Corner Grocer

Privacy Policy — Corner Grocer

Last updated: October 13, 2026

This policy explains how Corner Grocer: Market Sim (the “Game”), version 1.0 for iOS, and this website handle your information. The Game and the website are published by Süleyman Gökhan Birkin, an independent developer operating as Birkin Apps in Istanbul, Türkiye (“we”, “us”), who is the data controller. Questions: support@birkinapps.com.

Version 1.0 has in-app purchases and no ads. You can buy Coin and one-time packs through the App Store. The Game shows no advertising and does not track you. Version 1.0 is first released to testers through TestFlight; this policy applies to those builds too.

  • You can play without an account. On first launch the Game creates a random guest ID (your Player ID) so your progress can belong to you.
  • Signing in with Apple or Google is optional. If you sign in, we store the email address and name that the sign-in service gives us.
  • In-app purchases go through Apple. Apple takes the payment; your card and payment details never reach us. Our server keeps a record of what you bought and your Coin balance.
  • The Game shows no ads and does not track you across other companies’ apps or websites. It does not show Apple’s App Tracking Transparency prompt.
  • We use Google Firebase for sign-in, data storage, analytics, crash reports, game settings and app attestation.
  • The voices of the customers in the shop are generated by artificial intelligence; they are not recordings of people.
  • We do not sell your personal information. We do not collect precise location, contacts, photos, or microphone or camera data.
  • The Game is for players aged 13 and over.
  • You can delete your account and data at any time, in the Game (Settings > Account > Delete account) or by email (see Deleting your data).
  • Player ID. A random user ID from Firebase Authentication, created automatically on first launch (anonymous sign-in). It is shown in Settings > Account, so you can quote it when you write to us.
  • Sign-in details (optional). If you sign in with Apple or Google, we receive your email address (with Apple this can be a private relay address), the name the service provides, and which sign-in method you used. We never see your Apple or Google password.

Your progress (the day you reached, money, reputation, stock, prices, upgrades, your shop name and decoration) and your settings, including accessibility settings such as the speech level and the pace you chose. They are stored on your device. Where the Game offers cloud backup, a copy is stored in Google Cloud Firestore under your Player ID.

  • Purchase records. You buy through the App Store. Apple takes the payment; your card or payment details, billing address and Apple Account details never reach us. For each purchase Apple gives the Game a signed receipt, which our server checks with Apple’s App Store Server API. We keep the transaction ID, the product, the date and the environment (the live store, or Apple’s test sandbox that TestFlight uses), linked to your Player ID.
  • Coin wallet and owned items. Your Coin balance and the packs, items and badges you own are kept on our server (Cloud Firestore) under your Player ID. They live on the server so that they cannot be changed from your device and so that they can follow you to a new device when you link an account.
  • Refund and revocation notices. Apple notifies our server when a purchase is refunded or revoked (App Store Server Notifications). We use these notices only to take back the Coin or items that purchase gave and to keep our records correct.
  • Firebase Analytics records gameplay and shop events: a day started or ended (profit, reputation, length, whether it was completed), a checkout finished, a shelf restocked, the accessibility mode you chose (speech level and pace), the shop opened, a purchase started, completed, cancelled, failed or restored (with the product), and Coin spent (item and amount). It also receives an app-instance ID, device model, operating system and app version, language and approximate location (country or region) derived from your IP address. We may link these events to your Player ID to understand how players progress and to balance the Game.
  • Firebase Crashlytics receives crash reports: stack traces, device model, operating-system and app version, memory and disk state, the game state at the time of the crash and your Player ID, so we can match a crash to the affected account.
  • Firebase Remote Config uses an installation ID, app version, language and country to deliver game settings (for example balance values, a minimum supported build, and switches that turn shop features on or off).
  • Cloud Firestore and Cloud Functions deliver game content that we publish (products, customer types, market events), store the account, purchase and wallet records described above, and run our server code, for example purchase verification and account deletion. These requests include standard technical data such as your IP address.
  • Firebase App Check uses attestation from Apple App Attest / DeviceCheck to confirm that requests come from the genuine Game.

