Legal

Privacy Policy

Last updated May 29, 2026

Introduction

QuizDare (“we,” “our,” or “us”) operates the QuizDare mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By using QuizDare, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

Information we collect

Account information

When you create an account, we collect:

  • Email address — Used as your unique account identifier and for password recovery (when you create an email/password account)
  • Password — Hashed using bcrypt before storage; we never store your password in plain text. Not collected when you use Google Sign-In.
  • Username and display name — Shown publicly on leaderboards and to friends
  • From Google Sign-In (if used) — Your email, display name, and Google account identifier. We do not receive your Google password.

Profile information you provide

After signing in, you may provide:

  • Username and display name
  • Country and region
  • Gender (optional)
  • Profile avatar

Usage and activity data

We automatically collect data about how you use QuizDare:

  • Quiz answers, scores, accuracy, and time spent per question
  • Points, XP, levels, streaks, lifelines used, and achievement progress
  • Leaderboard rankings and friend lists
  • App usage patterns and session duration
  • Device type, operating system, app version, and IP address (request logs)

Push notification tokens

If you grant notification permission, we store an Expo Push token tied to your device so we can deliver daily-challenge reminders and streak-at-risk warnings. You can disable notifications in Settings or your device’s system settings.

Advertising identifier

The app uses Google AdMob to show rewarded and rewarded-interstitial ads (for streak claim, post-quiz bonuses, and cold-start). Google collects your device’s advertising identifier and limited ad-interaction data to serve and measure ads. You can opt out of personalized ads in your device’s system settings (Android: Settings → Privacy → Ads).

Payment information

When you purchase Premium ($4.99/month), all payment processing happens through Google Play Billing. We never see or store your card details. We receive only your Google Play purchase token and product identifier so we can grant your premium benefits and verify renewals.

AI interaction data

When you use the AI QuizBot, custom-quiz generation from notes, or file upload (PDF, .docx, .txt) features, the text you provide is sent to OpenAI to generate the response. We sanitize the input before sending (HTML stripping, prompt-injection defense) and cap text length. We do not send your name or email to OpenAI; only the content you typed or uploaded.

How we use your information

We use collected information to:

  • Create and manage your account
  • Generate personalized AI-powered quiz questions
  • Track your progress, streaks, and achievements
  • Display leaderboard rankings (global, country, friends)
  • Send push notifications for daily challenges and streaks
  • Improve app functionality and user experience
  • Detect and prevent fraud, abuse, or policy violations
  • Comply with legal obligations

Data sharing & disclosure

We do not sell your personal information. We may share data with:

  • Service providers — Database (Supabase, EU region), Google Sign-In (optional auth), OpenAI (AI quiz/chat generation), Google AdMob (ads), Google Play Billing (subscriptions), Expo (push delivery) — strictly to operate the App
  • Other users — Your username, display name, level, points, and country are visible on public leaderboards
  • Legal requirements — If required by law, court order, or governmental authority

Data retention

We retain your account data for as long as your account is active. You can delete your account at any time from Settings → Delete Account in the app. When you do, we immediately scrub your personal information — email, password hash, username, display name, avatar, push tokens, OAuth identifiers, refresh tokens, and 2FA secrets are wiped or set to anonymized placeholders. We retain a minimal audit log entry of the deletion for one year (for security and abuse-prevention), and anonymized aggregate statistics (e.g., total quizzes played) may be kept indefinitely. Where required by law, we retain limited records for the statutory period.

Data security

We protect your data with:

  • Encrypted connections (TLS/HTTPS) for all data in transit
  • Encrypted storage for sensitive data at rest
  • Secure token-based authentication (JWT with short-lived access tokens)
  • Regular security audits and dependency updates

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your rights

Depending on your jurisdiction, you may have the right to:

  • Access — Request a copy of your personal data
  • Correction — Update or correct inaccurate information
  • Deletion — Request deletion of your account and data
  • Portability — Receive your data in a portable format
  • Objection — Object to certain data processing activities

To exercise these rights, contact us at [email protected].

Children’s privacy

QuizDare is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly. If you believe your child has provided us data, contact us at [email protected].

Third-party services

Our App uses third-party services that have their own privacy policies:

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy in the App and updating the “Last updated” date. Continued use of the App after changes constitutes acceptance.

Contact us

If you have questions about this Privacy Policy, contact us: