This notice explains how Interactive Knowledge Group Ltd ("we", "us") processes personal data in connection with the Trivora quiz platform — our websites, mobile applications, and related services (the "Service"). We are committed to handling your information lawfully, fairly, and transparently.
For data protection law (including the UK GDPR and EU GDPR where applicable), the data controller is Interactive Knowledge Group Ltd. The Trivora brand identifies the Service we provide. You can contact us about privacy matters through our Support form or Contact page.
1. Scope
This notice applies to personal data we process as a controller. It does not cover third-party sites or services that we link to; their own privacy policies apply.
2. What personal data we collect
Depending on how you use the Service, we may process the following categories of data:
Account and authentication
- Identifiers such as email address, authentication tokens, and user ID assigned when you register.
- Password or one-time codes if you use email or similar sign-in methods (passwords are handled using industry-standard practices via our auth provider).
Profile and gameplay
- Display name, username, avatar or profile image where you provide one, country or region where you choose to share it, and biography fields if available.
- Gameplay and competition data: quiz attempts, scores, reaction times, streaks, ranks, match and tournament outcomes, live session participation, invites, friends or social graph where you connect with others, and similar telemetry needed to run leaderboards and fair play systems.
- In-app economy data: virtual currency balances, purchases, rewards, referrals, and subscription status where applicable.
Technical and usage data
- Device type, operating system, app version, approximate locale, IP address, and network timestamps.
- Diagnostic and security logs, crash reports where you or your platform share them, and records of feature usage that help us maintain performance and integrity.
Support, ideas, and communications
- Information you submit through Support or Contact forms (for example name, email, phone if optional, and the content of your message).
- Ideas or feedback you submit via dedicated idea forms, including name and email.
- Records of correspondence we need to resolve your request.
Analytics events
Where enabled, we may record analytics events (for example screen views or named in-app actions) in our systems, linked to your user account when you are signed in, or processed without direct identification where possible. This helps us understand product usage and improve the Service.
3. How we use your data (purposes)
We use personal data to:
- Provide, operate, and secure the Service, including authentication, matchmaking, scoring, leaderboards, live events, and in-app features.
- Maintain fair play: detect abuse, enforce our Terms, investigate reports, and protect users.
- Process payments and subscriptions where you purchase paid features, through payment processors.
- Communicate with you about service updates, security alerts, and responses to Support or Contact requests.
- Improve and develop the Service, including analytics, research, and troubleshooting.
- Comply with legal obligations and defend our legal rights.
4. Legal bases (UK / EEA)
Where UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases:
- Contract — processing necessary to provide the Service you request (accounts, gameplay, rankings, purchases you initiate).
- Legitimate interests — improving the product, analytics that do not override your rights, security, fraud prevention, and fair-play enforcement, where balanced against your interests.
- Legal obligation — where we must retain or disclose data to comply with law.
- Consent — where we ask for optional permissions (for example certain notifications or marketing, if offered) and you agree. You may withdraw consent at any time without affecting prior processing that was lawful.
5. Sharing and processors
We do not sell your personal data. We share data only as needed to run the Service, with service providers who process data on our instructions ("processors"), including for example:
- Cloud hosting and database providers (we use Supabase for authentication, database, and related infrastructure).
- Payment and subscription platforms (such as app stores or payment gateways) when you make a purchase.
- Email or messaging delivery where we send transactional communications.
- Analytics or crash tooling if integrated, subject to this notice and provider terms.
We may disclose data if required by law, court order, or governmental request, or to protect the rights, safety, and security of Interactive Knowledge Group Ltd, our users, or the public. A business transfer (for example merger or acquisition) may involve transferring data to a successor under appropriate safeguards.
6. International transfers
Our providers may process data in the United Kingdom, the European Economic Area, the United States, or other countries. Where data is transferred outside the UK/EEA, we use appropriate safeguards recognised by law (such as standard contractual clauses or adequacy decisions) where required.
7. Retention
We retain personal data only as long as necessary for the purposes above, including legal, accounting, and dispute resolution needs. Gameplay and account data are typically kept for the life of your account and a reasonable period afterwards unless we must keep it longer. Support tickets and idea submissions may be retained to track history and improve the Service. Analytics may be aggregated or pseudonymised over time.
8. Security
We implement technical and organisational measures appropriate to the risk, including encryption in transit where standard for our stack, access controls, and monitoring. No method of transmission or storage is completely secure; please use a strong password and protect your device.
9. Your rights
Depending on your location, you may have rights to:
- Access a copy of your personal data.
- Rectify inaccurate data.
- Erase data in certain circumstances.
- Restrict or object to certain processing.
- Data portability for data you provided where processing is based on contract or consent and automated.
- Withdraw consent where processing is consent-based.
- Lodge a complaint with a supervisory authority (in the UK, the ICO).
To exercise rights, contact us via Support. We may need to verify your identity before responding. You will not usually have to pay a fee; we will respond within the timeframe required by law.
10. Children
The Service is not directed at children below the age at which they may lawfully use online services in their country without parental involvement. We do not knowingly collect personal data from children in breach of applicable law. If you believe we have done so, please contact us and we will take appropriate steps.
11. Cookies and similar technologies
Our websites and apps may use cookies, local storage, or similar technologies to keep you signed in, remember preferences, measure performance, and prevent fraud. You can control cookies through your browser settings; blocking essential cookies may affect functionality.
12. Changes to this notice
We may update this notice to reflect changes to our practices or legal requirements. We will post the updated version and revise the "Last updated" date. Material changes may be communicated through the Service or by email where appropriate.