KÜT Privacy Policy
Last updated: November 11, 2026.
This Privacy Policy explains how personal data is handled when you use KÜT, listed on the App Store and Google Play as “KÜT Okey: Online Tile Rummy”, an online contract-based okey game.
The data controller and publisher of KÜT is:
I SEE U TECHNOLOGIES L.L.C-FZ
The Meydan Hotel, Grandstand, 6th floor
Meydan Road, Nad Al Sheba
Dubai, United Arab Emirates
Contact: info@playkut.com
1. Your Account
KÜT does not use passwords for player accounts.
When you open the app for the first time, your device receives a randomly generated session token. This token represents your guest account and allows the game to recognize your profile.
You may optionally sign in with Apple, Google or Facebook. If you do, we receive the app-specific user identifier provided by that service and connect it to your KÜT profile.
KÜT asks Apple for your name, but that name is not sent to our server. It is used only on your device as a suggested value in the player-name field. You may change it before continuing.
When you sign in, we also receive the email address that the service shares with us and keep it with your account. If you chose Hide My Email with Apple, we receive Apple’s private relay address instead of your real address. We use this address only to keep your account secure and to contact you about reports, abuse or legal matters. We do not use it for marketing, we do not show it to other players, we do not sell it and we do not share it with others for marketing; the service providers in section 6 process it only for hosting and backups. Guest accounts have no email address. Table chat is available only to signed-in accounts that have an email address.
2. Player Name
You choose your own player name. Your player name is visible to other players at the table and on other game-related screens where player identities are shown. Player names are filtered on our server to prevent inappropriate names.
3. Data We Collect
We collect and store the following information as necessary to operate KÜT:
- Profile information. Your player name, the preset portrait you choose and, if you upload one, your profile photo.
- Profile photo. A profile photo is optional, and only accounts signed in with Apple, Google or Facebook can upload one. When you choose a photo, your device’s own photo picker opens; KÜT does not ask for photo library permission and receives only the single image you pick. The image is cropped to a square on your device. Our server re-encodes it to 512×512 pixels and removes all metadata, including location. We do not use face recognition or any biometric processing. To recognise a re-upload of the same image, we keep a cryptographic hash and a perceptual hash of it.
- Sign-in email address. If you sign in with Apple, Google or Facebook, the email address shared by that service, whether it is verified, and whether it is an Apple private relay address.
- Game profile. Chip balance, level, experience, games played, games won, daily login streak, daily goals and league data.
- Table records. Table entry-fee transactions and game results.
- Social and safety records. Which players you send table gifts to, players you block, and reports you submit, including the reason selected and a copy of the reported player’s name at the time the report was submitted.
- First-party game events. Session start and end, game start and end, which preset chat line was sent, and gift-sending events. For preset chat messages we record the number of the selected line, not message text. These events are used to understand game balance and identify errors.
- Table chat. Messages you write at a table are delivered only to the players at that table. At tables with chat, the messages written there (including messages from computer-controlled players and the number of any quick message sent) are kept for 30 days after the table closes, together with the author’s identifier and the time, and are then deleted. The same record holds counters of when computer-controlled players spoke or stayed silent. We use these records for chat moderation, debugging and to make computer-controlled players’ chat feel more natural; only authorized KÜT staff can see them, and they are not used for advertising or sold. If a message is reported, or our automatic checks set it aside for review, that message and up to six earlier messages from the same table are kept, together with the player identifiers of their authors, for 30 days for moderation. The text of messages blocked by our filter is not kept; only the type of violation and its time are kept for 30 days. Chat restrictions and appeals (who, when and why) are kept as moderation records.
- Hands played at high-stakes tables. At the Efsane, Ağa, Paşa and Sultan tables we record the deal of every hand you play and the order and timing of the moves in it. We use these records only to study how computer-controlled players play and to improve them; they are not shown to other players, not used for advertising and not sold. They are deleted after 30 days. The legal basis is our legitimate interest in improving the game.
