PointToPlay

PointToPlay — Privacy Policy

Effective date: 19 August 2026 Last updated: 9 October 2026

The Turkish version is the primary document; this translation is kept in step with it.

1. Information we collect

1.1 Account information

InformationRequiredWhy
Email addressYesSign-in, account verification, password reset
PasswordYesStored only as an Argon2id hash; the password itself is never stored
Display nameNoTo address you inside the app
UsernameNoSo your friends can find you and you appear in lists
Profile photoNoShown on your profile and in lists (see 1.6)

If you sign in with Google you do not create a password. Instead we store the account identifier Google gives us and your email address; this link is removed when you delete your account. We never have access to your Google password.

If you sign in with Apple you do not create a password either. We store the account identifier Apple gives us and — if you choose to share it — your email address (which may be Apple's private relay address). When you delete your account, the app's authorization on your Apple account is revoked as well. We never have access to your Apple ID password.

1.2 Location information

The app records your location only while you have an active trip running.

InformationWhy
Precise location (latitude, longitude)To measure the distance you travel
Location accuracyTo decide whether a measurement is trustworthy
TimestampSpeed and duration calculation

No location is collected outside an active trip.

When you open the map or view nearby bonus zones, your location is used at that moment but not stored.

1.3 Activity information

visited a point, and how many times. This is kept to compute your discovery progress and achievements, and is fully deleted when you delete your account.

1.4 Device information

InformationWhy
Device identifierA number generated by the app itself. Used to distinguish your sessions and to prevent abuse
Device model, OS versionSo you can recognise your devices in the "Active sessions" screen
App versionError diagnosis
IP addressTemporarily in server logs; security and abuse detection

No Advertising ID is used. We do not track you across apps.

1.5 What we do not collect

Your contacts, messages, calendar, files, browsing history, payment information and health data other than your step count and walking distance is never accessed. Your step count and walking distance are read only if you allow it (see 1.8). Your photos are accessed only when you choose a profile photo, and only the single photo you select (see 1.6).

1.6 Profile photo and what other users see

Uploading a profile photo is optional. The photo you pick from your gallery or take with the camera is uploaded; the rest of your gallery is never accessed.

our servers.

server**; where the photo was taken is never shown to others.

What other users see: your username, display name, profile photo and the avatar/frame you choose — on your profile, in friend and group lists and, if you opt in, on the leaderboard. Your email address and location are never shown to other users.

Inappropriate photos can be reported. When several people report a photo it is put under review and hidden from everyone meanwhile; after review an administrator may remove it or put it back. The image of a removed photo is deleted.

1.7 Reports

When you report a user or a profile photo, the reason, any description you write and the date are stored. The person you report cannot see who reported them; only the administrators reviewing the report can.

1.8 Step data (Apple Health / Health Connect)

Using the step counter is optional. When you allow it, only your step count and — on iPhone — your walking/running distance are read from your phone's health source (Apple Health on iPhone, Health Connect on Android). Other health data such as heart rate, sleep or weight is never accessed, and nothing is written to your health source. Manually entered step records are not counted. Walking distance is shown only on your phone, in the chart, and is never sent to our server.

your chart, streak and records.

total is sent to our servers so we can verify your daily goal and grant the XP and points reward. Hour-by-hour measurements and raw health records are never sent**.

not shared with any third party**. Step rewards do not appear on the leaderboard.

Connect settings; after that no new steps are read.

1.9 Usage statistics

To improve the app we count which screens are used. For example: opening the app, opening the map or a place page, requesting a route, starting or completing a trip.

any analytics or advertising company.

Distance and duration are stored only as rough ranges (for example "1–5 km").

Records made before you sign in carry only a random installation number created by the app. It is not a hardware identifier and it is renewed when you sign out.

Settings > Share usage statistics ("Kullanım istatistiklerini paylaş"). When you do, records waiting on your phone are deleted and no new ones are collected.

