Privacy Policy
Last updated: 3 November 2026
This policy explains what personal data the QuizUni app ("QuizUni", "we", "us") collects, why, who it is shared with, how long it is kept and what choices you have. QuizUni is a live exam-duel app for students preparing for YKS, ENEM, NEET and JEE Main, UTBK-SNBT, 수능 (CSAT), JAMB UTME, the SAT, GCSE and A-Level, the Abitur, the baccalauréat and the 大学入学共通テスト (Common Test for University Admissions).
1. Who we are
QuizUni is provided by Nautiluse Limited, a company registered in England and Wales (company number 14904815), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom ("Nautiluse"), which is the data controller for the data described here. Contact: quizuniapp@gmail.com.
2. Data we collect
| Category | What | Source |
|---|---|---|
| Account | A user ID, the sign-in provider (Apple or Google), the email address and name that provider shares with us. With Sign in with Apple you can hide your email; we then receive an Apple relay address. | You, via Apple or Google |
| Profile | Username, avatar, country, exam, section and field, language choice, student or graduate status, school (if you choose one), invite code used, and, only if you add it, your full name (visible only to you). | You |
| Device | A one-way hash of your device identifier, used to allow one account per device; the platform (iOS or Android); push notification token; app-integrity attestation (Firebase App Check). | Your device |
| Gameplay | Matches, your answers and their timing, scores, XP, level, streaks, energy, per-subject statistics, your mistakes notebook, leaderboard positions and badges. | Your use of the app |
| Social | Friend code, friends and friend requests, blocks, duel and room invites, notebook sets you share, whether you are online (shown to friends). | Your use of the app |
| Purchases | Subscription status, product, purchase and renewal dates and store country. Payments are handled by Apple or Google; we never see your card details. | Apple, Google, RevenueCat |
| Ads | For free users: ad interactions and rewarded-ad completions. Where you allow it, the device advertising identifier (IDFA on iOS after the App Tracking Transparency prompt; Android advertising ID). | Google AdMob |
| Usage and diagnostics | App events (for example "duel started"), app version, device model and OS, crash reports. | Firebase Analytics, Crashlytics |
| Support | What you write to us and your email address. | You |
We do not collect your precise location, contacts, photos (the app can save question cards you choose to your photo library but does not read it), microphone or camera data.
3. Why we use it
- To provide the service (performing our contract with you): sign-in, matchmaking, running duels and rooms, scoring, leaderboards, friends, notebook, energy and Pro.
- To keep it fair and safe (legitimate interests, and legal obligations where they apply): one account per device, cheating and abuse prevention, app-integrity checks, moderation of usernames and reports, suspensions.
- To show ads to free users (contract and, for personalised ads, your consent): ads fund the free tier. Personalised ads are only shown where you have allowed tracking; otherwise ads are non-personalised.
- To improve the app (legitimate interests or consent where required): aggregated analytics, crash diagnosis, question quality statistics (how often a question is answered correctly).
- To communicate with you: push notifications you have turned on (you can switch each kind off in Settings or in your device settings) and replies to support requests.
We do not sell personal data and we do not use it for automated decisions with legal or similarly significant effects. Matchmaking pairs players by level, which is not such a decision.
4. What other players see
Your username, avatar, level, badges, school and leaderboard positions are visible to other players. Friends also see whether you are online. Your full name, email and answers are never shown to other players; when you share a notebook set, your own answers are not included.
5. Who we share data with
We use these service providers, who process data on our behalf under contract:
- Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Storage, Cloud Messaging, App Check, Analytics, Crashlytics; Google AdMob for ads; Google Sign-In).
- Apple (Sign in with Apple, App Store purchases, push notifications).
- RevenueCat (subscription status and receipts).
We may also disclose data if required by law, to protect users or the service, or as part of a merger or acquisition, in which case this policy continues to apply.
YouTube
We publish practice-question videos on our own YouTube channels and use YouTube API Services to upload them. By watching or interacting with these videos you are also bound by the YouTube Terms of Service, and Google processes your data under the Google Privacy Policy.