- What computer-controlled players remember. If you chatted back and forth with a computer-controlled player at a table, a short note is made from that conversation after the table closes: general things you said about yourself (for example your hometown, that you are retired, or the table you like) and a one-sentence summary of what you talked about. The full text of your messages is not kept in this note. Health, religion, politics, sex life, ethnic origin, money and account details, addresses, phone numbers and full names are never written to the note; such details are filtered out automatically. The note is used so the conversation can continue naturally when you meet the same computer-controlled player again, and it is only referred to in chat when no other real player is at the table with you. The note is deleted 90 days after your last conversation with that computer-controlled player. The legal basis is our legitimate interest in offering a natural chat atmosphere at the table.
- Notification token. If you give notification permission, we store the token needed to send notifications to your device. On Android devices, this token is issued by Google Firebase Cloud Messaging.
- Purchase records. If you buy a chip pack, we store the store’s transaction identifier, the product, the number of chips credited, the price, whether it was a test purchase, and the purchase and refund dates. Payment is handled entirely by Apple or Google; we never receive your card or payment details.
- Support requests. If you contact us from Settings > Support, we store the messages you write, our replies, and basic technical details about the app and device that you send with the request, so that we can answer it.
- IP address. Used only temporarily in server memory to prevent abuse: to apply connection limits and to limit how many new profiles can be created from one IP address within 24 hours. IP addresses are not written to our database.
- The playkut.com website. The website uses no cookies and no third-party analytics. The server keeps an access log with the requested page address, browser information and time; IP addresses and cookies are not written to this log. The log is used to count search engine visits and how often the site tools are used (for example, sharing a score sheet). It is not linked to your game account and is kept for at most 30 days. The legal basis is our legitimate interest in improving the website.
4. Data We Do Not Collect
KÜT does not collect your location, contacts, photo library, microphone data, camera data or advertising identifier. If you upload a profile photo, we receive only the single image you pick (see section 3). KÜT does not include third-party analytics SDKs or advertising SDKs. We do not track you across apps or websites, and we do not sell your data.
5. Why We Use Your Data
Providing the game. We process the data required to create and maintain your profile, operate online tables, record game progress, maintain chip balances and provide the game’s features. The legal basis for this processing is the performance of the contract between you and us when you use KÜT.
Security, moderation, abuse prevention and game balance. We use relevant account, game, report, block, IP and gameplay-event data to prevent cheating and abuse, enforce moderation, protect the service, identify errors and improve game balance. The legal basis for this processing is our legitimate interest in keeping KÜT functional, safe and balanced.
Table chat moderation. Before a table chat message is delivered to other players, it is checked automatically: first by the filter on our server, then by OpenAI’s moderation service, for profanity, harassment, threats, hate speech and sexual content. The legal basis for this check is our legitimate interest in protecting players. You can turn table chat off in Settings > Privacy & Safety > Blocked Players > Table Chat.
Profile photo moderation. A photo you upload is checked before other players can see it: first by the text filter on our server, then by OpenAI’s moderation service and Anthropic’s Claude model against KÜT’s rules; a person from the KÜT team makes the final decision. Until it is approved, only you can see the photo. An approved photo is served publicly from img.playkut.com through Cloudflare. The legal basis for showing the photo is providing the service; the legal basis for the review, the scanning for child sexual abuse images and the upload-lock trace is our legitimate interest in protecting players.
Chat by computer-controlled players. Some players at a table are computer-controlled (see the Terms of Use). To write their chat lines, the recent messages at that table, the display names of the players who wrote them and a short description of the current game situation are sent to Anthropic. No player identifier, email address, device or account information is sent. The legal basis for this processing is our legitimate interest in providing a natural chat atmosphere at the table.
Reminder notifications. If you consent to notifications, we may send reminders when your daily reward is ready, when your daily login streak is about to end, when a return reward is ready after you have not played for a while, and when help chips are ready after you run out of chips. The legal basis for these reminders is your consent. You can turn reminders off at any time in Settings > Notifications > Reminders inside KÜT or through your phone’s notification settings. We do not send advertising or purchase notifications.