1.10 Walk Together

When you and a friend walk or cycle at the same time, we compare both of your trip location records on our server to verify that you were side by side. If so, you both receive a small points bonus.

1.11 Premium subscription

If you buy Premium through the App Store or Google Play, the payment is handled by the store. Your card, bank and billing details and the amount you paid never reach us.

To verify your subscription we store: the product you bought, the subscription's status and expiry date, whether auto-renewal is on, the store's transaction number and the purchase record issued by the store (encrypted). These records are deleted when your account is deleted.

1.12 Advertising

Users who do not have Premium see ads in the app. Ads are served by Google AdMob.


2. How we use information

  1. Account management — sign-in, verification, password reset
  2. Core app function — measuring distance, calculating points, showing

your position and bonus zones on the map

  1. Abuse prevention — detecting mock locations, impossible speeds and

repeated reward claims

  1. Security — protecting your sessions, preventing unauthorised access
  2. Social features and a safe community — showing your profile, friend

and group lists and the leaderboard; reviewing reports and removing inappropriate content

  1. Error diagnosis — understanding why the app crashed
  2. Step reward — if you allowed it, verifying your daily step goal and

granting the XP and points reward (see 1.8)

  1. Improving the app — understanding which features are used and where

people get stuck (see 1.9; can be turned off)

Your information is not sold. The ads you see are not personalised (see 1.12).


3. How location is used

When it is collected

Only when you tap "Start Activity". Collection stops completely when you pause or finish the trip.

With the screen off

During a trip you may choose to let tracking continue when you put your phone in your pocket, so your distance is recorded in full.

This choice is presented explicitly and declining is a real option — if you decline, tracking still works while the app is open.

While tracking runs, a persistent notification is shown on your phone. You can always see when you are being tracked.

Background location permission

When you start a trip and choose to keep recording with the screen off, your location is recorded during that trip while the phone is locked or the app is in the background as well; otherwise the distance you walk with the phone in your pocket could not be measured. You can always see that you are being tracked: a persistent notification on Android, the location indicator at the top of the screen on iPhone.

Tracking stops when you finish or pause the trip. If you close the app, the trip is ended by the server shortly afterwards. No background location is collected outside a trip. The app does not request Android's "allow all the time" permission; on iPhone "While Using the App" is sufficient.

Why precise location is required

Rewards are calculated from the distance you travel. Approximate location is accurate to city scale and cannot be used to measure distance. If you grant only approximate location you can still see the map and bonus zones, but trip tracking cannot start.


4. Sharing of information

Your personal information is not sold or rented. What reaches Google for showing ads is limited to the items listed in 1.12.

Information is transmitted only to the following service providers, and only to the extent the service requires:

Service providerWhat is sentWhy
Google Maps PlatformYour search text, coordinates for map and routesPlace search, route calculation, geocoding
Google Play IntegrityDevice integrity verification tokenDetecting tampered devices
Firebase Cloud Messaging (Google) / Apple Push Notification serviceYour device's notification token and the notification textSending you notifications (you can turn them off)
Google Play BillingPurchase tokenVerifying your Premium subscription
Google AdMobIP address, device and app information, an app-specific identifier, records of ad impressions and clicksShowing non-personalised ads to users without Premium
Apple App Store (In-App Purchase)Nothing is sent from us to Apple. Payment is handled by Apple; the transaction record signed by Apple reaches us through the appVerifying your Premium subscription
Apple (Sign in with Apple)Sign-in verification token; an authorization revocation request when the account is deletedLetting you sign in with your Apple account and removing the link on deletion
Resend (email delivery)Your email address and the content of the messageDelivering verification, password reset and security notification emails to you

Other users: your username, display name, profile photo and avatar are visible to other users of the app (see 1.6).

Your step data is not passed to any of the service providers above or to other users (see 1.8).

Crash reporting (Sentry or similar) is not used: when the app crashes, no report is sent to any third party.

