Kickoff Quiz · Matchday Rules

Privacy Policy

Last updated · 22 Jun 2026 Version 1.0

Who we are

This Privacy Policy explains how Kickoff Quiz (the Service) collects, uses, and shares your personal information when you create an account, use the mobile application, or visit kickoffquiz.app. The Service is operated by Tomasz Makowski, a sole trader registered in Poland.

By using Kickoff Quiz, you agree to the practices described here. If you don't agree, please don't use the Service.

Information we collect

Account information

  • Email address — required for account creation, login, password resets, and account-related communications.
  • Username — chosen by you, visible to other players in multiplayer sessions.
  • Password — stored only as a salted hash. We cannot see, recover, or share your plain password.
  • Avatar choice — your selected profile picture from our preset gallery.
  • Sign in with Google — if you choose this option, we receive your Google account identifier and email address. We never receive your Google password.

Subscription and purchase data

  • Subscription type (Free, Weekend, Monthly, Yearly) and the date your premium access ends.
  • Purchase tokens issued by Google Play or Apple App Store. We never see your payment card details — those stay with the store.
  • Subscription lifecycle events (renewals, cancellations, refunds) received from Google and Apple.

Gameplay data

  • Game results, scores, and which game modes you played.
  • Lobby participation history (which lobbies you joined, when you played, who else was there).
  • Aggregated statistics (games played, total points).

Technical data

  • Device locale (so the app displays in your language).
  • Refresh tokens stored on your device, used to keep you signed in.
  • IP address — used transiently for rate limiting and abuse prevention; not stored long-term.

What we do not collect

  • We do not collect your contacts, location, photos, microphone audio, or other device data.
  • We do not use third-party analytics SDKs (no Google Analytics, no Mixpanel, no Firebase Analytics).
  • We do not track you across other apps or websites.

How we use your information

We use your data only to:

  • Operate the Service — login, gameplay, leaderboards, multi-device sessions.
  • Send transactional emails (account verification, password reset).
  • Validate subscriptions and process lifecycle events with Google Play and Apple App Store.
  • Show rewarded advertisements to free-tier users via Google AdMob (with your consent where required).
  • Detect and prevent abuse — rate limiting, refund tracking, fraud detection.

We do not sell your data. We do not use your data to build advertising profiles or for audience targeting across other services.

Service providers & third parties

We use the following third parties to operate the Service. Each is bound by its own privacy policy and processes data only on our behalf:

  • Google Cloud Platform — validates your Google sign-in token against Google's public keys.
  • Resend — sends transactional emails (verification, password reset).
  • Google Play and Apple App Store — process subscription payments and send us lifecycle webhooks.
  • Google AdMob — serves rewarded advertisements to free-tier users (only loaded when an ad is shown).
  • Cloudflare — DNS, edge caching, and TLS termination for kickoffquiz.app.
  • Amazon Web Services — hosts our backend servers and database in the EU region.

Data retention

  • Active account — we keep your data as long as your account exists.
  • Account deletion — when you delete your account in-app, we immediately anonymize your record. Your email and username are replaced with random values, your password is cleared, and your access tokens are invalidated. Game session history retains an anonymized reference so other players' historical records stay intact.
  • Authentication tokens — access tokens expire after 15 minutes; refresh tokens expire after 30 days. Both are immediately invalidated on logout or account deletion.
  • Email tokens — email verification tokens expire after 24 hours; password reset tokens after 1 hour. Expired tokens are cleaned up daily.
  • Subscription events — we keep webhook event history for as long as your subscription is active plus 12 months for audit/compliance reasons.

Your rights (GDPR)

Under the EU General Data Protection Regulation, you have the right to:

  • Access your data — email us and we'll send you a copy of everything we store about you (GDPR Article 15).
  • Erase your data — use the in-app Delete account feature, or see how to delete your account (GDPR Article 17).
  • Correct inaccurate data — change your profile in-app.
  • Object to processing or restrict it — contact us via email.
  • Lodge a complaint with your local data protection authority. In Poland, this is UODO — uodo.gov.pl.

The in-app Delete account control is the fastest way to erase your data. For access, correction, or anything else, contact us at the email below — we respond within 30 days as required by GDPR.

Children's privacy

Kickoff Quiz is intended for users aged 13 and older. If you believe a child under 13 has created an account, contact us immediately and we will delete it.

International transfers

Our backend and database are hosted in the European Union. Some service providers (Google, Apple, Cloudflare) may process data in other jurisdictions under EU Standard Contractual Clauses or adequacy decisions.

Changes to this policy

We may update this Privacy Policy from time to time. The Last updated date at the top reflects the most recent revision. Material changes will be communicated via in-app notification or email at least 14 days before they take effect.

Contact

For privacy-related questions or to exercise your rights, write to support@kickoffquiz.app. We aim to respond within 30 days of receiving your request.