Privacy policy
The short version
- You can play solo rounds without an account. Those rounds stay on your phone.
- With an account we keep your email, your player name and username, your game history and your coins, so the game works across phones and challenges are fair.
- We don’t ask for your birthday to sign up: you tick a box to confirm you’re 13 or older. If you later confirm your birthday in the coin store to get the 18+ settings, we don’t store it. We keep only whether you’re 13 to 17 or 18 and older.
- We don’t sell your personal information.
- Ads appear only if you choose to watch one for coins. Players under 18 never get personalized ads.
- You can see, correct or delete your information at any time.
Who we are
Qwhiz is a trivia game made by ArmoTech Corporation (“we”, “us”). This policy covers the Qwhiz app, the website at qwhiz.ai, and emails we send. Our privacy officer can be reached at privacy@qwhiz.ai.
What we collect
If you play as a guest
Your username, rounds, scores and streak are saved on your phone only. We receive crash reports if the app crashes (see below), and nothing else about you.
If you make an account
| What | Examples |
|---|---|
| Account details | Email address, password (stored only as a secure hash), player name, username, avatar, time zone |
| Age check | That you confirmed you’re 13 or older, and when. Whether you’re 18 or older, if you confirmed a birthday in the coin store (accounts start with the under-18 settings). Never your birthday |
| Game activity | Rounds you play on our server, answers and timings, scores, challenges, Live rooms, streaks, trophies, badges |
| Friends and safety | Your friend code, friends, requests, players you block, reports you make or that are made about you |
| Q Coins | Your balance and coin history, looks you own, ads you watched for coins, coin packs you bought (pack, price, date and the store’s transaction number, never your card details) |
| Notifications | A push token for your phone and your notification settings, if you turn notifications on |
| Support | Emails you send us and our replies |
From your phone, for everyone
- Crash reports: when the app crashes or hits an error, it sends the error, the app version and the phone model and system. No name, email or account ID is attached.
- Server logs: our servers record IP addresses and request times to keep the service running and secure.
Product analytics, for accounts only
For signed-in accounts that passed the age check, the app sends usage events such as “round finished” or “challenge sent” to help us improve Qwhiz. They are linked to a random analytics ID, not your email, name or account ID, and never include the questions or your answers. The app sends them straight to Mixpanel, our analytics provider in the United States, which receives your connection’s IP address with them and uses it to estimate a rough location (country, region and city). Guests send none.
How we use it
- To run the game: accounts, rounds, challenges, Live rooms, streaks, friends, trophies, coins and looks.
- To keep it fair: timing rounds on our server, checking scores and spotting cheating.
- To keep players safe: handling blocks and reports, and moderating names.
- To send the emails you need: sign-up, password reset and email change codes.
- To send news about Qwhiz, only if you ticked the box to get it. Every news email has an unsubscribe link.
- To send notifications you switched on, never between 10 pm and 7 am.
- To answer support requests, fix bugs and improve the game.
- To meet legal duties, such as tax records for purchases.
We don’t use your information to make decisions about you that have legal or similar effects.
Ads and tracking
Qwhiz shows an ad only when a signed-in player taps “Watch an ad” in the coin shop. There are no ads in rounds and none for guests. The ads come from Google AdMob.
- Players under 18 get only non-personalized ads, and the app never asks them about tracking.
- Players 18 and older are asked by iPhone whether Qwhiz may use their activity in other apps for ads (App Tracking Transparency). If you allow it, Google may use your phone’s advertising identifier to choose ads. If you don’t, ads are not personalized. Your coins are the same either way, and you can change your answer in iPhone Settings → Privacy & Security → Tracking.
- Where privacy law requires it, Google’s consent form asks first, and you can reopen it from the coin shop.
- To show an ad, Google receives what any ad needs: the phone’s IP address (for a rough location), its model and system, an ID for this app on the phone, and which ads were shown and watched.