Where legally required (court order, official request), information may be disclosed to the extent the law requires.


5. Data security

LayerProtection
TransmissionHTTPS required; cleartext connections are rejected
Database on your phoneEncrypted with SQLCipher
Your session tokensEncrypted storage backed by the Android Keystore / iOS Keychain
Profile photosLocation and other metadata (EXIF) removed on the server; only validated JPEG images are accepted
Your passwordHashed with Argon2id; never stored in plain text
Device backupDisabled — app data is not backed up to the cloud or transferred to a new device
Server logsTokens, passwords and coordinates are redacted

No system is completely secure. We take reasonable technical and organisational measures but cannot guarantee absolute security.


6. Data retention

DataRetention
Account informationWhile your account exists
Search historyLimited period and record count (configurable)
Raw GPS location points30 days — then permanently deleted
Trip records (summary)365 days — then permanently deleted
Fraud and security events365 days — or until an open investigation closes
Profile photoUntil you remove or replace it; if an administrator removes it, the image is deleted immediately
ReportsKept as moderation records; reports you made are deleted when you delete your account
Daily step totals (server)While your account exists; deleted when you delete your account
Usage statistics13 months — then permanently deleted. When you delete your account, the records are immediately disconnected from it
Point transactionsRetained in anonymised form (see below)
Audit recordsRetained in anonymised form (see below)

Raw location data is deleted even while your account is active. GPS points older than 30 days are removed on a regular schedule, whether or not you do anything.

Why point transactions and audit records are not deleted

These two record types are designed to be immutable: the database itself refuses to delete or modify them. That is what makes the reward history and the security trail impossible to tamper with after the fact.

The direct consequence is this: when the period expires, these rows are not deleted. Our target retention period is 1095 days, but we cannot enforce that period by deletion — and we will not tell you they will be deleted.

Instead, the link to your identity is severed: when you delete your account, your email address, name, username and location are irreversibly removed. The remaining rows contain no name, email, coordinates or distance — only an amount, a source type and a timestamp, and these no longer point to a person but to an anonymous record.


7. Deleting your account and data

From the app

Settings → Delete my account

After confirming your identity, your request is recorded: accounts with a password enter their password, accounts created with Google sign in with Google again. Your sessions close immediately and notifications stop.

Your store subscription is separate. Deleting your account does not cancel it; the subscription lives on the App Store or Google Play side. To stop being charged you must cancel it separately: on iPhone in Settings > Apple Account > Subscriptions, on Android in Google Play > Subscriptions.

The request is processed after 30 days. During this period you can sign in and cancel it — in case you change your mind.

From the web

https://pointtoplay.com/account-deletion

What is deleted

What remains

Your point transactions and operation records remain stored in a form that is disconnected from your account.

Why: these records form the system's accounting. If deleted, the correctness of past rewards could never be audited again. They contain no information that identifies you; your email address and name are irreversibly removed.


8. Your rights

Depending on your jurisdiction you may have the right to:

For requests: pointtoplayapp@gmail.com

If you are in Türkiye, your rights under Law No. 6698 on the Protection of Personal Data are reserved, including the right to complain to the Personal Data Protection Board.


9. Children's privacy

The app is not directed at children under 13 and we do not knowingly collect personal data from them.

If we learn that we have collected information from a child under 13, we will delete the account and its data. If you become aware of such a case, contact pointtoplayapp@gmail.com.


10. Changes to this policy

This policy may be updated from time to time. You will be informed in the app of any significant change and the "last updated" date above will change.


11. Contact

PointToPlay is published by an individual developer.

Data controller / Developer: Said Akça Application: PointToPlay Privacy contact: pointtoplayapp@gmail.com Support: pointtoplayapp@gmail.com Web: https://pointtoplay.com

Use the email address above for privacy, data access and deletion requests. Requests are answered within 30 days at the latest.