Your privacy matters to us. This policy explains what information the Today Quiz: Daily Brain Trivia app collects, why we collect it, who we share it with, how long we keep it, and the choices and rights you have.
The app is developed and run by the developer of Today Quiz (“we”, “us”), who is responsible for the personal data described in this policy. For any question or request about your data, contact us at contact@todayquizapp.com.
Playing as a Guest. You can play without an account. Firebase Anonymous Authentication gives your installation of the app a random guest ID, and we store your quiz results and your streak under that ID. No name, email address or other contact detail is required or collected. Guests do not earn coins or XP and do not appear on leaderboards.
Signing In with Apple or Google. You may sign in with Sign in with Apple or Google Sign-In via Firebase Authentication. We then receive from the provider and store the following information linked to your account:
We do not receive or store your password. Authentication is handled entirely by Apple or Google. If you sign in while playing as a guest and a new account is created, your guest progress becomes part of it. If you sign in to an account that already exists, only your recent daily quiz result is moved to that account (when it has none for that day); your other guest results are deleted, together with the guest profile.
Username. Signed-in players choose a username. It is stored in our database and is publicly visible to other players (see Section 4). Your username also serves as your invite code. Please do not include personal information in your username.
Quiz Results. For each quiz you play — daily, past, themed and live quizzes — we store the quiz and date, your score, your share of correct answers, your results per category and which lifelines you used. We use them to show your history and statistics, to calculate streaks, rewards and leaderboards, and to keep your progress in sync between devices.
Coins, XP, Levels, Avatars, Achievements and Streaks. For signed-in players we store your coin balance, XP and level, the avatars you own and the one you use (and when you last changed it), your achievements and the progress counters behind them, your current and longest streak, and what you spent coins on (avatars, the 50:50 lifeline, streak restores and live quiz entry fees). We also keep records that stop a reward from being paid twice, such as which results and ad rewards have already been credited.
Live Quizzes. When you register for a live quiz, we store your registration, the username and avatar you had at that moment, the entry fee you paid, each answer you give together with the time our server received it and the time your device measured, your points, your final rank and any prize you won.
Invites. When a new player enters your invite code, we record on their account that you invited them, and on yours how many friends you have invited and the rewards paid. To stop the same person from claiming an invite bonus twice, we keep a one-way hash (a scrambled fingerprint) of the email address of the account that claimed it, even after that account is deleted. The app never reads your contacts — you choose where to share your code.
Groups. If you create or join a group, we store the group name, its invite code, its members (their account IDs and usernames) and their scores within the group. Group members see each other's usernames and scores; their apps also receive each member's account ID (a random code that is not shown on screen) to manage the group.
Feedback, Question Reports and Messages. When you send feedback or report a question, we store your message (up to 1,000 characters), the type and reason you chose, the quiz and question concerned, the app language and your account or guest ID. We do not ask for your email address this way. If we reply, the reply appears in the Messages inbox in the app and is stored with your account. Please do not include personal details in your messages.
Reminders and Notifications. With your permission, the app shows reminders: a daily reminder at the time you choose, reminders to keep your streak going, and reminders for live quizzes you asked to be reminded about. They are scheduled on your device — we do not collect a push notification token, and no reminder data leaves your device. We do not send marketing messages. You can turn reminders off in the app's settings or in your device settings at any time.
Usage Statistics. After you have accepted this policy, the app sends usage events to Google Analytics for Firebase: the screens you open and actions such as starting or finishing a quiz, using a lifeline, buying an avatar, watching an ad for coins or sharing a result. They come with technical data (app version, device model, operating system and language), an app-instance identifier, and an approximate location that Google derives from your IP address. We do not link usage statistics to your name, email address, username or account ID. On Android, and on iOS if you allow tracking, Google Analytics may also receive your device's advertising identifier.
Crash and Error Reports. After you have accepted this policy, if the app crashes or runs into an error, it sends a report to Sentry. A report contains the error and where it happened, the app version, device model and operating system, the screens and taps that led up to it, and your account or guest ID so we can investigate problems affecting your account. We do not attach your name, email address or username, and we remove your IP address from the report. For a small sample of sessions, the app also sends timing measurements that help us find slow screens.
App Integrity. To protect our servers from abuse, the app uses Firebase App Check, which asks Google Play Integrity (Android) or Apple App Attest and DeviceCheck (iOS) to confirm that requests come from a genuine copy of the app on a genuine device. These services check device-integrity signals; we receive only a token saying whether the check passed.
Advertising Data. The app displays advertisements served by Google AdMob and its mediation partners. Ads start only after you have accepted this policy and, where the law requires it (for example in the EEA, the UK and Switzerland), after you have answered Google's consent form. These advertising partners may automatically collect certain information from your device in order to serve ads, including:
This data is collected directly by the advertising SDKs under each partner's own privacy policy and is not stored by us. When you choose to watch an ad for coins, the app also sends your account ID and a one-time claim number to Google AdMob with the ad request, so that the reward can be matched to your account.
App Tracking Transparency (iOS). On iOS 14 and later, the app will present Apple's App Tracking Transparency (ATT) prompt before accessing your device's advertising identifier (IDFA). If you grant permission, data from this app may be used to track you across apps and websites for targeted advertising purposes. If you deny permission, only non-personalized ads will be shown. You can update this choice at any time via Settings → Privacy & Security → Tracking.
We do not sell your personal data.
You can hide yourself from the global leaderboards in your Profile (Global Leaderboard → Hidden). This removes you from the all-time XP and streak leaderboards straight away and from the daily leaderboard at its next update. Points you scored before hiding stay on the monthly leaderboards until those months are cleared. Hiding does not apply to group or live quiz leaderboards.
Guests do not appear on leaderboards. Your coin balance, achievements, statistics and email address are never shown to other players. If you share a level-up, achievement or live quiz result card, it shows your username and avatar wherever you choose to post it.
We use the following third-party services. Each processes data under its own privacy policy:
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Firebase (Authentication, Cloud Firestore, Cloud Functions) | Google LLC | Sign-in (guest, Apple, Google), database and server processing | View policy |
| Google Cloud Storage | Google LLC | Public live quiz leaderboards and question files | View policy |
| Firebase App Check (with Play Integrity and App Attest) | Google LLC, Apple Inc. | App integrity checks | View policy |
| Google Analytics for Firebase | Google LLC | Usage statistics | View policy |
| Sentry | Functional Software, Inc. | Crash and error reports | View policy |
| Sign in with Apple | Apple Inc. | Account sign-in | View policy |
| Google Sign-In | Google LLC | Account sign-in | View policy |
| Google AdMob | Google LLC | Ad serving, mediation and the ad consent form | View policy |
| AppLovin | AppLovin Corporation | Ad mediation partner | View policy |
| Meta Audience Network | Meta Platforms, Inc. | Ad mediation partner | View policy |
| Unity Ads | Unity Technologies | Ad mediation partner | View policy |
By default, personalized advertising may be served based on your advertising identifier. You have the following controls:
Where Google's consent form is shown, the choice you make there is stored on your device and applies to every ad request from the app. Opting out of personalized ads limits ad targeting but does not remove advertisements from the app.
Our database (Cloud Firestore) is stored in the European Union. The server functions that process your requests run in Google Cloud data centers in the United States, and live quiz files are stored there as well. Sentry stores crash reports in the European Union (Germany). Google Analytics, Google AdMob and our advertising partners may process data in the United States and other countries. Where data leaves the European Economic Area, these providers rely on safeguards recognized under EU law, such as the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
Signed-in players — in-app account deletion. You can delete your account directly in the app at any time:
Deletion happens immediately and cannot be undone. It permanently removes:
Some data may remain after deletion: your username and points on the monthly leaderboards until those months are cleared (within about two months); your row on the published leaderboards of live quizzes held more than 30 days earlier; feedback and question reports you sent, which we delete on request; the invite-bonus email hash; and, if you invited friends, the now unused ID of your deleted account on their accounts. Your username becomes available to other players again straight away. Any copies in backups are deleted within 30 days.
Guests. Uninstalling the app does not delete guest data from our servers. To have it deleted, send us a request from the app via Settings → Send feedback — it reaches us together with your guest ID, which is how we find your data — or email us.
Additionally:
Revoking provider access does not automatically delete your data from our database. Please use the in-app deletion feature above. If you experience any difficulty completing the deletion, contact us at contact@todayquizapp.com.
Depending on where you live — including under the EU General Data Protection Regulation (GDPR) and the Serbian Law on Personal Data Protection — you have the right to:
To exercise any of these rights, contact us at contact@todayquizapp.com. We will reply within one month. You also have the right to lodge a complaint with a data protection authority: in Croatia the Personal Data Protection Agency (azop.hr), in Serbia the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs), or the authority of the EU country where you live.
The app is not directed at children under 13. Guests do not provide personal information. However, users who sign in with Apple or Google will have their email address stored by us. We do not knowingly collect personal data from children under 13 (or under 16 where required by local law). If you believe a child has created an account, please contact us and we will delete it promptly.
Data travels between the app and our servers over encrypted connections (HTTPS) and is stored on Google Cloud with access limited to what is needed to run the app. No method of transmission or storage is completely secure, but we work to protect your data and to fix problems quickly when we find them.
We may update this policy from time to time. The date and version at the top show the latest change. When we make significant changes, the app asks you to review and accept the new version before you continue playing. Earlier versions remain available on our website.