The public pages use no cookies and no analytics scripts. Your language choice is saved in your browser’s local storage (key cg_lang) and never sent to us. The site is served by Firebase Hosting (Google), which processes standard server logs such as your IP address and browser user-agent to deliver pages. The admin area is for our staff only; it uses Google sign-in.

We do not collect precise (GPS) location, contacts, photos or videos, microphone or camera input, payment-card or bank details (Apple handles payments), or your browsing history outside the Game.

The Game shows no ads and contains no advertising SDK. We do not track you across other companies’ apps and websites, and we do not share your data with advertisers or data brokers, so the Game does not show Apple’s App Tracking Transparency prompt. The analytics described above are used only to run and improve the Game.

The voices of the customers in the shop are generated with artificial intelligence. They are synthetic voices, not recordings of real people.

  • To provide the Game and its purchases: sign-in, saving progress, delivering game content and settings, verifying purchases with Apple, keeping your Coin wallet and items, and handling refunds (performance of our contract with you; GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
  • Analytics, crash diagnostics, game balancing, security and abuse prevention, including preventing the same purchase from being credited twice (our legitimate interest in running and improving the Game; GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
  • Legal obligations, for example keeping accounting records of purchases and answering lawful requests (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
  • Google — Firebase (Authentication, Cloud Firestore, Cloud Functions, Analytics, Crashlytics, Remote Config, App Check, Hosting) and Google Sign-In. policies.google.com/privacy
  • Apple — Sign in with Apple, App Attest, In-App Purchase and the App Store Server API (purchase verification and refund notices), and distribution through TestFlight and the App Store. apple.com/legal/privacy
  • Authorities or successors — when the law requires it, or a new owner if the Game is transferred (we will update this policy first).

We share information only with the service providers listed above, which may use it only to provide their services to us or as described in their own privacy policies. We do not sell personal information.

Google and Apple process data in the United States and other countries. When data leaves the EEA, the UK or Türkiye, these providers rely on Standard Contractual Clauses or other safeguards required by law (including KVKK Art. 9).

  • Data on your device: until you delete the Game or its data.
  • Account, player profile and cloud backup: until you delete your account or ask us to delete them.
  • Coin balance and owned items: until you delete your account; they are deleted with it.
  • Purchase records (transaction ID, product, date, environment): kept for sales reports, accounting and refund handling. When you delete your account we remove your Player ID from them; the record without your Player ID is kept for up to 10 years.
  • Crash reports: 90 days (Firebase Crashlytics).
  • Analytics events: for the retention period set in Google Analytics (at most 14 months); aggregated reports can be kept longer.
  • Emails to support: up to 3 years, to answer you and to document deletion requests.

In the Game (signed-in players). Open Settings > Account and choose Delete account. This deletes your sign-in account, player profile, cloud backup, Coin balance and owned items. Your purchase records stay without your Player ID (see How long we keep information). The Game then continues with a new guest profile on that device.

By email (guests, or if you no longer have the Game). Email support@birkinapps.com with the subject “Delete my Corner Grocer data” and the Player ID shown in Settings > Account. We delete the data within 30 days and confirm by email. Step-by-step instructions: Delete your data.

Uninstalling the Game removes the data on your device but not your cloud data. Deleting your account also deletes the Coin and items you bought; it does not cancel or refund purchases (see the Terms of Use).

Depending on where you live (for example under the GDPR or Turkey’s KVKK) you can ask us to give you access to your data, correct it, delete it, restrict or object to its use, or give you a copy. Email support@birkinapps.com. You can also complain to your data protection authority; in Türkiye that is the Personal Data Protection Authority (KVKK). The Turkish notice is on the KVKK page.

The Game is for players aged 13 and over and is not directed at younger children. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has given us personal data, email us and we will delete it.

We may update this policy, for example when a version adds advertising, new kinds of data or new ways of using it. We will post the new version here with a new date.

Birkin Apps — Süleyman Gökhan Birkin, Istanbul, Türkiye · support@birkinapps.com