Privacy Policy

Last updated: April 27, 2026 · Effective upon account registration

Enatos Tech ("we", "us", or "our") operates TrivioQ. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service (the TrivioQ website and mobile application). Please read it carefully. By using TrivioQ, you consent to the practices described here.

1. Information We Collect

a) Information You Provide Directly

Account data: email address, username, display name, and password (stored as a secure hash via Firebase Authentication).
Preferences: category interests, difficulty preferences, active notification windows, and target drop frequency you configure in the app.

b) Information Collected Automatically

Usage data: trivia answers submitted, questions received, points earned, streaks, hint and reveal-answer usage, and leaderboard activity.
Device data: device push notification token, operating system platform (iOS / Android / Web), and general device type — collected to deliver push notifications.
Log data: IP address, browser type, pages visited, and timestamps — collected automatically by our servers and third-party infrastructure for security and operational purposes.

c) Information from Third-Party Sign-In

If you sign in using Google, we receive your Google account email address and a unique identifier from Google. We do not receive your Google password. Your use of Google Sign-In is also subject to Google's Privacy Policy.

2. How We Use Your Information

We use the information we collect to:

Create and manage your account and authenticate your identity.
Deliver trivia questions ("Drops") on your chosen schedule and within your category and difficulty preferences.
Calculate and display scores, streaks, and leaderboard rankings.
Send push notifications when new Drops are available (only if you have granted notification permission).
Respond to support requests and communicate important service updates.
Monitor and analyse usage patterns to improve the Service, diagnose technical issues, and prevent abuse.
Enforce our Terms of Service and comply with legal obligations.

We do not use your data for advertising profiling or sell your personal data to third-party advertisers.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal bases for processing your personal data are:

Contract performance — processing necessary to provide the Service you have signed up for.
Legitimate interests — security monitoring, fraud prevention, product improvement, and service communications, where those interests are not overridden by your rights.
Consent — for optional features such as push notifications; you may withdraw consent at any time.
Legal obligation — where we are required by law to process your data.

4. How We Share Your Information

We do not sell your personal data. We may share information in the following limited circumstances:

Service providers: We use Firebase (Google LLC) for authentication, push notification delivery, and database infrastructure. These providers process data only on our behalf and are bound by data processing agreements.
Leaderboard data: Your username, display name, and score are visible to other TrivioQ users on the public leaderboard.
Legal requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g. a court or government agency).
Business transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide you with the Service. If you request account deletion, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain certain records or where data has been incorporated into aggregated, anonymised statistics that do not identify you.

Score and leaderboard history data may be retained in anonymised form for analytical purposes after account deletion.

6. Data Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include encrypted data transmission (TLS/HTTPS), hashed password storage via Firebase Authentication, and access controls limiting who within our organisation can access personal data.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and applicable authorities as required by law.

7. Push Notifications

TrivioQ may send you push notifications to alert you when a new trivia Drop is available. Push notifications require your explicit permission on both iOS and Android. You can withdraw permission at any time through your device's notification settings. Withdrawing notification permission does not affect your ability to use TrivioQ, but you will no longer receive Drop alerts.

When you grant notification permission, we store your device push token to route notifications to your device. This token is not shared with third parties beyond the notification delivery infrastructure (Firebase Cloud Messaging).

8. Children's Privacy

TrivioQ is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you believe your child has provided us with personal data without your consent, please contact us at [email protected] and we will promptly delete that information.

9. Your Rights

Depending on your location, you may have certain rights regarding your personal data, including the right to:

Access — request a copy of the personal data we hold about you.
Rectification — request correction of inaccurate or incomplete data.
Erasure ("right to be forgotten") — request deletion of your personal data, subject to legal retention requirements.
Restriction of processing — request that we limit how we process your data in certain circumstances.
Data portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.
Withdraw consent — where processing is based on consent (e.g. push notifications), you may withdraw at any time.

California residents also have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days (or sooner where required by law).

10. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those of your country. When we transfer personal data across borders, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or rely on adequacy decisions where applicable.

11. Third-Party Links and Services

TrivioQ may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through TrivioQ.

Key third-party services we use include:

Firebase (Google LLC) — authentication, Firestore, Cloud Messaging. Subject to Google's Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you via email or a prominent notice within the Service and update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of TrivioQ after the effective date of changes constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Enatos Tech

Privacy enquiries: [email protected]
General support: [email protected]