Let's build
← All Projects

Brick Evolution

Privacy Policy

Explains what data Brick Evolution collects, why it collects it, and what rights you have over that data.

Effective date: August 19, 2026

1.Data Controller

Brick Evolution (the "App") is developed and operated by Outwork Labs (Arda Coşkun) ("we", "us"). We act as the data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR").

Contact: support@weareoutwork.com

2.Scope

This policy applies only to the Brick Evolution mobile app. The App is fully playable without creating an account; some of the data below is processed only if you choose to use the related feature.

3.Data We Collect

a) Player ID

When you first open the App, an anonymous user identifier (Player ID) is created through Firebase Authentication. It is randomly generated, contains no name, e-mail or phone number, and does not identify you in the real world on its own. You can view it in Settings and share it with us in support requests.

b) Linked Account Data

You may choose to link your account with Google or Apple to carry progress across devices. In that case we receive your name, e-mail address and (on Google) profile picture from that provider. If you use "Hide My Email" with Sign in with Apple, we only receive the relay address Apple generates. Linking an account is entirely optional.

c) Game Progress

When cloud sync is enabled, your save file is stored in Google Firebase Firestore under your Player ID. The save contains: your current level, stars per level, ball count, coin balance and earning history, power-up inventory, unlocked skins, daily reward state, ad-free entitlement and your app settings (sound, vibration, language). This is in-game data only; it contains no contact details, location, contacts, photos or health data.

d) Usage and Analytics Data

We measure how the game is played through Google Firebase Analytics: events such as level start/complete/quit, power-ups used, steps of the rewarded-ad and purchase flows, settings changes and account linking. These events carry device model, OS version, app version, language and an approximate location derived from your IP address (country/region level). Player profile signals are stored only in **bucketed** form (for example the range "11-25" instead of your exact level).

e) Crash and Performance Data

When the App crashes, Firebase Crashlytics sends a technical error record (stack trace, device state, installation identifier). Firebase Performance Monitoring collects technical measurements such as start-up time and sync latency. This data is used only to fix defects and improve performance.

f) Security Attestation

Firebase App Check is used to verify that requests come from a genuine, unmodified app; it processes Apple DeviceCheck/App Attest signals on iOS and Google Play Integrity signals on Android. These signals are used solely to prevent abuse.

g) Advertising Data

The free version of the App shows ads through Google AdMob. In that context your device's advertising identifier (IDFA on iOS, Advertising ID on Android), IP address and limited device/app signals may be shared with Google and advertising partners. Personalised ads are shown only with your consent; see section 5. If you purchase the ad-free version, no ads are shown and no advertising data is collected.

h) Purchase Data

In-app purchases are processed by the App Store and Google Play. Your card details and billing address never reach us; we only record the fact that a purchase was verified and the entitlement it grants (the ad-free version).

i) Data That Stays on Your Device

A copy of your save file is always kept locally on your device. If you do not use cloud sync, this data never leaves your device. Uninstalling the App deletes the local copy.

4.Purposes and Legal Bases

  • Providing the game, storing your progress and carrying it across devices — legal basis: performance of a contract (KVKK art. 5/2-c, GDPR art. 6/1-b).
  • Verifying in-app purchases and granting the ad-free entitlement — legal basis: performance of a contract.
  • Fixing defects, measuring performance and preventing abuse (Crashlytics, Performance Monitoring, App Check) — legal basis: legitimate interest (KVKK art. 5/2-f, GDPR art. 6/1-f). This processing is limited to technical data and has no disproportionate impact on players' rights.
  • Measuring how the game is played and balancing level difficulty (Analytics) — legal basis: your consent (KVKK art. 5/1, GDPR art. 6/1-a). If you do not consent, no analytics events are sent at all.
  • Serving personalised advertising — legal basis: your consent. Without consent you will only see non-personalised ads.
  • Meeting legal obligations — legal basis: legal obligation (KVKK art. 5/2-ç, GDPR art. 6/1-c).

5.Advertising and Consent

Players in the European Economic Area, the United Kingdom and Switzerland are shown a consent form through Google's User Messaging Platform (UMP) before any advertising or measurement service starts. Until you respond, the advertising and analytics SDKs collect nothing; all consent signals default to denied.

On iOS you are additionally asked for Apple's App Tracking Transparency (ATT) permission. If you decline, your advertising identifier is not used and only non-personalised ads are shown.

You can change your consent choice at any time from the "Privacy settings" row in the Settings screen. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

If you prefer to stop seeing ads altogether, you can purchase the ad-free version from within the App.

6.Third-Party Service Providers

The App uses the following services. Each provider acts under its own privacy policy:

  • Google Firebase (Authentication, Firestore, Analytics, Crashlytics, Remote Config, App Check, Performance Monitoring) — account, save file, measurement and technical infrastructure.
  • Google AdMob — ad serving and advertising consent management (UMP).
  • Apple App Store and Google Play — app distribution and in-app purchases.
  • Sign in with Apple and Google Sign-In — optional account linking.

The App does not use the Facebook SDK or comparable social-network tracking tools, and we never sell your data to data brokers.

7.International Transfers

The Google services we use may process data on servers outside Türkiye and the European Economic Area. Such transfers take place under the European Commission's Standard Contractual Clauses and Google's data processing commitments.

8.Retention Periods

  • Save file and account data: kept until you delete your account; permanently removed after your deletion request.
  • Analytics data: up to 14 months, per Google Analytics retention settings.
  • Crash records: up to 90 days.
  • Purchase entitlement records: held in your store account and may be retained for statutory periods.

9.Your Rights

Under KVKK art. 11 and GDPR arts. 15-22 you have the right to: learn whether your personal data is processed, access it, request its rectification or erasure, object to processing, request restriction of processing, receive your data in a portable format, and withdraw any consent you have given.

You can send requests to support@weareoutwork.com; including the Player ID shown in the Settings screen helps us resolve your request faster. We respond within 30 days at the latest.

You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority or, in the European Economic Area, with your local supervisory authority.

10.Account and Data Deletion

You can delete your account and cloud data yourself from Settings → Account → Delete Account inside the App. If you no longer have access to the App, you can submit a deletion request on the web; see our account deletion page for details.

11.Children's Privacy

Brick Evolution is not directed at children, and we do not knowingly collect personal data from users under 13 (or the applicable age threshold in your country within the European Economic Area). If we become aware of such data, we delete it without delay.

12.Security

Data is encrypted in transit with TLS and stored on Google's infrastructure. Your cloud save is accessible only under your own identity; server-side access rules prevent reading or writing another player's data. While no system can offer absolute security, we apply reasonable technical and organisational measures to reduce risk.

13.Changes to This Policy

We may update this policy from time to time. For material changes we will notify you inside the App; in all cases the effective date at the top of this page is updated.

14.Contact

For any privacy question or request: support@weareoutwork.com

For questions about this document, contact support@weareoutwork.com · Outwork Labs (Arda Coşkun)