1. Scope and contact
Developer: mrbaris. Support and privacy requests: info@bumgame.app.
This policy covers the iOS and Android versions of the Bum: Voice Word Game app (in Turkish: Bum: Sesli Kelime Yarışı) and this promotional and support website. You don’t need to sign up with a real name, e-mail address or password to play. If you e-mail us for support, we process your address and your message to answer your request.
From version 1.1, the app creates an anonymous player account with a random ID for online play, progress backup and purchase verification. No real name, e-mail address or password is requested (sections 3 and 4). In online matches, other players see the name on your profile, your character and your level. There is no voice, messaging or chat between players (sections 2 and 3). The iOS version shows ads to keep Bum free: optional rewarded videos and occasional interstitial ads between games (section 4). Bum Pro shows no ads; the one-time No Ads purchase removes interstitial ads. The Android version shows the same ads starting with its first ad-supported release. Section 2 applies to speech recognition. Bum 1.0, by contrast, runs entirely on your device: it doesn’t create a player account, doesn’t connect to the game server and shows no ads.
2. Microphone and speech recognition
The microphone is used by the push-to-talk feature to turn the word you say into text. When on-device recognition is supported, it is used first. Because of the device, the language pack or a recognition error, the online service of Apple on iOS, or of the device’s system speech recognition provider on Android, may be used. In that case, your voice may be processed by that provider under its own terms. You can remove the microphone permission in your phone settings and carry on with the TYPE option.
Your voice doesn’t go to other players: Bum doesn’t store your voice and doesn’t send audio to the game server or to other players. In online matches too, your opponents don’t hear your voice; they only see your answer word (section 3).
3. Account, profile and game information
| Information | Purpose and visibility |
|---|---|
| Random device and player ID | Online session, progress backup and purchase entitlements. Although it contains no real name, this ID may qualify as personal data. |
| Account protection with Apple / Google (optional) | If you choose Continue with Apple or Continue with Google in your profile, the permanent account ID that Apple or Google issues for this app is linked to your player account, so your progress comes back when you sign in the same way on a new phone. Your name and email are not requested or stored. If you linked Apple, the authorization token Apple issues is kept only on the server and revoked at Apple when you delete your account. |
| Player name | The name you type on your profile (if you don’t, you get a name like “Bum1234”). Stored on the game server with the profile backup; the backup itself is not visible to other players. This name is shown to other players in online matches, in the open rooms list and in your BUM LEAGUE group; it also appears in the link when you share your Daily Game result yourself (section 5). The server checks the name for swear words before showing it; an unsuitable name is replaced with one like “Bum1234”. |
| Character and level | Player profile. Shown to other players together with your player name in online matches and in your BUM LEAGUE group. |
| BUM LEAGUE | Your weekly trophies, league tier, group and rank, league rewards and selected character are kept on the game server, linked to your account. Players in the same league group see only your online player name, your character and your trophies. Daily trophy totals and game counts may be checked for fair play. |
| Table invite | When you open the invite QR code, the game server keeps a short invite code, its expiry, whether it was used and the end of the 24-hour window it opened, linked to your account; the phone that uses the invite also keeps which code was used and when. No name, contacts or location are collected; the inviter and the invited player don’t see each other’s identity. |
| Progress and statistics | XP, achievements, numbers of games and wins, and quest and word counts on the device; the profile backup on the online server. |
| Answer texts | In online matches: checking the rule and showing the answer to the other players. Processed in the match’s working memory. |
| Word Treasure and dictionary | The word list and dictionary lookups are processed on the device; some aggregate statistics are included in the profile backup. |
“Anonymous account” means that you don’t need to sign up with a real name; it does not mean that the account cannot be linked to you at all.
4. Purchases and ads
Purchases: payment is taken by Apple or Google. Your card details don’t reach us. RevenueCat processes your player ID together with transaction and subscription information to verify and restore purchases. The game server stores your Pro and ad-free entitlements.
Ads: ads are shown through Unity Technologies’ services: Unity LevelPlay (ironSource infrastructure) for ad mediation, and Unity Ads as the ad network. These providers may process the following data to show ads, measure impressions and interactions, and prevent fraud and abuse: the advertising ID (IDFA on iOS; only if you allow cross-app tracking), device and app information including the identifier for vendors (IDFV) (e.g. device model, operating system, app version), approximate location derived from the IP address, and ad interactions such as ad impressions and clicks. Your player ID is not sent to ad providers.
Personalization and consent: you are asked once, after your first game. On iOS, the system’s App Tracking Transparency (ATT) prompt opens; personalized ads and the advertising ID are used only if you allow it. On other platforms, you choose in the app’s Keep Bum free window; under KVKK (Türkiye’s Personal Data Protection Law) and the GDPR, personalized ads are shown only with your explicit consent. If you don’t consent, you see general (non-personalized) ads; these may also process the technical data above for delivery, measurement and security. You can change your decision on iOS in Settings → Privacy & Security → Tracking, and on other platforms with the Profile → gear (SETTINGS) → Personalized ads option. Refusing consent doesn’t stop you from using the game.
