This notice explains how Interactive Knowledge Group Ltd ("we", "us") processes personal data in connection with the Trivora quiz platform - our websites, mobile applications, and related services (the "Service"). We are committed to handling your information lawfully, fairly, and transparently.
For data protection law (including the UK GDPR and EU GDPR where applicable), the data controller is Interactive Knowledge Group Ltd. The Trivora brand identifies the Service we provide. You can contact us about privacy matters through our Support form or Contact page.
1. Scope
This notice applies to personal data we process as a controller. It does not cover third-party sites or services that we link to; their own privacy policies apply.
2. What personal data we collect
Depending on how you use the Service, we may process the following categories of data:
Account and authentication
- Identifiers such as email address, authentication tokens, and user ID assigned when you register.
- Password or one-time codes if you use email or similar sign-in methods (passwords are handled using industry-standard practices via our auth provider).
Profile and gameplay
- Display name, username, avatar or profile image where you provide one, country or region where you choose to share it, and biography fields if available.
- Gameplay and competition data: quiz attempts, scores, reaction times, streaks, ranks, match and tournament outcomes, live session participation, invites, friends or social graph where you connect with others, and similar telemetry needed to run leaderboards and fair play systems.
- In-app economy data: virtual currency balances, purchases, rewards, referrals, and subscription status where applicable.
Technical and usage data
- Device type, operating system, app version, approximate locale, IP address, and network timestamps.
- Diagnostic and security logs, crash reports where you or your platform share them, and records of feature usage that help us maintain performance and integrity.
- Advertising identifiers and related device signals when advertising or measurement partners are enabled (for example Google Advertising ID on Android or the Identifier for Advertisers on iOS where available), plus limited app and device context required to request, measure, and prevent fraud against ads.
Support, ideas, and communications
- Information you submit through Support or Contact forms (for example name, email, phone if optional, and the content of your message).
- Ideas or feedback you submit via dedicated idea forms, including name and email.
- Records of correspondence we need to resolve your request.
Analytics events
Where enabled, we may record analytics events (for example screen views or named in-app actions) in our systems, linked to your user account when you are signed in, or processed without direct identification where possible. This helps us understand product usage and improve the Service.
3. How we use your data (purposes)
We use personal data to:
- Provide, operate, and secure the Service, including authentication, matchmaking, scoring, leaderboards, live events, and in-app features.
- Maintain fair play: detect abuse, enforce our Terms, investigate reports, and protect users.
- Process payments and subscriptions where you purchase paid features, through payment processors.
- Communicate with you about service updates, security alerts, and responses to Support or Contact requests.
- Improve and develop the Service, including analytics, research, and troubleshooting.
- Show advertisements (including rewarded or other optional ads), measure ad performance, and protect against invalid traffic, when advertising is enabled in the Service.
- Comply with legal obligations and defend our legal rights.
4. Legal bases (UK / EEA)
Where UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases:
- Contract - processing necessary to provide the Service you request (accounts, gameplay, rankings, purchases you initiate).
- Legitimate interests - improving the product, analytics that do not override your rights, security, fraud prevention, and fair-play enforcement, where balanced against your interests.
- Legal obligation - where we must retain or disclose data to comply with law.
- Consent - where we ask for optional permissions (for example certain notifications, marketing if offered, or personalised advertising / advertising identifiers where required by law) and you agree. You may withdraw consent at any time without affecting prior processing that was lawful.
5. Advertising and third-party ad partners
From time to time the mobile apps may display advertisements served by third-party advertising networks, including Google AdMob (and related Google advertising services). Ads may be optional (for example a rewarded video you choose to watch for an in-app benefit such as coins) or other formats we introduce. We do not offer real-money prizes as ad rewards; in-app rewards, if any, are virtual items usable only within the Service.
When advertising is enabled, Google and other ad partners may collect or receive identifiers and device or usage data to:
- Serve ads on our behalf and measure whether an ad was shown or interacted with.
