Bus Fiesta Privacy Policy

Last Updated / Effective as of: October 21, 2026

Türkçe metin ve KVKK aydınlatma metni: https://busfiesta.assistotech.com/gizlilik-politikasi

ASSİSTO BİLİŞİM SANAYİ TİCARET LİMİTED ŞİRKETİ ("Assisto," "we," "us" or "our") develops and publishes Bus Fiesta, a casual puzzle game for iOS and Android. This Privacy Policy describes how Assisto processes personal information in connection with the Bus Fiesta mobile application and the pages that link to this Privacy Policy (collectively, the "Game" or the "Service").

The short version. Bus Fiesta has no accounts and no sign-in. Your progress, coins, boosters, purchases and settings are saved only on your device and are not sent to us. The Game shows ads through Google AdMob, and the advertising software in the Game may collect device information (such as your advertising ID and IP address) to show and measure ads. In-app purchases are handled by Apple or Google; we never see your payment card details.

NOTICE TO EUROPEAN USERS: Please see the Notice to European users section below for additional information for individuals located in the European Economic Area or United Kingdom (which we refer to as "Europe", and "European" should be understood accordingly).

Index

• Personal information we collect
• Tracking & other technologies
• How we use your personal information
• Retention
• How we share your personal information
• Your choices
• Other sites and services
• Security
• International data transfer
• Children
• Changes to this Privacy Policy
• How to contact us
• U.S. state privacy rights notice
• Notice to European users

Personal information we collect

Information stored only on your device

The Game saves the following game data in the Game's private storage on your device: level progress, coins, boosters, the items you have purchased (for example, the ad-free pack), daily reward status, the lives counter, your ad choice and your settings (sound, music, vibration, color-blind mode and language). This data stays on your device. It is not sent to our servers, and we have no access to it. Depending on your device settings, it may be included in your device's own backups (for example, iCloud or Google device backup), which are governed by Apple's or Google's terms.

Information you provide to us

• Communications data, such as your email address, the content of your message and any other information you choose to include when you contact us (for example, by using the "Support" link in the Game's settings, which opens your email app with the Game version in the subject line).

We do not ask you for your name, account credentials, contacts, photos or precise location, and the Game has no chat or user-generated content features.

Third-party sources

We may receive personal information about you from the following sources:

• App stores (Apple App Store and Google Play). When you make an in-app purchase, the store processes your payment and confirms the purchase to the Game on your device. We may also receive transactional data from the store, such as order or transaction identifiers, the product purchased, price, currency, country and date, which we use for purchase delivery, refunds, accounting and tax purposes. We do not receive your full payment card details. The stores may also provide us with aggregated statistics and with crash and diagnostic reports from users who have chosen in their device settings to share such data with app developers.
• Advertising partners. We receive reports from our advertising partners about ad performance (for example, numbers of ad impressions and revenue). These reports are generally aggregated and do not identify you.

Automatic data collection

The advertising software development kits ("SDKs") integrated into the Game, currently Google AdMob and any advertising networks we enable through AdMob mediation (see How we share your personal information), may automatically collect information about your device and your interaction with ads, such as:

• Device data, such as your device's operating system type and version, manufacturer and model, screen size, language settings, mobile carrier, network type (e.g., Wi-Fi, LTE), IP address, general location derived from your IP address (such as country or city), and unique identifiers, including identifiers used for advertising purposes (the Apple Identifier for Advertisers ("IDFA") on iOS, where you allow it, and the Google Advertising ID ("GAID") on Android).
• Ad interaction data, such as which ads were requested and shown, whether you tapped or closed an ad, whether you completed a rewarded ad, and the time and duration of these interactions.

The Game does not request access to your device's precise location.

For more information concerning this automatic collection of data, please see the Tracking & other technologies section below.

Tracking & other technologies

Advertising SDKs and identifiers. Some of the automatic data collection described above is carried out by the advertising SDKs in the Game, which may use device identifiers and store or read information on your device in a way similar to cookies on websites. These technologies are used to deliver ads, limit how often you see the same ad, measure ad performance, prevent fraud and, where you have allowed it, show you personalized (interest-based) ads.

• iOS. The Game will only access your IDFA if you allow tracking when the App Tracking Transparency ("ATT") prompt is shown, and you can change this at any time in your device settings.
• Europe (EEA and UK). Before personalized ads are shown or information is stored on or read from your device for advertising purposes, the Game presents a consent message (Google's User Messaging Platform). You can accept, decline or manage your choices.

Analytics. Currently, the Game keeps a short log of gameplay events (for example, level started or completed) only on your device for development and troubleshooting purposes; this log is not sent to us or to any analytics provider. If we add a third-party analytics service (such as Firebase Analytics) in the future, we will update this Privacy Policy before that service is enabled.

