This notice explains how Interactive Knowledge Group Ltd ("we", "us") processes personal data in connection with the Trivora quiz platform - our websites, mobile applications, and related services (the "Service"). We are committed to handling your information lawfully, fairly, and transparently.
For data protection law (including the UK GDPR and EU GDPR where applicable), the data controller is Interactive Knowledge Group Ltd. The Trivora brand identifies the Service we provide. You can contact us about privacy matters through our Support form or Contact page.
1. Scope
This notice applies to personal data we process as a controller. It does not cover third-party sites or services that we link to; their own privacy policies apply.
2. What personal data we collect
Depending on how you use the Service, we may process the following categories of data:
Account and authentication
- Identifiers such as email address, authentication tokens, and user ID assigned when you register.
- Password or one-time codes if you use email or similar sign-in methods (passwords are handled using industry-standard practices via our auth provider).
Profile and gameplay
- Display name, username, avatar or profile image where you provide one, country or region where you choose to share it, and biography fields if available.
- Gameplay and competition data: quiz attempts, scores, reaction times, streaks, ranks, match and tournament outcomes, live session participation, invites, friends or social graph where you connect with others, and similar telemetry needed to run leaderboards and fair play systems.
- In-app economy data: virtual currency balances, purchases, rewards, referrals, and subscription status where applicable.
Technical and usage data
- Device type, operating system, app version, approximate locale, IP address, and network timestamps.
- Diagnostic and security logs, crash reports where you or your platform share them, and records of feature usage that help us maintain performance and integrity.
- Advertising identifiers and related device signals are not collected in the iOS or Android apps today, because advertisements are not shown in those apps. If we enable advertising later, partners may include Google AdMob, and we may then collect advertising identifiers (for example Google Advertising ID on Android or the Identifier for Advertisers on iOS where available) only while ads are enabled. We will update this notice, Play Data safety, and App Store privacy labels before that ships.
Support, ideas, and communications
- Information you submit through Support or Contact forms (for example name, email, phone if optional, and the content of your message).
- Ideas or feedback you submit via dedicated idea forms, including name and email.
- Records of correspondence we need to resolve your request.
Analytics events
Where enabled, we may record analytics events (for example screen views or named in-app actions) in our systems, linked to your user account when you are signed in, or processed without direct identification where possible. This helps us understand product usage and improve the Service.
3. How we use your data (purposes)
We use personal data to:
- Provide, operate, and secure the Service, including authentication, matchmaking, scoring, leaderboards, live events, and in-app features.
- Maintain fair play: detect abuse, enforce our Terms, investigate reports, and protect users.
- Process payments and subscriptions where you purchase paid features, through payment processors.
- Communicate with you about service updates, security alerts, and responses to Support or Contact requests.
- Improve and develop the Service, including analytics, research, and troubleshooting.
- If we enable advertising later, show advertisements (including optional rewarded ads for virtual coins only, never cash), measure ad performance, and protect against invalid traffic. Ads are not currently shown in the iOS or Android apps.
- Comply with legal obligations and defend our legal rights.
4. Legal bases (UK / EEA)
Where UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases:
- Contract - processing necessary to provide the Service you request (accounts, gameplay, rankings, purchases you initiate).
- Legitimate interests - improving the product, analytics that do not override your rights, security, fraud prevention, and fair-play enforcement, where balanced against your interests.
- Legal obligation - where we must retain or disclose data to comply with law.
- Consent - where we ask for optional permissions (for example certain notifications, marketing if offered, or personalised advertising / advertising identifiers where required by law) and you agree. You may withdraw consent at any time without affecting prior processing that was lawful.
5. Advertising and third-party ad partners
Ads are not currently shown in the Trivora iOS or Android apps. We do not load an advertising SDK in the live store binary today, and we do not collect advertising identifiers for ads while that remains true.
If we enable advertising later, partners may include Google AdMob (and related Google advertising services). We will update this notice, Play Data safety, and App Store privacy labels before that ships. Rewards for ads, if ever enabled, will be virtual coins only, not cash, and cannot be withdrawn.
When advertising is enabled, Google and other ad partners may collect or receive identifiers and device or usage data to serve and measure ads, limit how often you see the same ad, and detect invalid traffic. Personalised ads in the UK/EEA will require a consent message in the app before they run. That consent message is not in the app today because ads are not shown.
Google's processing of data is described in Google Privacy Policy, How Google uses data, and AdMob and privacy.
6. Sharing and processors
We do not sell your personal data. We share data only as needed to run the Service, with service providers who process data on our instructions ("processors") or, for advertising, independent controllers/partners as described by their policies, including for example:
- Cloud hosting and database providers (we use Supabase for authentication, database, and related infrastructure).
- Payment and subscription platforms (such as app stores or payment gateways) when you make a purchase.
- Email or messaging delivery where we send transactional communications.
- Analytics or crash tooling if integrated, subject to this notice and provider terms.
- Advertising and measurement partners, including Google (AdMob and related Google advertising products), when ads are enabled in the apps.
We may disclose data if required by law, court order, or governmental request, or to protect the rights, safety, and security of Interactive Knowledge Group Ltd, our users, or the public. A business transfer (for example merger or acquisition) may involve transferring data to a successor under appropriate safeguards.
7. International transfers
Our providers may process data in the United Kingdom, the European Economic Area, the United States, or other countries. Where data is transferred outside the UK/EEA, we use appropriate safeguards recognised by law (such as standard contractual clauses or adequacy decisions) where required.
8. Retention
We retain personal data only as long as necessary for the purposes above, including legal, accounting, and dispute resolution needs. Gameplay and account data are typically kept for the life of your account and a reasonable period afterwards unless we must keep it longer. Support tickets and idea submissions may be retained to track history and improve the Service. Analytics may be aggregated or pseudonymised over time. Advertising partners retain data according to their own policies and retention periods.
9. Security
We implement technical and organisational measures appropriate to the risk, including encryption in transit where standard for our stack, access controls, and monitoring. No method of transmission or storage is completely secure; please use a strong password and protect your device.
10. Your rights
Depending on your location, you may have rights to:
- Access a copy of your personal data.
- Rectify inaccurate data.
- Erase data in certain circumstances.
- Restrict or object to certain processing.
- Data portability for data you provided where processing is based on contract or consent and automated.
- Withdraw consent where processing is consent-based (including advertising consent where applicable).
- Lodge a complaint with a supervisory authority (in the UK, the ICO).
To exercise rights, contact us via Support. We may need to verify your identity before responding. You will not usually have to pay a fee; we will respond within the timeframe required by law.
11. Children
Trivora is for people aged 13 and over. It is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If we learn that a user is under 13, we delete the account and associated personal data.
The Service includes chat, Custom Quiz, usernames, and live events. In the apps we ask you to select your year of birth so we can confirm you are 13 or older before you use those features. If that year is close to 13, we also ask for month and day so we can work out whether your 13th birthday has happened yet. We use that information only for the check. We do not store the year, month, or day, and we do not keep a date of birth. If you confirm you are under 13, we delete the account and sign you out. We do not use advertising to target children.
12. Cookies and similar technologies
Our websites and apps may use cookies, local storage, and similar technologies to keep you signed in, remember preferences, measure performance, and prevent fraud. Advertising identifiers and ad SDKs are not used in the mobile apps today. You can control cookies through your browser settings; blocking essential technologies may affect functionality.
13. Changes to this notice
We may update this notice to reflect changes to our practices or legal requirements. We will post the updated version and revise the "Last updated" date. Material changes may be communicated through the Service or by email where appropriate.