6. Service Providers
Our game server is hosted by Hetzner in Germany. Database backups are copied over an encrypted connection to Cloudflare R2 storage. Apple provides Sign in with Apple, processes App Store purchases and delivers push notifications to Apple devices. Google provides Google sign-in, processes Google Play purchases and sends us purchase, cancellation and refund notifications. Facebook (Meta) provides Facebook sign-in. To moderate table chat automatically, only the text of a message is sent to OpenAI in the United States; no player identifier, name, device or table information is sent. OpenAI does not use this text to train its models and may keep it for up to 30 days for abuse monitoring. Google Firebase Cloud Messaging delivers push notifications to Android devices. To write the chat lines of computer-controlled players, recent table messages and players’ display names, and, to make the notes described above, the lines of that conversation, are sent to Anthropic in the United States; Anthropic does not use this data to train its models and deletes it within 30 days unless it must keep it longer to enforce its usage policies or comply with legal obligations. For profile photo review, the image you upload is also sent to OpenAI and Anthropic; your player identifier, name and email address are not sent to them, and Anthropic additionally receives the KÜT team’s anonymous decision notes. Approved profile photos are served from img.playkut.com through Cloudflare. Cloudflare’s CSAM Scanning Tool compares cached images with hash lists of known child sexual abuse images; a matching image is blocked and reported to NCMEC (the National Center for Missing & Exploited Children) in the United States. This is a transfer of data outside Türkiye and the European Union. All traffic between the app and our services is encrypted using TLS. These providers process data only on our behalf and with at least the level of protection described in this Privacy Policy.
7. How Long We Keep Data
Your profile and the records linked to it are kept until you delete your account. Server backups are deleted after 14 days; backups stored in Cloudflare R2 are deleted after 30 days. Notes kept by computer-controlled players are deleted 90 days after the last conversation. Records of hands played at high-stakes tables are deleted after 30 days. Table chat records, evidence and violation records are deleted after 30 days; copies in backups are deleted with the backups. An approved profile photo is kept until you replace or remove it, or delete your account. Image files of rejected, withdrawn or removed photos are deleted after 14 days. A review record with the AI scores, the decision and the category is kept to measure review quality; it does not contain the image. Images suspected of showing child sexual abuse are stored encrypted, are not deleted automatically and may be shared with the competent authorities. When you delete your account, game-event records are disconnected from your identity; those de-identified events may remain for statistical purposes.
8. Deleting Your Account
You can delete your account inside the app at Settings > Privacy & Safety > Delete Account. Account deletion removes your profile, chips, progress, associated friend, gift, block and report records, the chat records of the tables you took part in (including other players’ messages at those tables), the notes computer-controlled players keep about you, the records of high-stakes hands you took part in, table chat evidence and violation records (your messages are also removed from evidence kept for other players’ reports), notification token, and your sign-in email address, and any Apple, Google or Facebook sign-in connection linked to the account. Deletion cannot be undone.
Account deletion also removes your profile photos and photo records, the photo reports you submitted and your photo upload-lock records. Review records of your photos are kept without your identity, and any text read from an image is removed from them. For a rejected image, only its hash and rejection category remain, without your identity. If you have a permanent photo upload lock, a one-way trace (HMAC) derived from your sign-in identifier is kept so that the same account cannot be reopened to upload again. Images set aside as suspected child sexual abuse material remain stored as described in section 7.
If you used Sign in with Apple, you can also remove the connection on Apple’s side from your iPhone: Settings > [your name] > Sign in with Apple > KÜT > Delete.
9. Your Rights
You may request access to, correction of, or deletion of your personal data, object to processing, and request data portability. To make a request, contact us at info@playkut.com. If you are in the European Union or Türkiye, you may also submit a complaint to your local data protection authority, such as Türkiye’s Personal Data Protection Authority (KVKK).
10. Children
KÜT is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected such data, we will delete it.
11. Purchases and Advertising
KÜT offers optional chip packs through the App Store and Google Play. Chips are an in-game score; they cannot be exchanged for money or transferred to other players. To credit a purchase to the right profile and to handle refunds, we verify each purchase with Apple or Google and keep the purchase records described in section 3. KÜT has no advertising.
12. Changes to This Policy
If this Privacy Policy changes, the updated version will be published on this page and the “Last updated” date above will change.