Privacy policy
What we store and for how long
| Data | Where | Kept for |
|---|---|---|
| Drafts, idea bank, saved results, preferences | Your device only | Until you uninstall the app, delete them, or use Delete my data |
| Live room: questions, answers, members, results | Our server | Until 6 hours after the quiz ends, 30 days after the room went live, or the quiz master taps Purge, whichever is first |
| Account: an anonymous ID, your display name, when you last opened the app | Our server | 30 days after you last opened the app, or at once via Delete my data |
| Sign-in token | Firebase Authentication (Google) | Deleted with the account |
| Friends and blocks | Our server | Deleted with the account |
| Push notification token | Our server, Firebase Cloud Messaging (Google) | Removed when the token stops working (typically after uninstall) or with the account |
| Room slots you bought and a record of each purchase | Our server | Until the balance is used up or one year after last use, unless you choose Delete everything |
| Content reports | Our server | 30 days |
| Server logs | Our server | 7 days; they never contain question or answer text |
What we do not do
- No advertising, analytics, attribution or crash-reporting SDKs. The Android advertising ID permission is removed from the app.
- No tracking across apps or websites, and no App Tracking Transparency prompt because there is nothing to ask about.
- No selling or sharing of personal data. The only third party is Google’s Firebase, used for anonymous sign-in tokens and push delivery.
- No profiling. Aggregate counts (rooms created, slots used) are kept without any link to a person.
Why we process data
We process the data above to run the quiz you asked for (performance of a contract), and to keep the service safe and lawful (legitimate interests: abuse prevention, content moderation). Purchases are made with Apple or Google; we receive a receipt to credit your slots and never see your payment details.
Where it is
Our server is in London, United Kingdom. Firebase is operated by Google and may process sign-in and push data in the EU and the United States under Google’s standard contractual clauses.
Your rights
Under UK GDPR you can ask for a copy of your data, correct it, or have it deleted. The quickest way to delete it is Settings → Delete my data in the app, which removes everything at once, including the sign-in record; see Delete my data. For anything else email [email protected]. You can also complain to the Information Commissioner’s Office (ico.org.uk).
Children
Tribal Quiz is marketed to adults, and the stores list it accordingly. Children may play on a parent’s or carer’s device at family events. The app follows the UK Children’s Code by design: no tracking, no public profiles, the minimum data, short retention and deletion by default. If you believe a child has created their own account, email us and we will delete it.
Changes
If this policy changes we update the date above and, for anything material, tell you in the app before it applies.