Privacy Policy — Restaurant Rush

Last updated: September 28, 2026 · Türkçe (KVKK Aydınlatma Metni)

This policy explains how Restaurant Rush: Cook & Serve (“Restaurant Rush”, the “Game”) for iOS and Android, and its website restaurantrush.birkinapps.com, handle your information. The Game is published by Süleyman Gökhan Birkin, an independent developer operating as Birkin Apps in Istanbul, Türkiye (“we”, “us”), who is the data controller. Questions: support@birkinapps.com.

Summary

• You can play without an account. On first launch the Game creates a random guest ID so your progress can be saved and backed up.
• Signing in with Apple, Google or email is optional. If you sign in, we store the email address and name that the sign-in service gives us.
• Your nickname (or, if you have not set one, your restaurant name), scores, run details, chef level and chef look can appear publicly on the leaderboards. If you play at a slower accessible pace, your Endless scores go to a separate public Relaxed board (see Leaderboards).
• Ads are served by Google AdMob. On iPhone, your advertising identifier (IDFA) is used only if you allow tracking. You can say no and still play everything.
• We use Google Firebase for saving, sign-in, analytics, crash reports, notifications and game settings. In-app purchases go through Apple’s App Store or Google Play; we never see your payment card.
• We do not sell your personal information. We do not collect precise location, contacts, photos, or microphone or camera data.
• Signed-in players can delete their account and data inside the Game. Anyone can ask us to delete their data by email (see Deleting your data).

1. Information we collect

1.1 Player ID and optional account

• Player ID. A random user ID from Firebase Authentication, created automatically on first launch. The first six characters are shown in Settings as your “ID”.
• Sign-in details (optional). If you sign in with Apple, Google, or email and password, we receive your email address (with Apple this can be a private relay address), the name the service provides, a profile photo link (Google only), and which sign-in method you used. Passwords are handled by Firebase Authentication; we never see them.

1.2 Game progress and player profile

• Save data. Your progress (days, stars, chef level and XP, in-game currencies, upgrades and unlocked items, including the Music Studio tracks you unlocked with Coin or the Starter Bundle), chef and restaurant customisation, your nickname and the names you give your restaurants, Endless run history, daily and weekly goals, tutorial progress, your purchases (see 1.5) and settings, including accessible play and the pace you chose for it. It is stored on your device and backed up in Google Cloud Firestore under your Player ID.
• Player profile. Language, your device’s region setting (for example TR or US, taken from your language and region settings, not from GPS), device platform (iOS or Android) and app version, your time zone (used to send scheduled notifications at your local time), first and last session time, number of sessions, total play time, whether you are a guest or signed in, your sign-in method, your accessible-play pace setting (for example Standard or Relaxed), your chef level and XP, your in-game currency balances, whether you own a purchase that removes ads, your notification permission status and push-notification token if you allow notifications, how many ads you watched and the estimated ad revenue they generated, and progress summaries (for example best Endless score, stars and tutorial completion).

1.3 Leaderboards (public)

All leaderboards use your nickname as your display name, or your restaurant name if you have not set a nickname. Please do not use your real name or other personal information as a nickname or restaurant name.

• Weekly and monthly Endless boards. When you finish an Endless run, the Game can submit your score, the shift you reached, your best combo and run details (the cards you picked, your chef’s look, food wasted and run length).
• Relaxed boards. If you play an Endless run with accessible play at a slower pace than Standard (for example Relaxed), the same details go to separate weekly and monthly Relaxed boards instead. Because of this, appearing on a Relaxed board shows other players that you played at an accessible pace.
• Chef-level board. As you level up, the Game submits your display name, chef level and XP, and your chef’s look.

Leaderboard entries are visible to other players in the Game, and the weekly and monthly Endless boards also appear on our public web leaderboard at restaurantrush.birkinapps.com/leaderboard. Deleting your account removes your entries from all of these boards (see section 7).

1.4 Push notifications

If you allow notifications, Firebase Cloud Messaging gives your device a token, which we store in your profile to send reminders and news about events. You can turn notifications off in your device settings at any time; the Game works the same without them.

1.5 In-app purchases

Payments are processed by Apple (App Store) or Google (Google Play) through their own in-app purchase systems (StoreKit and Google Play Billing), which the Game uses directly, without a separate purchase-management service. When you buy or restore something, the store tells the Game which product it is and gives it a transaction ID and receipt; the Game checks it on your device, delivers the item and keeps a list of already-delivered transactions on your device so that nothing is delivered twice. Your save records which products you own, where your ad-free purchase came from and how many Supporter Packs you have bought (the Supporter Pack can be bought more than once); your player profile shows whether you own a purchase that removes ads; and analytics records each purchase with the product, price and currency (see 1.7). We never receive your card number, billing address or store account details.

1.6 Advertising

The Game shows ads through Google AdMob: rewarded ads that you choose to watch for a bonus, and occasional full-screen ads between shifts. AdMob collects your advertising identifier (on iPhone the IDFA only if you allow tracking in Apple’s App Tracking Transparency prompt; on Android the Android advertising ID), your IP address and the approximate location (country or city) derived from it, device and app information, and how you interact with ads. Where the law requires it (for example in the EEA, the UK and Switzerland), Google’s consent form asks for your choice first; you can change it later with Privacy Options in the Game’s Settings. If you do not consent, you may still see non-personalised or limited ads. A purchase that removes ads turns them off.

1.7 Analytics, crash reports and game configuration

• Firebase Analytics records gameplay and app events (for example shifts started and finished, screens opened, shop, purchase and ad interactions, accessible-play shifts with the pace used, and your answer if the Game notices that a screen reader such as VoiceOver or TalkBack is on and asks whether to keep accessible play) together with an app-instance ID, your device’s advertising identifier where available (on iPhone the IDFA only if you allow tracking in Apple’s App Tracking Transparency prompt; on Android the Android advertising ID), device model, operating system, app version, language and approximate location (country or region) derived from your IP address. We may link these events to your Player ID to understand how players progress.
• Firebase Crashlytics receives crash reports: stack traces, device model, operating-system and app version, memory and disk state, the game state at the time of the crash (for example the game mode and current shift), a crash-installation ID and your Player ID, so we can match a crash to the affected account.
• Firebase Remote Config (including our own gameplay experiments) uses an installation ID, app version, language and country to deliver game settings and test variations.
• Firebase App Check uses attestation from Apple App Attest / DeviceCheck or Google Play Integrity to confirm that requests come from the genuine Game.
• Downloads. The Game downloads game content (such as events, cards and settings) from our servers on Google Cloud, a list of our other games (“More Games”) from birkinapps.com, and the fonts it uses (Nunito and JetBrains Mono) from Google Fonts (fonts.gstatic.com) the first time they are needed. These requests include standard technical data such as your IP address.

1.8 Actions you take on your device

If you share a score, your device’s share sheet sends the text to the app you choose. Ratings and reviews are handled by Apple or Google; we only see reviews that are published on the store.

1.9 Our website

When you open a page of restaurantrush.birkinapps.com (other than these legal pages), a small script records one visit per browser session. It sends the page address, the referring page, your browser language and screen size. Our server adds your browser’s user-agent and uses your IP address to look up your approximate location (country, region, city) and internet provider through ipapi.co. We store a shortened one-way hash of your IP address, not the address itself. We use these records only to count visits and see where visitors come from. The script does not set cookies; it keeps a single flag in your browser’s session storage so that a visit is counted only once.

2. What we do not collect

We do not collect precise (GPS) location, contacts, photos or videos, microphone or camera input, health data, payment-card or bank details, or your browsing and search history outside the Game.

3. Why we use information and our legal bases

• To provide the Game — saving and syncing progress, sign-in, delivering and restoring purchases, leaderboards (including the Relaxed and Chef-level boards), accessible play, events and the notifications you allowed (performance of our contract with you; GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• Personalised ads and tracking — on iPhone only with the consent you give in the App Tracking Transparency prompt, and in the EEA, the UK and Switzerland only with the consent you give in Google’s consent form; you can withdraw it at any time (GDPR Art. 6(1)(a)). In other countries, on Android, Google may use your advertising ID for personalised ads; you can stop this by deleting or resetting your advertising ID (see section 8).
• Non-personalised ads, analytics, crash diagnostics, website visit statistics, game balancing, security and cheat prevention — our legitimate interest in running, funding and improving a free game (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• Legal obligations — for example keeping purchase records for tax purposes or answering lawful requests (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).

4. Who we share information with

• Google — Firebase (Authentication, Cloud Firestore, Cloud Functions, Analytics, Crashlytics, Remote Config, Cloud Messaging, App Check), AdMob and the User Messaging Platform, Google Fonts, Google Sign-In, and Google Play payments (Google Play Billing). policies.google.com/privacy · How Google uses information from apps that use its services
• Apple — Sign in with Apple, App Store payments and purchase restore (StoreKit), App Attest and push delivery. apple.com/legal/privacy
• ipapi.co (Kloudend, Inc., USA) — receives a website visitor’s IP address to return an approximate location (see 1.9). ipapi.co/privacy
• Other players and the public — your leaderboard entries (see 1.3).
• Authorities or successors — when the law requires it, or a new owner if the Game is transferred (we will update this policy first).

