Privacy Policy

1. Introduction

This Privacy Policy explains how Moa Bilgisayar Yazılım İnşaat Sanayi ve Ticaret Limited Şirketi (“Moa Bilgisayar”, “we”, “us”, or “our”) collects, uses, stores, and protects personal information when you use the WooMoa language-learning game available at https://woomoa.com (the “Service”).

By using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree, please do not use the Service.

2. Data controller

The data controller responsible for your personal data is:

Users in Türkiye: see also our Turkish KVKK notice at KVKK Aydınlatma Metni.

3. Information we collect

3.1 Information you provide

• Language preferences — the source and target languages you select to play.
• Account information (optional) — if you sign in with Google, we receive information from Google such as your email address, display name, and a unique account identifier, as permitted by your Google account settings and our sign-in flow.

3.2 Information collected automatically

• Guest / device identifier — if you play without signing in, we assign a pseudonymous device identifier stored in a cookie so we can maintain a guest session and game progress on that browser.
• Game and learning data — progress through topics, answers, scores, in-game economy (e.g. hearts, coins, hints), and related gameplay metadata necessary to operate the adaptive learning experience.
• Session and security data — authentication tokens, session identifiers, and anti-abuse signals (see Section 6).
• Technical data — browser type, general device information, IP address (processed by us and our service providers for security, fraud prevention, and analytics), and approximate usage patterns.

3.3 Information we do not intentionally collect

We do not require your real name, postal address, or phone number to use the core Service. We do not knowingly collect sensitive categories of personal data (such as health or biometric data) through WooMoa.

4. How we use your information

We use personal information to:

• Provide, operate, and improve the Service and your learning experience;
• Save and sync your progress when you use an account or guest session;
• Authenticate you and link a Google account to an existing guest profile when you choose to sign in;
• Protect the Service against abuse, cheating, and automated attacks;
• Measure aggregate usage and performance (analytics);
• Display advertising where enabled, to support the free Service;
• Comply with legal obligations and enforce our terms.

5. Legal bases (EEA, UK, and similar jurisdictions)

Where applicable law requires a legal basis, we rely on:

• Contract — to provide the Service you request;
• Legitimate interests — security, fraud prevention, service improvement, and analytics, balanced against your rights;
• Consent — where required for non-essential cookies, advertising, or optional sign-in methods;
• Legal obligation — where we must retain or disclose data by law.

6. Third-party services

We use trusted third parties that may process personal data on our behalf or as independent controllers:

• Google Sign-In — optional authentication. Google’s use of data is governed by Google’s Privacy Policy.
• Cloudflare Turnstile — bot and abuse protection on certain flows. See Cloudflare’s Privacy Policy.
• Google Analytics — website usage statistics when enabled. See Google’s Privacy Policy and Google’s analytics opt-out tools where available in your region.
• Google AdSense — advertising when enabled. Google and its partners may use cookies and similar technologies to serve and measure ads. See Google Advertising Policies.
• Hosting and infrastructure providers — to run our API and web application securely.

Links to third-party sites or services are not covered by this Privacy Policy. We encourage you to review their policies.

7. Cookies and similar technologies

We use cookies and similar storage mechanisms to:

• Keep you signed in and maintain guest sessions;
• Remember your language pair selection;
• Support security verification (Turnstile);
• Enable analytics and advertising partners where configured.

Essential cookies are necessary for the Service to function. You can control non-essential cookies through your browser settings; blocking essential cookies may limit gameplay or sign-in.

8. Retention

We retain personal information for as long as needed to provide the Service, fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Guest and account data may be deleted or anonymised after prolonged inactivity, subject to backup and legal retention requirements.

9. Your rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data;
• Restrict or object to certain processing;
• Data portability;
• Withdraw consent where processing is consent-based;
• Lodge a complaint with a supervisory authority.

To exercise these rights, email privacy@woomoa.com. We may need to verify your identity before responding.

9.1 Türkiye (KVKK)

If you are in Türkiye, your personal data is processed under the Law on Protection of Personal Data (Kişisel Verilerin Korunması Kanunu — KVKK, Law No. 6698). Our Turkish KVKK Aydınlatma Metni provides detailed information in Turkish as required for data subjects in Türkiye, including processing purposes, legal bases, transfers, and your rights under Article 11. You may apply to us using the contact details in Section 2 or lodge a complaint with the Personal Data Protection Authority (KVKK Kurumu — kvkk.gov.tr).

10. Children

The Service is intended for a general audience learning languages. We do not knowingly collect personal information from children under 13 (or the minimum age required in your country) without appropriate parental consent. If you believe a child has provided us personal data, contact us and we will take steps to delete it.

11. International transfers

We and our service providers may process data in Türkiye and other countries. Where required, we implement appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) for cross-border transfers.

12. Security

We use technical and organisational measures appropriate to the nature of the data, including encrypted connections (HTTPS), httpOnly session cookies for authentication tokens, and access controls on our systems. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” at the top will reflect the latest version. Material changes may be communicated through the Service where appropriate. Continued use after changes constitutes acceptance of the updated policy.

14. Contact

Questions about this Privacy Policy or our data practices:

Web: https://woomoa.com