TriviaTrek

Privacy Policy

Last updated 02 September 2026

This policy explains what TriviaTrek collects, why, who it is shared with, and how to get rid of it. TriviaTrek is operated by Synergy Edge Solutions Ltd., company number 15531084, registered in England and Wales, registered office Tall Trees, Chipstead Lane, Sevenoaks, England, TN13 2RF. We are the data controller for the information described here.

Questions, requests and complaints: hello@triviatrek.app.

What we collect

Your account

When you start playing we create an account for you and store an account identifier, a username you choose, your device registration, and the session tokens that keep you signed in. You can play without giving us an email address.

Recovery email, if you give us one

A recovery email is optional and exists so you can get back into your account on a new device. We store it encrypted, alongside a separate hash used only to look it up. We use it to send you access codes and, rarely, service notices. We do not send marketing to it.

How you play

Answers and whether they were right, scores, how long questions took, your wheel state, streak, journey progress, credits and inventory, leaderboard entries and challenges. This is the game: without it there is nothing to come back to.

People you play with

Friends, families, challenges, invitations and anyone you have blocked. Your username, and a family name if you create one, are visible to other players - treat them as public, and do not put anything in them you would not want a stranger to read.

Where you are, roughly

We store a home country, and our content delivery network tells our servers which country a request came from. This is country-level only. TriviaTrek does not use your device's precise location and does not ask for location permission.

Device and diagnostic data

Platform and version, language and timezone, and request identifiers, timings and errors. Our hosting and CDN providers also record standard access logs, which include IP addresses.

The app also uses Google's Firebase tools to tell us when it breaks and how it performs. Crashlytics sends us a report when the app crashes, containing the fault itself, the state of the device at the time, and an identifier for that installation. Performance Monitoring records how long screens and network calls take. Google Analytics for Firebase records which parts of the game are used, against an app-instance identifier. None of these carry your answers, your recovery email or your session tokens. Google's practices are described in its Firebase privacy documentation.

Notifications

If you turn on reminders we store a push token from Apple or Google and the times you chose. Turning notifications off in your device settings, or deleting the app, ends this.

Purchases

If you buy a TriviaTrek Explorer Pass, our payments partner records the product, price, currency, transaction and entitlement. We never see your card details - Apple and Google handle payment.

Adverts and rewards

The free version shows adverts, and offers you rewards for taking part in them. Both are run by partners who receive information about your device in order to work. A Monthly Pass removes adverts from your daily quiz; an Annual Pass removes them entirely.

If we work with other advertising partners, email hello@triviatrek.app and we will tell you who they are.

Why we are allowed to hold it

Who else sees it

We do not sell your data. We use service providers who process it on our behalf, under contract, and only on our instructions: Amazon Web Services (hosting, database, CDN and email delivery, in Ireland), Apple and Google (app distribution, payments, push notifications, crash reporting, analytics and performance monitoring through Firebase, and, in the free version, advertising), Meta and InMobi (advertising bidding through AdMob's auction), RevenueCat (purchase and entitlement management), Trofeo (rewards and offers) and Expo (build and update tooling). Some of these transfer data outside the UK and EEA; where they do, that transfer relies on adequacy decisions or on standard contractual clauses.

Other players see the parts of your account you choose to make social: your username, your family name, and your position on leaderboards you take part in.

When the law requires it

We may disclose your information where the law requires it, or in response to a valid legal request such as a court order or a request from a government or regulator. We may also disclose it where we need to in order to protect the rights, property or safety of you, of us, or of anyone else - for example, to act on a credible threat. Where we are allowed to tell you that this has happened, we will.

How long we keep it

Your account and its gameplay history stay while your account exists. When you delete your account we remove your profile and recovery details, answers, progress, journey, streak, credits, inventory and social data. We deliberately retain quiz participation, completion status and scores so that we can understand completion and abandonment. We also retain purchase records to handle refunds, chargebacks and fraud. These records remain associated with the identifier of the deleted account, but not its former profile, username or recovery email. Server and CDN logs age out on their own schedule, and backups are overwritten in the ordinary cycle.

Other devices you were signed in on. The app keeps a copy of some of your data on each phone you use it on, so it works offline - your username, your progress and journey, and your recent results. Deleting your account signs every device out, so none of them can reach your account or fetch anything new. But the copy already saved on a phone stays in the app's own storage on that phone: once we no longer have a way in, we have no way to reach it. Delete the app from any other device, or clear its data in your device settings, and that copy goes with it.

On an iPhone, one thing is kept on purpose: a stored sign-in credential, so that removing the app and installing it again brings you back to your account instead of locking you out of it. It is held in the device's secure keychain, never leaves that phone, and is not included in backups. Deleting your account or signing out removes it immediately, and it stops working by itself after 90 days. Resetting or erasing the phone clears it too.

Children

You must be at least 13 to use TriviaTrek. If you are under 18 you need your parent or guardian's permission. We do not knowingly collect data from anyone under 13; if you believe a child has given us data, write to hello@triviatrek.app and we will remove it.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to or restrict how we use it, and withdraw consent at any time. The fastest route to deletion is in the app - see Your account. For anything else, email hello@triviatrek.app; we will respond within one month. If you are unhappy with our answer you can complain to the UK Information Commissioner's Office at ico.org.uk.

Security

Recovery emails are encrypted at rest and hashed for lookup with separate keys. Traffic is encrypted in transit. Access to production data is limited to those who need it. No system is perfect; if something goes wrong that affects you, we will tell you and the regulator where the law requires it.

This website

triviatrek.app sets no cookies. Nothing is stored on your device by this site, and nothing here follows you to any other website.

We measure how the site is used with Umami, a privacy-first analytics service. It records the page you viewed, the site that referred you, and your approximate country, browser, operating system and screen size. It does not set a cookie, does not store anything on your device, does not use your IP address to identify you, and cannot follow you to other sites. There is no profile of you to build and none is built. We use it to see how many people reach a page and from where - nothing else.

Because it stores nothing on your device, this does not require a cookie banner, which is precisely why we chose it.

The site also loads a typeface from Google Fonts, which means Google receives the request for that file, including your IP address.

Changes

If we change this policy we will update the date above, and we will tell you in the app before anything material takes effect. Every version is listed below, so you can see what changed and when.

Revision history