Privacy policy
The short version. Players don't need an account, and their names and answers only exist while the quiz is running. Hosts can sign in with an email address or Apple so their purchases follow them. We don't sell data, we don't show third-party ads, and we don't track you across other apps or websites.
Who we are
Quizzo (the app, and the website at quizzoria.com) is run by AppFleet (“we”, “us”). AppFleet is the data controller for the personal data described here. For anything about privacy, email umer@appfleet.org.
What we collect, and why
| Data | Who it's about | Why we use it | How long we keep it |
|---|---|---|---|
| Email address and an account ID | Hosts who sign in by email | To email you a sign-in code and to link your purchases to you on every device | Until you ask us to delete your account |
| Name and email from Sign in with Apple | Hosts who use Apple | To sign you in. Apple lets you hide your real email | On your device, until you sign out or delete the app |
| Player and team names, answers, buzzes and scores | Everyone in a quiz | To run the quiz and show the leaderboard | Only in the server's memory while the room is open. Deleted when the room closes, at most 6 hours after it was last used |
| Photos a host adds to a picture round | Hosts | To show them on the big screen and players' phones | In the server's memory while the room is open, then deleted |
| Your quizzes, nights and settings | Hosts | So you can build and replay quizzes | Stored on your own device, not on our servers |
| Purchase records: plan, renewal date, and Paddle customer and subscription IDs | Hosts who buy Pro, Venue or a pack | To unlock what you paid for | For as long as the subscription is active, then as long as tax and accounting law requires |
| Usage counts, such as “a room was created” or “a quiz was finished”, plus how often each library question is answered correctly | Everyone, without names | To keep questions fair and improve the app. These events contain no names, emails or IP addresses | Up to 24 months |
| Error reports: the error message, app version, platform and a random session ID | Anyone whose app hits an error | To find and fix bugs | Up to 12 months |
| A question report you send from the reveal screen, and the reason you give | Hosts | To check and correct the question | Until the report is resolved |
| Standard server logs, including IP addresses | Anyone who connects | To keep the service secure and stop abuse, for example rate limiting | Up to 30 days |
Camera. Quizzo only uses your camera to scan a room's QR code. No image is saved or sent anywhere.
Photos. Quizzo only reads the photos you choose to add to a round.
Notifications. Reminders for a night you've scheduled are set up on your device. We don't send marketing push notifications.
Who we share it with
We only share data with the companies that help us run Quizzo, and only what each one needs:
- Contabo GmbH hosts our servers in the European Union (France).
- Resend delivers sign-in emails. It receives your email address and the code.
- Paddle handles payments on the web as our reseller (Merchant of Record). It collects your payment and billing details under its own privacy policy, and we never see your card number.
- Apple and Google handle in-app purchases in their stores, under their own privacy policies. RevenueCat confirms those purchases for us.
- Google Fonts serves the fonts on our website, so your browser connects to Google when it loads a page.
We may also disclose data if the law requires it, or to protect people's safety. We never sell or rent personal data, and we don't share it for advertising. The ads on the free plan are our own messages on the big screen; no ad network is involved.
Legal bases
Where the EU or UK GDPR, or a similar law, applies, we rely on these legal bases:
- Contract: running quizzes, signing you in and unlocking purchases.
- Legitimate interests: security, fixing errors and improving questions with anonymous counts.
- Legal obligation: tax and accounting records.
- Consent: camera, photos and notifications. You can switch these off in your phone's settings at any time.
Children
Quizzo is a family-friendly party game, and children often play in a quiz someone else hosts. Players don't create accounts. They type a nickname, and that nickname only exists while the room is open. Names are filtered for rude words.
Signing in and making purchases are for hosts who are adults, or who have a parent's or guardian's permission where local law requires it. We don't knowingly collect personal data from children under 13 (or the age set by your local law) beyond the temporary nickname. If you think a child has given us personal data, email us and we'll delete it.
Your rights
Depending on where you live, you have the right to:
- see the personal data we hold about you
- correct it
- delete it
- get a copy you can take elsewhere
- object to or restrict how we use it
- withdraw your consent
These rights come from laws such as the EU and UK GDPR, the California Consumer Privacy Act, Brazil's LGPD and Canada's PIPEDA. To use any of them, including deleting your account, email umer@appfleet.org from the address you sign in with. We'll reply within 30 days, and it's free.
We don't sell or “share” personal information as the CCPA defines those words. We treat it the same way whichever privacy rights you exercise. You can also complain to your local data protection authority.
Where your data is stored
Our servers are in the European Union. Some of the companies listed above may process data in other countries, including the United States. When they do, they're covered by safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
Security
Every connection to Quizzo is encrypted (HTTPS and secure WebSockets). Sign-in codes expire after 15 minutes and are stored only as a hash. We keep as little personal data as we can.
Changes
If we change this policy, we'll update the date at the top. If the change is significant, we'll tell hosts in the app before it takes effect.