Our upload tool is used only by our staff on channels we own. It does not access, collect, store or share any data about you or your YouTube or Google account, and the app does not use YouTube API Services. The access we granted to our tool can be revoked at any time through the Google security settings page; when access is revoked or we stop using the tool, we delete the stored authorisation tokens within 7 days.
6. Where data is stored
Account data is stored on Google Cloud in the United States. Gameplay and social data is stored in a Google Cloud region assigned to your country: Türkiye in Frankfurt (Germany), Brazil in São Paulo, India in Mumbai, Indonesia in Jakarta, Korea in Seoul, Nigeria in London (United Kingdom), the United States in the United States, the United Kingdom in London, Germany in Frankfurt, France in Paris and Japan in Tokyo; some processing for Korea and Japan runs in Jakarta (Indonesia), and for Nigeria, the United Kingdom and France in Frankfurt (Germany). Our service providers may process data in other countries. Where the law of your country requires it, transfers are made under appropriate safeguards such as standard contractual clauses or your explicit consent.
7. How long we keep it
- While your account is active, we keep your account, profile, gameplay and social data.
- Deleting your account (Settings › Account › Delete account): your profile is hidden and removed from leaderboards immediately, and your Sign in with Apple authorisation is revoked. You can restore the account for 30 days. After 30 days the account and its data are permanently deleted.
- After deletion we keep, for 30 days, a record linking the hashed device identifier and the deleted account ID so the same device cannot immediately open a new account; your username is reserved for 30 days.
- Data export files are kept for 7 days. Analytics and crash data are kept according to Google's retention settings (up to 14 months for analytics). Purchase records are kept as long as tax and accounting law requires.
- Aggregated question statistics, which do not identify you, are kept after deletion.
8. Your rights and choices
Depending on where you live, you can ask to access, correct, export, delete or restrict the processing of your data, object to processing, and withdraw consent at any time. In the app you can:
- download your data (Settings › Privacy › Download my data);
- delete your account (Settings › Account › Delete account);
- change your username, school and exam settings;
- turn notifications on or off;
- allow or refuse tracking for personalised ads (iOS: Settings › Privacy & Security › Tracking; Android: Settings › Privacy › Ads).
Deleting your account
In the app: Settings › Account › Delete account, sign in again and type your username to confirm. Without the app (for example if you uninstalled it): email quizuniapp@gmail.com with the subject "Delete my QuizUni account" from the email address of your Apple or Google sign-in, and include your username. We confirm the account is yours, then delete it the same way: it is hidden at once and, after 30 days, the account and its data are permanently deleted (what is kept for a limited time is listed in section 7).
For anything else, email quizuniapp@gmail.com. We answer within 30 days (or sooner where your law requires). You can also complain to your data protection authority, or to the UK Information Commissioner's Office (ico.org.uk), which supervises us as a UK company: Türkiye – Kişisel Verileri Koruma Kurumu; Brazil – ANPD; India – Data Protection Board of India; Indonesia – the personal data protection authority under UU PDP; Korea – Personal Information Protection Commission; Nigeria – Nigeria Data Protection Commission; United States – your state attorney general or the FTC; United Kingdom – the Information Commissioner's Office; Germany – the data protection authority of your federal state; France – CNIL; Japan – Personal Information Protection Commission (個人情報保護委員会).
9. Children and young users
QuizUni is made for students preparing for university entrance exams. It is not directed at children under 13, and in the United States you must be at least 13 to use it. If the law of your country requires a parent's or guardian's consent below a certain age (Türkiye 18, Brazil 12, India 18, Indonesia 18, Korea 14, Nigeria 18, United Kingdom 13, Germany 16, France 15, Japan 15), you may use QuizUni below that age only with that consent. We do not show personalised ads to users under 18 (under 19 in Korea), do not ask them for tracking permission, and ask Google AdMob to treat their ad requests as for minors, with ads limited to teen-appropriate content (general-audience content and child-directed treatment under 13). In India we also do not track the behaviour of users under 18. If we learn that we hold data of a child without the required consent, we delete it. Parents and guardians can contact us at the address above.
10. Security
Data is encrypted in transit and at rest on Google Cloud. Access to production data is limited to authorised staff and is logged. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.
11. Changes
We will post any change to this policy on this page and update the date above. For significant changes we will also tell you in the app before they take effect.