Only you can start a rewarded ad (+1 life, +1 pass, XP ×2, joker). Interstitial ads are shown only between games, when you leave the results screen, and with limited frequency; they are not shown during a game. Bum Pro shows no ads; the one-time No Ads purchase removes interstitial ads, while optional rewarded ads remain. There are no ads in Bum 1.0 and, for now, in the Android version. The current purchase features are explained on the offer screen in the app.
5. Usage, notifications and support
Result sharing and acquisition measurement: choosing to share a result card creates a random code valid for 30 days. The game server privately stores the mode, score, expiry and its link to your account. For a friend challenge, its rules, language, dictionary version and completion time are also stored so the recipient can play the same game; answer words are not sent. The URL contains no name or player ID; an app receiving the code can read the shared mode and score. For new players, the first shared-link source, first completed game and first verified paid purchase time are linked to the anonymous player account. Daily reports show only totals. On Android, only this code is extracted from the Google Play install referrer; the raw referrer is not sent to our server and no advertising ID is used for this measurement. Deleting your account also removes your own links and acquisition record; aggregate counters may remain. The share image is prepared on your device, and you complete sharing through the system sheet.
Daily counters on feature usage, the app version and platform information may be sent to the game server through your session. The counters are kept on the server as daily totals; during the session, the server knows your account’s ID. Technical records linked to the account may be processed for security and rate limiting. During a connection, the IP address and time information are processed by the hosting infrastructure.
Daily Game and streak reminders are scheduled locally on your device when you allow them. You can turn notifications off in the app or in your phone settings.
Family leaderboard: when you share your Daily Game result, the link that is created contains your profile name (up to 12 letters), your score, your number of correct answers, your time and a random tag that changes every day; it doesn’t contain the words you said. You decide who you share the link with; the person who receives it can forward it to others. The leaderboard travels inside the link and is not stored on a server: the app or web page that opens the link reads the leaderboard on the device. In support e-mails, we process your address, your message and any device or transaction details you choose to send. We don’t ask you to send a password, card details or an identity document.
6. Recipients and services abroad
Within the scope of their functions, data may be shared with server hosting services for online play, Apple or the device’s system provider for speech recognition, RevenueCat for purchase management, and Unity Technologies’ Unity LevelPlay (ironSource) and Unity Ads services for ad mediation and delivery. Support e-mails are processed on Gmail’s infrastructure. In online matches, your player name, your character, your level and your answer words are shown to the other players in the match; your voice is not passed on to them.
These providers’ services may involve processing data outside Türkiye. Data processing terms that depend on the service, country and provider concerned apply. Where a legally valid basis or transfer mechanism is required, the related obligations must be fulfilled.
7. Retention and deletion
The player account and the profile backup on the server are kept for the game service until you delete your account. The BUM LEAGUE record (trophies, tier, group, rewards) and the table invite record are also kept until you delete your account; group results of closed weeks are kept for at most 8 weeks. Match answers are used in temporary memory for the duration of the match. No audio is sent to the game server; no voice recordings or archives are kept. You can clear the progress on your device with the account deletion option.
The daily database backups of the server setup are rotated out within about 16 days, allowing for how file age is calculated and when the daily cleanup runs. Account deletion covers removal from the active system; backup copies drop out through rotation. Transaction records of the stores and providers are subject to their own retention obligations.
Technical logs are renewed by the server’s size-based rotating log system, so no fixed number of days is promised. Support correspondence is kept to resolve the request and for necessary legal obligations. You can ask for information about the retention or deletion of a specific record at our contact address. Aggregate counters that cannot be linked to an account may remain after the account is deleted.
8. Permissions and your rights
Under KVKK (Türkiye’s Personal Data Protection Law), you can exercise your rights to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and the recipients, to have incomplete or incorrect data corrected, to request deletion or destruction when the conditions are met and to have recipients notified, to object to a result against you that arises solely from automated analysis, and to claim compensation for damage caused by unlawful processing. Where the GDPR applies, your rights of access, rectification, erasure, restriction, portability and objection, and your right to lodge a complaint with the competent supervisory authority, may also apply.
Requests: info@bumgame.app. We may ask for the minimum information needed to identify the account securely. Requests are answered within the applicable legal time limits. You can withdraw your permissions in your device settings; this doesn’t affect the lawfulness of processing carried out before the withdrawal. For the purposes of processing and the legal grounds, see the KVKK information notice (in Turkish).
9. Age and children’s privacy
The game is intended for players aged 13 and over; it is not offered as a service directed at children. If a higher age limit applies where you are for using the service or for consenting to the processing of personal data, that limit applies. Players who are minors must get permission from a parent or legal representative for purchases. If you think the data of a child under the age limit is being processed, write to us.
10. Website and changes
This static website adds no ads, visitor analytics or marketing cookies. The hosting and access infrastructure may process technical data to serve the pages and keep them secure. The fields that prepare an e-mail draft run in your browser; no support request is sent through the site until you send the draft from your own e-mail app. Details are in the cookie and website notice (in Turkish).
Changes to this policy are published at this address with the current date and version. For significant changes to data processing, the required additional notices are given.