SwipeTrivia — Privacy Policy
Effective date: 13 October 2026
Last updated: 13 October 2026
SwipeTrivia ("the app") is run by one person in Pune, Maharashtra, India — an individual, not a company ("we", "us"). This policy explains what the app collects, why, and what you can do about it.
Questions, requests, or complaints: support@swipetrivia.com.
The short version
- You can use the app without an account. The guest taster stores nothing off your device.
- With an account, we store your email address, a username, and your quiz activity — which questions you answered, whether you got them right, your XP, and your streak.
- We do not use advertising SDKs, analytics SDKs, or tracking of any kind. We do not sell or share your data, and nothing you do here follows you to other apps or websites.
- You can delete your account and all of its data from inside the app.
1. What we collect
If you use the app without an account
Nothing leaves your device. The guest taster's questions are bundled in the app and your answers are held in local storage only. We receive no data about you.
If you create an account
| What | Why | Where it comes from |
|---|---|---|
| Email address | To identify your account and let you sign back in | You provide it |
| Password | To authenticate you. Stored only as a salted hash — we never see it | You provide it |
| Username | Shown to friends and on leaderboards | Generated at sign-up; you can change it |
| Friend code | So other people can add you | Generated at sign-up |
| Quiz answers | Which question, which option, right or wrong, and when. Powers your XP, streak, and the difficulty of your feed | Created as you play |
| XP, current streak, longest streak | Your progress, and your leaderboard position | Calculated from your answers |
| Chosen topics and topic affinity | To pick what your feed shows you | Your onboarding choices, and what you play |
| Friend relationships | To show your friends list, requests, and the friends leaderboard | You add people; they accept |
| Account creation date | Account administration | Automatic |
If you sign in with Apple, Google, or Facebook
(Only applies if social sign-in is enabled in the version you have.) We receive an email address and an account identifier from that provider. We do not receive your contacts, posts, friends list, or anything else. If you use Sign in with Apple and choose to hide your email, we only ever see Apple's relay address.
Collected automatically by our hosting provider
Our backend runs on Supabase. Like any web service, its infrastructure logs technical request data — including your IP address and timestamps — for security, abuse prevention, and debugging. We do not use these logs to build a profile of you.
2. What we do NOT collect
To be explicit, because app stores ask and people assume the worst:
- No advertising identifiers, and no ad networks.
- No analytics or behavioural-tracking SDK.
- No location data of any kind.
- No contacts, photos, camera, microphone, calendar, or health data.
- No push notification tokens. The daily streak reminder is a local notification scheduled on your own device; no server is involved and we cannot tell whether you received it.
- No background collection. The app does nothing while it is closed.
3. Why we are allowed to process it (GDPR)
For people in the UK, EU, or EEA, our legal bases are:
- Contract — we cannot give you an account, a streak, or a leaderboard position without storing your answers and progress.
- Legitimate interests — keeping the service secure and preventing abuse.
- Consent — for anything optional, such as notifications. You can withdraw it at any time in your device settings.
4. Who we share it with
We do not sell your data. We do not share it for advertising. Ever.
We use a small number of processors to run the service:
| Who | What they do | What they hold |
|---|---|---|
| Supabase | Database, authentication, hosting | All account data described above |
| Apple / Google | App distribution, and social sign-in if you use it | Whatever their own policies describe |
| Cloudflare | Serves swipetrivia.com, and forwards email sent to our support address | Short-lived request logs for the website; support emails pass through without being stored |
| Proton | Our support inbox | Emails you send us, including your address |
They process data on our instructions.
Other people using the app can see your username, avatar, XP, and streak on leaderboards, and your friends can see the same. They cannot see your email address, your individual answers, or which questions you got wrong.
We may disclose data if we are legally required to — a court order, for example.
5. Where your data is held
Your data is stored on Supabase infrastructure in the United States (Amazon Web Services, us-east-1, North Virginia). If you are in the UK, EU, or EEA and the data is held outside it, the transfer relies on the UK/EU Standard Contractual Clauses.
6. How long we keep it
- While your account exists — your profile, answers, and progress.
- When you delete your account — everything above is deleted immediately and permanently. This includes your answers, XP, streaks, leaderboard entries, and friendships. It cannot be undone and we cannot restore it.
- Infrastructure logs — kept briefly by our hosting provider on their own retention schedule, then discarded.
Note that a deletion may persist in encrypted backups for a short window before those backups rotate out.
7. Your rights, and how to use them
You can:
- Delete your account and all your data — in the app, under Profile → Delete account. No email required, no waiting, no "contact support to cancel" runaround.
- Get a copy of your data — email support@swipetrivia.com and we will send it in a machine-readable format within 30 days.
- Correct your data — change your username in the app; email us for anything else.
- Object to, or restrict, processing — email us.
- Withdraw consent for notifications — turn them off in your device settings.
If you are in the UK or EU and you think we have handled your data badly, you can complain to your data protection authority (in the UK, the Information Commissioner's Office at ico.org.uk). We would rather you told us first.
California residents: you have the right to know what we collect, to delete it, and not to be discriminated against for asking. We do not sell personal information, and we have not in the preceding 12 months.
8. Children
SwipeTrivia is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has created an account, email support@swipetrivia.com and we will delete it.
9. Security
Passwords are hashed, never stored in readable form. All traffic between the app and our servers uses HTTPS. Access to your data is enforced at the database level by row-level security policies, so one account cannot read another's data even if the app itself were tampered with.
No system is perfectly secure. If we discover a breach affecting your data, we will tell you and the relevant regulator as the law requires.
10. Changes to this policy
If we change this policy materially we will update the date at the top and notify you in the app before the change takes effect. Continuing to use the app after that means you accept the new version.
11. Contact
SwipeTrivia is run by an individual in Pune, Maharashtra, India.
support@swipetrivia.com is the contact point for everything in this document — including a request to see, correct or delete your data.