The Game does not use web browser cookies. For information concerning your choices with respect to the use of these technologies, see the Your choices section below.

How we use your personal information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery and operations. We may use your personal information to:

• provide the Game and save your progress and settings on your device;
• deliver the items you purchase in the Game and restore your non-consumable purchases (such as the ad-free pack) through the store's restore mechanism;
• grant in-game rewards when you choose to watch a rewarded ad; and
• provide support for the Game, and respond to your requests, questions and feedback.

Advertising. Bus Fiesta is free to play and is funded by advertising. We and our advertising partners use the device data and ad interaction data described above to show ads in the Game (interstitial, banner and rewarded ads), to limit how often ads are shown, to measure ad performance and to detect and prevent ad fraud. Where you have given your consent or permission as required by law (for example, through the consent message in Europe or the ATT prompt on iOS), our advertising partners may also use this information, combined with information about your activity on other apps and online services, to show you ads that they think will interest you. This is called interest-based advertising. If you do not give such consent or permission, you may still see ads, but they will be non-personalized ads.

Service improvement. We may use aggregated statistics and crash and diagnostic reports provided by the app stores to understand how the Game performs, fix bugs and improve the Game.

Compliance and protection. We may use your personal information to:

• comply with applicable laws (including tax and accounting obligations), lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;
• protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims);
• enforce the Terms of Use that govern the Game; and
• prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including purchase fraud and ad fraud.

Data sharing in the context of corporate events. We may share certain personal information in the context of actual or prospective corporate events. For more information, see How we share your personal information below.

To create aggregated, de-identified and/or anonymized data. We may create aggregated, de-identified and/or anonymized data from personal information we hold. We make personal information into de-identified and/or anonymized data by removing information that makes the data identifiable to you, and we will not attempt to reidentify any such data. We may use this data for our lawful business purposes, including analyzing and improving the Game.

Further uses. In some cases, we may use your personal information for further uses, in which case we will ask for your consent to use your personal information for those further purposes if they are not compatible with the initial purpose for which the information was collected.

Retention

We generally retain personal information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, establishing or defending legal claims, or for fraud prevention purposes. In particular:

• Game data stays on your device until you delete the Game or clear its data. Uninstalling the Game permanently deletes your progress and coins, because we do not keep a copy.
• Communications data is kept for as long as needed to handle your request and any follow-up, and is then deleted.
• Transactional data we receive from the app stores is kept for as long as required by applicable tax and accounting laws.
• Data collected by our advertising partners is retained according to their own privacy policies.

When we no longer require the personal information we have collected about you, we may either delete it, anonymize it, or isolate it from further processing.

How we share your personal information

We may share your personal information with the following parties (or as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection). We do not sell your personal information for money.

Advertising partners. The Game uses Google AdMob, provided by Google LLC (or, for users in Europe, Google Ireland Limited), to show ads. Through AdMob mediation, ad requests may also be served by other advertising networks; when we enable additional networks, we will list them in this section. Advertising partners collect the device data and ad interaction data described above directly from the Game through their SDKs, and some of them, including Google, may use that data for their own purposes as independent controllers in accordance with their own privacy policies. Where required, the consent message shown in the Game lists the advertising partners. You can learn how Google uses information from apps that use its services at https://policies.google.com/technologies/partner-sites and read Google's Privacy Policy at https://policies.google.com/privacy.

Payment processors and app stores. In-app purchases are processed by Apple (App Store) or Google (Google Play). Any payment card information you use to make a purchase is collected and processed directly by them, and they may use your payment data in accordance with their privacy policies: Apple at https://www.apple.com/legal/privacy/ and Google at https://policies.google.com/privacy.

Service providers. Third parties that provide services on our behalf or help us operate the Game or our business, such as email and IT service providers we use to answer support requests.

Professional advisors. Professional advisors, such as lawyers, accountants, auditors and insurers, in the course of the professional services that they render to us.

Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.

Business transferees. We may disclose personal information in the context of actual or prospective business transactions (e.g., investments in Assisto, financing of Assisto, or the sale, transfer or merger of all or part of our business, assets or shares). We may also disclose your personal information to an acquirer, successor, or assignee of Assisto as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets.

The Game has no public profiles or social features, so your information is not made visible to other players.

Your choices

In this section, we describe the rights and choices available to all users. Users who are located in certain U.S. states and in Europe can find additional information about their rights below. Users in Türkiye can find their rights under the Turkish Personal Data Protection Law No. 6698 ("KVKK") in the Turkish version of this policy at https://busfiesta.assistotech.com/gizlilik-politikasi.

Personalized ads.

• In the Game (Europe): you can accept or decline personalized ads in the consent message, and change your choice later from the privacy options in the Game's settings.
• iOS: you can allow or stop tracking in Settings > Privacy & Security > Tracking.
• Android: you can reset or delete your advertising ID, or opt out of ads personalization, in your device's Google / Ads settings.

