Privacy Policy

Who we are

EpiQuiz is a quiz creation and multiplayer game application developed by Valerian Malay.

Contact: epiquiz.support@gmail.com

Data we collect

We collect only the data needed to run the service:

• Nickname — the display name you choose at first launch
• Player ID — a randomly generated identifier (UUID)
• Account details (optional) — an email address and password, or the name, email and profile picture your Google or Apple account shares when you sign in with it
• Profile picture and cover photo — optional images you choose from your device
• Language preference — the language you select in Settings
• Country, region and time zone — an approximate country and region derived from the IP address your device connects from, used for the regional leaderboards, and the time zone your device reports, used to schedule notifications and to count daily streaks
• Quiz content — questions, answers, and images you upload
• Game data — scores, XP, level, ratings, league and season standings, achievements, quests, streaks, energy and gem balance
• Game history — a record of the games you play (theme, score, win/loss, rank, and date) and the other players in them
• Social data — your friends list, friend requests, players you have blocked, and reports you submit
• Purchase records — what you bought, the amount, currency, date, and the payment provider's transaction identifiers (never your card number)
• Push notification token — only if you turn notifications on
• Technical data — crash reports and basic device information (device model, OS version, app version), and the IP address seen by our servers

How we use your data

Your data is used to:

• Display your nickname and profile picture to other players (profiles, lobbies, games, leaderboards, friends)
• Store and retrieve your quizzes
• Show your results, progression, rankings and rewards
• Keep a history of your games and show it on your profile
• Run the friends, challenge and blocking features
• Sign you in and keep your account in sync across devices (optional account)
• Process purchases, grant what you paid for, and keep a receipt of it
• Send you the notifications you opted into
• Detect and fix crashes and abuse
• Remember your language preference

We do not sell your personal data.

Images

Images you upload for quiz questions are stored on Cloudinary (cloudinary.com). If your quiz is set to Public, these images are visible to other users.

Profile picture

Setting a profile picture is optional. When you choose one, the app asks for permission to access your device's photo library, and the photo you select is uploaded to and stored on Cloudinary (cloudinary.com).

Your profile picture is shown next to your name to other players — on your profile, the home screen, and during games (lobby, in-game, round leaderboard, and results).

You can change or remove your profile picture at any time from your Profile screen. Removing it deletes the stored image.

Account and sign-in

You can use EpiQuiz as a guest with only a nickname. Creating an account is optional and exists so your progress survives a lost device.

• Email and password — handled by Supabase Auth (supabase.com); we never see your password, only a hashed form stored by Supabase
• Sign in with Google or Apple — the provider shares your name, email address and (Google) profile picture with us; we use them to create or link your account. Apple lets you hide your real email address

Signing in links the account to the guest profile you already had, so nothing is lost or duplicated. You can sign out, change your details, or delete the account at any time from Settings.

Public quizzes

If you set a quiz to "Public", its name, description, questions, and images become visible to other users. You can change visibility or delete the quiz at any time from My Quizzes.

Users can report inappropriate public quiz content via the report button in the app. Reported content is reviewed and may be removed.

AI Quiz Content Policy

When generating a quiz with AI, the topic you enter is screened before being sent to the AI service. Topics that contain or request content in the following categories are automatically blocked:

• Sexual or obscene content
• Graphic violence or homicide
• Self-harm or suicide
• Illegal drug manufacturing
• Hate speech or discrimination
• Extremism or terrorism
• Weapons manufacturing

This screening runs on our servers — no blocked prompt is forwarded to the AI. The app is designed to comply with Apple App Store and Google Play Store content policies and is intended for general audiences.

If your topic is incorrectly blocked, try rephrasing it. For example, "History of World War II" is accepted, while a topic requesting harmful instructions is rejected.

Payments and purchases

EpiQuiz is free to download and play. It offers optional purchases: the EpiQuiz Infinite subscription and gem packs. Donations are separate — see below.

• On the web, payments are processed by Stripe (stripe.com). Card details are entered on Stripe's own pages and never reach our servers.
• On iOS and Android, subscriptions and gem packs are purchased through the Apple App Store or Google Play, with entitlements managed by RevenueCat (revenuecat.com). We receive the purchase status and the store's transaction identifiers, never your payment details.

We keep a record of each purchase (item, amount, currency, date, status and the provider's identifiers) so we can grant what you paid for, show it in your Purchase history, and handle refunds and disputes. Stripe, Apple, Google and RevenueCat keep their own records under their own privacy policies.

Donations happen outside the app: the Donate button opens Buy Me a Coffee (buymeacoffee.com), where the payment is handled under that platform's own terms and privacy policy. We receive no payment details and no identity from it, the donation is not linked to your account, and it appears in no list inside the app. Donations made through Stripe before this changed are still recorded as described above.

Advertising

EpiQuiz shows ads served by Google AdMob (in the app) and Google AdSense (on the web): an interstitial after some completed quizzes, and rewarded ads you choose to watch in exchange for a bonus.

To serve and measure ads, Google may collect your device's advertising identifier, IP address and general device information, under Google's privacy policy (policies.google.com/privacy). We do not pass your nickname, email or game data to the ad network.

You can limit ad personalisation in your device settings (iOS: Privacy → Tracking / Apple Advertising; Android: Google → Ads). Subscribing to EpiQuiz Infinite removes all ads.

Crash reporting

To find and fix bugs, the app sends crash and error reports to Sentry (sentry.io). A report contains the error, the screens visited just before it, device model, OS version, app version and your anonymous Player ID. It never contains your nickname, email, IP address or the content of your quizzes, and credentials in URLs are removed before sending.

Push notifications

Notifications are off until you turn them on in Settings. If you do, the app registers a push token with Expo's push service (expo.dev), which delivers messages through Apple's and Google's notification services. The token identifies your device only, and is deleted when you turn notifications off or delete your account.

Data retention

Your data is retained until you delete your account. You can permanently delete your account and all associated data (nickname, account details, profile pictures, quizzes, images, scores, progression, game history, friends, purchase records and push token) at any time from Settings → Delete account.

Crash reports are retained by Sentry for 90 days. Payment providers (Stripe, Apple, Google, RevenueCat) keep their own transaction records for as long as their policies and accounting law require.

Aggregate, anonymised game statistics may be kept for service improvement.

Third-party services

We use the following third-party services:

• Supabase — database hosting and account authentication
• Cloudinary — image storage and delivery
• Render — server hosting
• Stripe — payments on the web
• Apple App Store, Google Play and RevenueCat — in-app purchases and subscriptions on mobile
• Buy Me a Coffee — donations, handled entirely on their site
• Google AdMob and Google AdSense — advertising
• Sentry — crash reporting
• Expo — push notification delivery
• Google and Apple — optional sign-in
• Google (Gemini), Perplexity and Anthropic — AI quiz generation: only the topic and settings you enter are sent, never your identity
• DeepL — translation of quiz questions

Each of these services processes data under its own privacy policy. Apart from what is described in this policy, we do not share your personal data with anyone.

Your rights

You have the right to:

• Access your data (visible within the app)
• Correct your nickname and account details (Profile, or Settings)
• Change or remove your profile picture (Profile)
• Turn notifications on or off (Settings)
• Delete your account and all data (Settings → Delete account)
• Receive a copy of your data, or object to a processing described here, by contacting us

If you are in the EU/EEA or the UK, you also have the right to lodge a complaint with your data protection authority.

For any request, contact us at epiquiz.support@gmail.com

Children

EpiQuiz is intended for a general audience and does not knowingly collect personal data from children under 13. The app can be used with only a nickname; an email address is needed only if you choose to create an account.

If you believe a child has provided personal information, contact us at epiquiz.support@gmail.com and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions or requests:

epiquiz.support@gmail.com