- Limit how often you see the same ad (frequency capping) and detect invalid or fraudulent traffic.
- Where allowed and you have consented (or another lawful basis applies), deliver more relevant ads. You can also control personalised ads through your device settings (for example resetting or limiting the advertising ID on Android or iOS) and, where we present a consent message in the European Economic Area, United Kingdom, or other regions that require it, through that in-app consent flow.
Google's processing of data for AdMob and related products is described in Google's privacy policies, including Google Privacy Policy and information for AdMob and privacy. How we share data for ads is also reflected in the app store privacy or Data safety labels for Trivora when advertising is live.
You can limit personalised advertising via device settings without uninstalling the app. Blocking all advertising-related processing may limit our ability to show certain ad formats, but core quiz play does not depend on watching ads.
6. Sharing and processors
We do not sell your personal data. We share data only as needed to run the Service, with service providers who process data on our instructions ("processors") or, for advertising, independent controllers/partners as described by their policies, including for example:
- Cloud hosting and database providers (we use Supabase for authentication, database, and related infrastructure).
- Payment and subscription platforms (such as app stores or payment gateways) when you make a purchase.
- Email or messaging delivery where we send transactional communications.
- Analytics or crash tooling if integrated, subject to this notice and provider terms.
- Advertising and measurement partners, including Google (AdMob and related Google advertising products), when ads are enabled in the apps.
We may disclose data if required by law, court order, or governmental request, or to protect the rights, safety, and security of Interactive Knowledge Group Ltd, our users, or the public. A business transfer (for example merger or acquisition) may involve transferring data to a successor under appropriate safeguards.
7. International transfers
Our providers may process data in the United Kingdom, the European Economic Area, the United States, or other countries. Where data is transferred outside the UK/EEA, we use appropriate safeguards recognised by law (such as standard contractual clauses or adequacy decisions) where required.
8. Retention
We retain personal data only as long as necessary for the purposes above, including legal, accounting, and dispute resolution needs. Gameplay and account data are typically kept for the life of your account and a reasonable period afterwards unless we must keep it longer. Support tickets and idea submissions may be retained to track history and improve the Service. Analytics may be aggregated or pseudonymised over time. Advertising partners retain data according to their own policies and retention periods.
9. Security
We implement technical and organisational measures appropriate to the risk, including encryption in transit where standard for our stack, access controls, and monitoring. No method of transmission or storage is completely secure; please use a strong password and protect your device.
10. Your rights
Depending on your location, you may have rights to:
- Access a copy of your personal data.
- Rectify inaccurate data.
- Erase data in certain circumstances.
- Restrict or object to certain processing.
- Data portability for data you provided where processing is based on contract or consent and automated.
- Withdraw consent where processing is consent-based (including advertising consent where applicable).
- Lodge a complaint with a supervisory authority (in the UK, the ICO).
To exercise rights, contact us via Support. We may need to verify your identity before responding. You will not usually have to pay a fee; we will respond within the timeframe required by law.
11. Children
The Service is not directed at children below the age at which they may lawfully use online services in their country without parental involvement. We do not knowingly collect personal data from children in breach of applicable law. If you believe we have done so, please contact us and we will take appropriate steps. We do not intentionally use AdMob or other advertising networks to target children, and we configure advertising for an audience that is not children-directed where the products allow that setting.
12. Cookies and similar technologies
Our websites and apps may use cookies, local storage, software development kits (SDKs), advertising identifiers, or similar technologies to keep you signed in, remember preferences, measure performance, serve and measure ads, and prevent fraud. You can control cookies through your browser settings and advertising identifiers through device or in-app consent settings where offered; blocking essential technologies may affect functionality.
13. Changes to this notice
We may update this notice to reflect changes to our practices or legal requirements. We will post the updated version and revise the "Last updated" date. Material changes may be communicated through the Service or by email where appropriate.