If you decline or limit personalized ads, you will still see ads, but they will be less relevant to you.

Delete your game data. Because the Game has no account, you can delete all game data stored on your device at any time by uninstalling the Game (or, on Android, by clearing the Game's storage). Please note that coins, boosters and progress cannot be recovered afterwards. Non-consumable purchases (such as the ad-free pack) can be restored with the "Restore purchases" button in the Game's settings using the same store account.

Communications. We do not send marketing messages. If you contact us, we will only use your email address to respond to you.

Declining to provide information. You do not need to provide any information to play the Game. If you do not provide information when contacting us, we may not be able to answer your request.

Other sites and services

The Game may display ads or contain links to websites, mobile applications, and other online services operated by third parties. These links and ads are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.

Security

We employ technical and organizational safeguards designed to protect the personal information we hold. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.

International data transfer

We are headquartered in Türkiye, and our advertising partners and app stores (Google and Apple) operate in the United States and other countries. Your personal information may be transferred to, and processed in, Türkiye, the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.

Users in Europe should read the important information provided below about transfer of personal information outside of Europe.

Children

The Game is designed for a general audience and is not directed to children. We do not knowingly collect personal information from children under 13 years of age (or under the minimum age required by the laws of your country, which in some European countries is up to 16). If you are a parent or guardian and believe that your child has provided personal information to us, or that personal information has been collected from your child in connection with the Game in a manner prohibited by law, please contact us. If we learn that this has happened, we will delete any such information we hold and take reasonable steps to ask the relevant partners to do the same.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it at https://busfiesta.assistotech.com/privacy or by other appropriate means (for example, a notice in the Game). Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Game after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Game and our business.

How to contact us

If you have questions about our practices or if you would like to exercise any privacy related right that may be available to you, please contact us via one of the methods listed below.

• Email: developer@assistotech.com
• Mail: ASSİSTO BİLİŞİM SANAYİ TİCARET LİMİTED ŞİRKETİ, Denizköşkler Mah. Ferah Çıkmazı Sk. No: 2 İç Kapı No: 1, Avcılar / İstanbul, Türkiye
• Phone: +90 543 697 99 87

U.S. state privacy rights notice

Except as otherwise provided, this section applies to residents of U.S. states to the extent they have privacy laws applicable to us that grant their residents the rights described below (collectively the "State Privacy Laws"). Please note that not all rights listed below may be afforded to all users, and we may not be able to process your request if you do not provide us with sufficient detail to allow us to confirm your identity or understand and respond to it. Because the Game has no accounts and we do not hold your game data, we may ask you for information (such as the email address you used to contact us or a purchase order number) to locate any personal information we hold about you.

Your privacy rights. The State Privacy Laws may provide residents with some or all of the rights listed below. These rights are not absolute, and we may decline your request in certain cases as permitted by law.

• Information. You can request information about the categories of personal information we have collected, the sources, the purposes, and the categories of third parties with which we share it.
• Access. You can request a copy of the personal information that we have collected about you.
• Correction. You can ask us to correct inaccurate personal information that we have collected about you.
• Deletion. You can ask us to delete the personal information that we have collected from you.
• Opt-out of targeted advertising. We allow our advertising partners to process personal information for targeted advertising purposes. You can opt out using the controls described in Your choices (the iOS tracking setting or the Android ads settings), or by contacting us.
• Profiling. We do not use your personal information to engage in profiling or to perform automated decision-making that results in significant financial impacts, significant impacts on housing, education, employment, health care, or criminal justice, or similarly significant impacts.
• Sale of personal data. We do not sell your personal information for money. However, the State Privacy Laws may classify our use of advertising services that deliver interest-based ads as "selling" or "sharing" personal information. You can opt out as described above.
• Consumers under 16. We do not have actual knowledge that we collect, sell or share the personal information of consumers under 16 years of age.
• Sensitive personal information. We do not intentionally collect or process sensitive personal information.
• Appeal. You can appeal our denial of any request validly submitted.
• Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the State Privacy Laws.

Exercising your rights. You may submit requests by email to developer@assistotech.com.

Verification of identity; authorized agents. We may need to verify your identity in order to process your requests and reserve the right to confirm your residency. Under some State Privacy Laws, you may enable an authorized agent to make a request on your behalf; however, we may need to verify your authorized agent's identity and authority to act on your behalf.

Deidentification. We do not attempt to reidentify deidentified information derived from personal information, except for the purpose of testing whether our deidentification processes comply with applicable law.

Notice to European users

General

Where this Notice to European users applies. The information provided in this "Notice to European users" section applies only to individuals in the United Kingdom and the European Economic Area (i.e., "Europe" as defined at the top of this Privacy Policy).

