Policy Privacy

Football Quiz Privacy Policy

Effective date: 24 August 2026
Last updated: 15 September 2026

This Privacy Policy explains how data is processed when you use the Football Quiz mobile game on an iOS or Android device (the “Game”).

1. Data controller and contact

The data controller is:

App Growth Maksymilian Pawłowski
ul. Legnicka 50
59-500 Złotoryja, Poland
Tax Identification Number (NIP): 6941690129
Business Registry Number (REGON): 382980152
Privacy and support email: hello@apphill.agency

2. Key information

  • The Game does not require a user account.
  • The Game does not display advertisements.
  • Party nicknames, answers, scores and career progress are stored locally on the device and are not intentionally sent as analytics parameters.
  • Data required to purchase, validate and restore Premium is processed by the App Store or Google Play and RevenueCat.
  • Firebase Analytics operates with analytics consent or campaign measurement consent. Firebase Crashlytics reports require separate analytics consent.
  • On Android, Google and Meta campaign measurement requires in-game marketing consent. On iOS, Google measurement using the advertising identifier requires both in-game marketing consent and system App Tracking Transparency (ATT) authorization. The Meta SDK is used on Android only.
  • Refusing analytics or marketing consent does not block the Game’s core features or the ability to purchase Premium.

3. Data we process

3.1. Purchases and subscriptions — required data

We may process:

  • the product identifier and Premium plan;
  • whether a purchase, trial, renewal, cancellation, expiration, billing issue or refund occurred;
  • the Premium entitlement expiry date and auto-renewal status;
  • the storefront or country, currency and transaction information made available by the store;
  • a random anonymous RevenueCat App User ID;
  • a receipt, purchase token or its validation result.

We do not receive your full payment card number or your App Store or Google Play login credentials.

Purposes: performing the contract, activating and restoring Premium, administering subscriptions, preventing abuse, handling complaints and complying with legal obligations.
Legal bases: performance of a contract (Article 6(1)(b) GDPR), compliance with a legal obligation (Article 6(1)(c) GDPR), and our legitimate interests in securing purchases and establishing, exercising or defending legal claims (Article 6(1)(f) GDPR).

3.2. Game analytics — only with consent

After analytics consent, we may collect:

  • a random Firebase installation or app instance identifier;
  • Game launch and screen-view events;
  • the selected mode, deck, level, player count, match start and completion, and aggregate score;
  • Game language, app version, operating system, device model or category and approximate region;
  • paywall views, plan selection, purchase flow starts or interruptions, and purchase restoration events.

We do not send Party nicknames or the text entered as an answer to analytics.

Purpose: understanding mode usage and improving Game balance, interface, stability and paywall performance.
Legal basis: consent (Article 6(1)(a) GDPR).

3.3. Diagnostics and crashes — only with analytics consent

Firebase Crashlytics may receive crash information, stack traces, timestamps, Game version, Crashlytics/Firebase installation identifiers, device model, operating system version and technical information necessary to diagnose an error.

Purpose: detecting and fixing crashes and technical defects.
Legal basis: consent (Article 6(1)(a) GDPR).

3.4. Campaign measurement — only with marketing consent

On Android, after marketing consent, we may process the device advertising identifier, a Meta anonymous identifier, Game install or open information, campaign source and app or purchase events. This data is used to measure whether Google Ads or Meta campaigns resulted in installs, trials or purchases.

On iOS, after in-game marketing consent and ATT authorization, Google Firebase may process the device advertising identifier, installation identifier, app activity and purchase events to measure Google campaigns. Refusing either permission disables advertising measurement based on these identifiers. Measurement consent does not enable Firebase ad personalization. Crash reports are not used for advertising tracking.

Purpose: measuring campaign performance and reducing ineffective advertising spend.
Legal basis: consent (Article 6(1)(a) GDPR).

3.5. Data stored locally

The device may store career progress, stars and points, used-question history, Daily Team status, language, sound and haptic settings, Party nicknames, privacy choices and a local copy of Premium status. This data remains on the device unless a particular item is expressly identified above as being sent to a service provider.

