live captions; notifications only for notifications. You can turn either off in your device settings.
3. Why we use it, and on what basis
- To run your account and provide the games, friends and messaging — performing our contract with you (GDPR Art. 6(1)(b); KVKK Art. 5/2-c).
- Safety and moderation: reviewing reports, preventing abuse, restricting accounts that break the rules — legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5/2-f).
- Finding bugs and keeping the app working (crash reports, server logs) — legitimate interests.
- Legal obligations: lawful requests from authorities (GDPR Art. 6(1)(c); KVKK Art. 5/2-ç).
We do not sell your data or use it for advertising or profiling.
5. How long we keep it
- Account, profile, friends, game history: until you delete your account.
- Messages and voice messages: until either person in the conversation deletes their account. When an account is deleted, every conversation it was part of is deleted for the other person too.
- Room chat and live caption text: not stored; gone when the room closes.
- Reports and moderation records: kept for the community's safety. When you delete your account, your identity is removed from the reports you made.
- Database backups: up to 90 days; deleted data leaves the backups at the end of that period.
- Server logs: capped by size and removed automatically after a short time.
- Crash and diagnostic reports: Google's retention for Crashlytics; 90 days for iOS diagnostics.
6. Deleting your account
You can delete your account at any time in the app: Profile → Account → Delete account. Details: Delete your account.
Deletion removes your profile, friendships, notifications, game records, messages, voice message files, device notification tokens and sessions.
7. Age limit
Aura is meant for adults; some games involve alcohol and adult content. We do not knowingly collect data from anyone under 18. If we learn that someone under 18 has an account, we delete the account and its data.
8. Your rights
Under the GDPR where it applies, and Article 11 of Turkey's Law No. 6698 (KVKK), you can: find out whether we process your data and get information about it, learn why it is processed and who it is shared with, have incomplete or wrong data corrected, ask for it to be deleted, have those corrections or deletions passed on to recipients, object to a decision made against you solely by automated means, receive a copy of your data, object to processing based on legitimate interests, and seek compensation for damage caused by unlawful processing.
You can change your profile and delete your account in the app. For anything else, write to sketchhero.team@gmail.com; we answer within 30 days. You can also complain to your data protection authority (in Türkiye, the Personal Data Protection Board).
9. Security
All traffic between the app and our servers is encrypted (HTTPS/TLS). Session keys are stored on the server only as hashes, and on your device encrypted with the device's secure key store. The database is not reachable from the internet. No system is perfectly secure, so we suggest not sharing sensitive information in messages.
10. Changes and contact
We update this policy as the app changes and announce important changes in the app. The date at the top shows the last update.
Mert Melih Aytemur · sketchhero.team@gmail.com