Personal information. References to "personal information" in this Privacy Policy should be understood to include a reference to "personal data" (as defined in the GDPR), i.e., information about individuals from which they are either directly identified or can be identified.

Controller. Assisto is the controller in respect of the processing of your personal information covered by this Privacy Policy for purposes of European data protection legislation (i.e., the EU General Data Protection Regulation and the UK GDPR, as and where applicable, the "GDPR"). See the How to contact us section above for our contact details. Our advertising partners, including Google, may act as independent controllers for the personal information they collect through their SDKs and use for their own purposes.

Our legal bases for processing

In respect of each of the purposes for which we use your personal information, the GDPR requires us to ensure that we have a "legal basis" for that use. Our legal bases for processing your personal information described in this Privacy Policy are:

• Where we need to perform a contract we are about to enter into or have entered into with you ("Contractual Necessity").
• Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests ("Legitimate Interests").
• Where we need to comply with a legal or regulatory obligation ("Compliance with Law").
• Where we have your specific consent to carry out the processing for the purpose in question ("Consent").

Retention

We retain personal information for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, establishing or defending legal claims, or for compliance and protection purposes. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. When we no longer require the personal information we have collected about you, we will either delete or anonymize it.

Other info

No sensitive personal information. We ask that you not provide us with any sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) when you contact us.

No automated decision-making and profiling. As part of the Game, we do not engage in automated decision-making and/or profiling which produces legal or similarly significant effects.

Your rights

General. European data protection laws give you certain rights regarding your personal information. If you are located in Europe, you may ask us to take the following actions in relation to your personal information that we hold:

• Access. Provide you with information about our processing of your personal information and give you access to your personal information.
• Correct. Update or correct inaccuracies in your personal information.
• Delete. Delete your personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
• Restrict. Restrict the processing of your personal information, for example if you want us to establish its accuracy or the reason for processing it.
• Object. Object to our processing of your personal information where we are relying on Legitimate Interests.
• Withdraw Consent. When we use your personal information based on your consent, you have the right to withdraw that consent at any time, for example through the privacy options in the Game's settings. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

Exercising these rights. You may submit these requests by email to developer@assistotech.com or to our postal address provided above. Because the Game has no accounts and your game data stays on your device, we may ask for specific information (such as the email address you used to contact us or a purchase order number) to help us locate your personal information and confirm your identity. For personal information that Google or other advertising partners process as independent controllers, you can also contact them directly. Whether or not we are required to fulfill any request you make will depend on a number of factors (e.g., why and how we are processing your personal information); if we reject any request you may make (whether in whole or in part) we will let you know our grounds for doing so at the time, subject to any legal restrictions.

Your right to lodge a complaint with your supervisory authority. In addition to your rights outlined above, if you are not satisfied with our response to a request you make, or how we process your personal information, you can make a complaint to the data protection regulator in your habitual place of residence.

• For users in the European Economic Area, the contact information for the data protection regulator in your place of residence can be found here: https://edpb.europa.eu/about-edpb/about-edpb/members_en
• For users in the UK, the contact information for the UK data protection regulator is: The Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, Tel. +44 303 123 1113, Website: https://ico.org.uk

Data processing outside Europe

We are a company based in Türkiye, and our advertising partners and app stores (Google and Apple) are based in, or process data in, the United States and other countries. This means that, if you use the Game, your personal information may be accessed and processed outside Europe, including in Türkiye and the United States.

Where personal information is transferred outside Europe, we and our partners try to ensure a similar degree of protection is afforded to it by making sure one of the following mechanisms is implemented:

• Transfers to territories with an adequacy decision. We may transfer your personal information to countries or territories whose laws have been deemed to provide an adequate level of protection for personal information by the European Commission or UK Government (as and where applicable), including, for recipients certified under it, the EU-U.S. Data Privacy Framework (and its UK extension).
• Transfers to territories without an adequacy decision. We may transfer your personal information to countries or territories whose laws have not been deemed to provide such an adequate level of protection. However, in these cases we may use specific appropriate safeguards designed to give personal information effectively the same protection it has in Europe (for example, standard contractual clauses approved by relevant authorities for this purpose), or, in limited circumstances, rely on an exception (or "derogation") permitted by the GDPR, such as where the transfer is necessary for the performance of a contract with you (for example, answering your support request).

You may contact us at developer@assistotech.com if you want further information on the specific mechanism used when transferring your personal information out of Europe.

This template was prepared and made publicly available by General Legal, PC ("General Legal"). It is provided for general reference purposes only and does not constitute, and should not be construed as, legal advice, or an endorsement or review of any particular transaction in which it is used. Use of this template does not create an attorney-client relationship with General Legal. General Legal has not reviewed, and takes no position on, any modifications made to this document or the deal terms it is used to document.