Local progress can be deleted in Game Settings. Clearing app data or uninstalling the Game may also permanently remove it. Restoring a Premium purchase does not restore local progress.

4. Recipients and service providers

Depending on the operating system, feature and consent choices, data may be disclosed to:

  • Apple Inc. / Apple group entities — App Store distribution, payments, subscriptions, refunds and iOS privacy controls;
  • Google LLC / Google group entities — Google Play Billing, Firebase Analytics, Firebase Crashlytics and, after marketing consent, Google Ads measurement;
  • RevenueCat, Inc. — purchase validation, anonymous customer identifiers, Premium entitlement, purchase restoration and subscription lifecycle events;
  • Meta Platforms, Inc. / the relevant Meta group entity — on Android only and after marketing consent, Meta App Events and campaign conversion measurement;
  • apphill.agency website hosting and email providers — only as necessary to operate the legal pages and handle correspondence.

Providers may act as processors on our behalf or as independent controllers, depending on the service and its terms. We do not sell personal data for money. Campaign measurement may be considered “sharing” or targeted advertising under certain US state laws; it can be disabled by refusing marketing consent.

Provider information: Apple Privacy, Google Privacy, Firebase Privacy and Security, RevenueCat Privacy, Meta Privacy.

5. International transfers

Some providers may process data outside the European Economic Area, including in the United States. Where required, transfers rely on legally recognised safeguards, including adequacy decisions, the EU–US Data Privacy Framework, Standard Contractual Clauses and supplementary safeguards.

6. Retention

  • local progress and settings: until progress is reset, Game data is cleared or the Game is uninstalled;
  • consent choices: locally until changed, app data is cleared or the Game is uninstalled;
  • user-level analytics and event data: generally up to 14 months; aggregate reports that do not allow us to single out a user may be retained longer;
  • Crashlytics data: Google states that crash stack traces and associated identifiers are retained for 90 days before removal from live and backup systems begins;
  • subscription and transaction data: for as long as required to maintain the Premium entitlement, handle refunds, abuse and complaints, and afterwards for any period required by tax, accounting or legal-claims rules;
  • correspondence: for the time needed to handle the matter and demonstrate its course or defend claims.

Independent controllers, particularly Apple and Google, apply their own retention periods.

7. Consent and privacy controls

Analytics and marketing consent can be changed at any time in Game Settings. Withdrawal does not affect the lawfulness of processing before withdrawal.

On iOS, the system ATT prompt appears after choosing ad measurement if no system decision exists yet. Earlier ATT decisions can be changed in device settings. Denial or system restrictions do not block the Game or Premium purchases. Acceptance of the Terms of Use is separate from optional consent; we locally record the document version and the time the choice was saved. Subscriptions can be managed in App Store or Google Play settings. Data necessary to confirm an active purchase cannot be disabled if the user wants to use Premium or restore a purchase.

8. Your rights

Depending on your location, you may have the right to:

  • obtain information and access your data;
  • rectify inaccurate data;
  • request deletion;
  • restrict processing;
  • data portability;
  • object to processing based on legitimate interests;
  • withdraw consent at any time;
  • complain to a supervisory authority.

Send requests to hello@apphill.agency. Because the Game has no user accounts and uses pseudonymous identifiers, we may ask for the platform, approximate purchase date, transaction identifier or anonymous RevenueCat identifier to locate the correct data. We will never ask for your store password.

In Poland, complaints may be lodged with the President of the Personal Data Protection Office: uodo.gov.pl. EEA users may contact the supervisory authority in their country of residence.

9. Children

The Game is not directed to children under 13. Where a user’s country requires parental or guardian consent at a higher age, optional analytics and campaign measurement may be used only after the required consent is obtained. A parent or guardian who believes a child’s data has been processed unlawfully should contact hello@apphill.agency.

10. Security

We use encrypted transport, official store billing, restricted production dashboard access, app-specific public SDK keys and separate server secrets. No system can guarantee absolute security.

11. Changes to this Policy

We may update this Policy when the Game, providers or laws change. The current version and last-updated date will always appear on this page. We will provide additional in-Game or other appropriate notice of material changes where required.

12. Contact

Privacy questions, data requests and support: hello@apphill.agency.