This Privacy Policy explains how EEVEE labs AS (“we”, “us”, “our”) processes personal data in the Quizmaister mobile app and on related websites, in accordance with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.
1. Who is responsible
Company: EEVEE labs AS
Organisation number: 938 407 282
Address: Sørengkaia 86, 0194 Oslo, Norway
Privacy contact: contact@eevee-labs.com
EEVEE labs AS is the data controller for personal data processed in the Quizmaister app. Quizmaister is the application; EEVEE labs AS is the company that operates it.
We do not currently appoint a Data Protection Officer (DPO). Privacy requests should be sent to contact@eevee-labs.com.
2. What we collect
- Account data: email, display name, profile picture, authentication identifiers (Firebase Auth).
- Sign in with Apple: if you choose it, we receive an email address or an Apple Hide My Email relay address, and on the first authorization we may receive an optional name. We do not receive your Apple ID password.
- Gameplay data: ratings, ranks, wins/losses/draws, accuracy, match and challenge history, league participation, category performance, prestige frames tied to local league wins.
- Social features: friends, challenges, league memberships, in-app notifications.
- User content: feedback you submit, quiz content you generate, suggested questions.
- Technical data: device type, app version, language/region, and data needed to deliver push notifications (if enabled).
- Crash diagnostics via Firebase Crashlytics (when enabled).
- Purchase ledger (our records): transaction ID, product ID, coins credited, timestamp, and your user ID (uid). Card numbers are handled by Apple/Google — we do not receive full payment card numbers.
- Moderation data: user/question reports, blocks, and question flags (reporter and reported ids, reason/note, timestamps).
3. Why we use it (legal bases under GDPR)
- To provide the Quizmaister service you signed up for (contract): accounts, matchmaking, scores, leaderboards, leagues.
- Purchases and bookkeeping (contract; legal obligation where accounting rules require retention of purchase records — typically 5 years).
- Legitimate interests: security, fraud prevention, moderation, improving stability (including Crashlytics), and understanding aggregated usage — balanced against your rights.
- Consent, where required: e.g. push notifications (you can disable them in device settings).
- Legal obligation: when we must retain or disclose data to comply with law.
We do not sell personal data and do not use personal data for advertising profiling.
4. Who we share data with
We do not sell your personal data.
We use service providers that process data on our behalf:
- Google Firebase / Google Cloud (authentication, cloud database, file storage, push messaging, and Firebase Crashlytics) — may process data in the EU/EEA and other countries under appropriate safeguards.
- Apple App Store / Google Play — for distribution and in-app purchases.
- Apple Sign in with Apple — authentication (email or relay address, and an optional name on first authorization).
Other players may see limited profile information (e.g. username, rating, stats, emblems/frames) as part of gameplay and leaderboards.
Moderation: EEVEE labs operators may review reports. New-report alerts can be emailed via Google Cloud Monitoring to our operations inbox. Report content is not used for advertising.
5. How long we keep data
- Account and profile: until you delete your account (Settings → Delete account).
- Gameplay stats on your account: deleted with your account.
- Match / challenge / league results: kept as shared records so opponents’ history stays consistent; on account deletion your display name is anonymised to “Deleted User” while scores remain.
- Purchase ledger: 5 years (bookkeeping / legal obligation & contract).
- Moderation reports, blocks, flags: as long as needed for safety, then reviewed for deletion or further anonymisation.
- Feedback: as long as needed to handle your message, typically up to 24 months.
- Crashlytics diagnostics: per Google Firebase Crashlytics defaults (typically up to 90 days).
We do not auto-delete shared match documents solely because one player has been inactive — that would break the other player’s history. Account deletion removes your profile and anonymises your name in shared history.
6. Your rights (EEA/UK and similar laws)
You may have the right to:
- Access your data (email contact@eevee-labs.com or Settings → Request my data).
- Delete your data (Settings → Delete account).
- View your profile (Settings → Profile details). Username and email cannot be changed in the app; contact contact@eevee-labs.com to correct other data.
- Restrict or object to certain processing.
- Data portability (export).
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority (in Norway: Datatilsynet — https://www.datatilsynet.no).
To exercise rights, use in-app Settings or email contact@eevee-labs.com. We respond within one month where required by law.
7. Security
We use industry-standard measures (encrypted transport, access controls, Firebase security rules). No method is 100% secure.
8. Children
Quizmaister is not directed at children under 13. We do not knowingly collect personal data from children under 13.
9. Changes
We may update this policy. Material changes will be shown in the app and may require re-acceptance.
10. Contact
EEVEE labs AS
contact@eevee-labs.com