- To credit coins, Google tells our server that an ad finished for a random ID linked to your account. Google doesn’t receive your email or name from us.
Under some US state laws, letting Google personalize ads for adults who allow tracking may count as “sharing” personal information for advertising. You can stop it at any time with the tracking setting above.
Our website
- Google Analytics runs on qwhiz.ai only if you accept analytics cookies in the banner. It measures visits and clicks on store buttons. It never receives challenge or room codes, names or emails. You can change your choice with “Cookie settings” at the bottom of every page.
- Launch list: if you join, we keep your email, the date, where you signed up and the exact wording you agreed to, as proof of consent. We email you a link to confirm, and you can unsubscribe at any time.
- Challenge pages show the sender’s player name, avatar and the score to beat, so the person invited knows who sent it. They never show emails.
Who helps us run Qwhiz
We share information with these service providers only so they can do their job for us. They may not use it for anything else.
| Provider | What they do |
|---|---|
| Supabase | Our database, sign-in and server functions |
| Twilio SendGrid | Sends code and launch-list emails |
| Microsoft 365 | Our support and privacy mailboxes |
| Expo | Delivers push notifications to your phone |
| Sentry | Crash reports |
| Mixpanel | Product analytics for signed-in accounts, under a random ID, with a rough location from the IP address |
| Google AdMob | Optional rewarded ads |
| RevenueCat | Checks App Store receipts for coin packs, under a random ID |
| Apple | App Store downloads and payments, and push notifications |
| Vercel | Hosts qwhiz.ai |
| Google Analytics | Website statistics, only with your consent |
| Anthropic and OpenAI | Help write and check questions. They receive no information about players |
We may also disclose information if the law requires it, to protect someone’s safety, or as part of a sale or merger of the business, in which case this policy keeps applying to it.
Where your information is kept
Our main database is in Canada. Some providers above process information in the United States or other countries, where local law may let authorities access it. We choose providers that protect it to a standard comparable to this policy.
How long we keep it
- Account information: until you delete your account. We delete it within 30 days, including backup copies as they expire.
- Challenge results stay with the other players in that challenge, without your name or username.
- Analytics events: we remove the link between your account and its analytics ID when you delete your account.
- Support emails: up to 2 years.
- Purchase records: as long as tax law requires.
- Launch list: until you unsubscribe. If you never confirm, we delete the request after 30 days. After you unsubscribe we keep your email and the consent record, so we never email you by mistake and can show what you agreed to, as long as the law requires.
Age and teens
Qwhiz is for players 13 and older. We don’t knowingly collect information from children under 13. If we learn that an account belongs to someone under 13, we suspend its online features and delete it once we confirm. If you think a child under 13 is using Qwhiz, write to privacy@qwhiz.ai.
For players 13 to 17: no personalized ads, no tracking question, a US$50 monthly limit on coin purchases, and we don’t target them with paid marketing.
Your choices and rights
- See or copy the information we hold about you.
- Correct it. You can change most details yourself in the app.
- Delete your account in the app, or follow these steps.
- Withdraw consent to news emails (unsubscribe link), website analytics (Cookie settings) or ad tracking (iPhone Settings).
- Turn off notifications in the app or in your phone’s Settings.
Write to privacy@qwhiz.ai from the email on your account. We reply within 30 days and may ask you to confirm the request is yours. We won’t treat you differently for using these rights.
If you’re not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec if you live in Quebec, or the privacy regulator where you live.
Security
Information travels encrypted, passwords are stored only as secure hashes, and access to player data is limited to the people who need it to run Qwhiz. No system is perfectly secure; if a breach puts you at risk, we will tell you and the regulators as the law requires.
Changes to this policy
We’ll update the date at the top when this policy changes, and tell you in the app or by email before an important change takes effect.
Contact us
Privacy questions and requests: privacy@qwhiz.ai. Everything else: support@qwhiz.ai.