We share information only with the service providers listed above. They may use it only to provide their services to us, or as described in their own privacy policies linked above, and they provide the same or equal protection of your information as described in this policy and as required by the App Store and Google Play rules.

We do not sell personal information for money. Under some US state laws, letting Google use your advertising ID for personalised ads can count as “sharing” or “targeted advertising”. You can opt out by declining tracking on iPhone, by deleting or resetting your advertising ID on Android (Settings → Google → Ads, or Settings → Privacy → Ads), or through Privacy Options in the Game where available.

5. International transfers

Google, Apple and ipapi.co process data in the United States and other countries. When data leaves the EEA, the UK or Türkiye, these providers rely on Standard Contractual Clauses or other safeguards required by law (including KVKK Art. 9).

6. How long we keep information

• Data on your device: until you delete the Game or its data.
• Cloud save, player profile and leaderboard entries: until you delete your account or ask us to delete them.
• Crash reports: 90 days (Firebase Crashlytics).
• Analytics events: for the retention period set in Google Analytics (at most 14 months); aggregated reports can be kept longer.
• Advertising data collected by Google AdMob: kept by Google under its own retention policies (policies.google.com/technologies/retention). We do not receive it, apart from the ad counts and estimated ad revenue in your player profile, which are deleted with your account.
• Website visit records: as long as we need them for visit statistics. You can ask us to delete them at any time.
• Purchase records in your save and profile: until you delete your account or ask us to delete them. Purchase events in analytics: as for other analytics events. The list of delivered transactions on your device: until you delete the Game or its data. Apple and Google keep their own purchase records under their policies.
• Emails to support: up to 3 years, to answer you and to document deletion requests.

7. Deleting your data

In the Game (signed-in players)

1. Open Settings from the main menu.
2. Scroll to Danger Zone and tap Delete Account.
3. Confirm. You may be asked to sign in again with Apple, Google or your password.

This immediately and permanently deletes your sign-in account, cloud save, player profile (including email, push token and accessible-play pace setting), all of your leaderboard entries (the weekly and monthly Endless boards, the Relaxed boards and the Chef-level board), and related anti-abuse records. The Game then continues with a new guest profile on that device.

If you played as a guest on a device and then signed in to an account you had created earlier, the progress from that guest session (its player profile, cloud save and leaderboard entries) is stored under a separate guest ID and is not removed by in-app deletion. Email support@birkinapps.com and we will find and delete it.

By email (guests, or if you no longer have the Game)

Email support@birkinapps.com with the subject “Delete my Restaurant Rush data”. Include the ID shown in Settings and, if you signed in, the email address of your account. We delete the data within 30 days and confirm by email. Step-by-step instructions are also at restaurantrush.birkinapps.com/delete-account.html.

What deletion does not cover

• Uninstalling the Game removes the data on your device but not your cloud data.
• Purchase history kept by Apple or Google is managed in your store account. The Starter Bundle and other one-time purchases can be restored later with Restore Purchases using the same store account; coin packs, the Supporter Pack, in-game currency and progress cannot be restored after deletion.
• Analytics data associated with your Player ID (including purchase events) is deleted on request.
• Progress from an earlier guest session that you had before signing in to an existing account (see above) — email us.
• Crash reports and advertising data expire as described in section 6.

8. Your choices and rights

• Tracking (iPhone): decline in the App Tracking Transparency prompt, or later in Settings → Privacy & Security → Tracking.
• Ad consent: Privacy Options in the Game’s Settings (shown where a consent choice applies).
• Advertising ID (Android): reset or delete it in your device’s Google or Privacy settings.
• Notifications: turn them off in your device settings.
• Your rights: depending on where you live (EEA/UK GDPR, Türkiye KVKK Art. 11, California and other US states), you can ask to access, correct, delete or receive a copy of your data, restrict or object to processing, withdraw consent, and opt out of targeted advertising. Contact support@birkinapps.com; we reply within 30 days and may ask for the ID shown in Settings to find your data. We will not treat you differently for using these rights. You can also complain to your data-protection authority (in Türkiye, the Personal Data Protection Authority, KVKK).

9. Children

Restaurant Rush is made for a general audience and is not directed to children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

10. Security

Data is encrypted in transit (HTTPS/TLS). Cloud saves and profiles are protected by Firestore security rules so that only you — and our authorised administrators, for support — can read them, and scores are validated on our servers. No system is perfectly secure, but we work to protect your data.

11. Changes to this policy

We will post any update on this page and change the “Last updated” date. If a change is significant, we will also tell you in the Game or in the store listing.

12. Contact

Birkin Apps — Süleyman Gökhan Birkin, Istanbul, Türkiye
support@birkinapps.com