Privacy Policy
Last Updated: May 2026
1. Introduction
This Privacy Policy describes how Squiz ("we," "our," or "us") collects, uses, and protects your information when you use our services, including:
- the Squiz mobile learning application ("App"); and
- the Squiz web challenges website at defis.squiz-app.com ("Web Challenges").
Unless a section states otherwise, references to the "App" or "Service" apply to the mobile application only. Sections that refer to the Web Challenges apply to the website only. We are committed to protecting your privacy and ensuring the security of your information.
2. Information We Collect
2.1 Account Information
When you create an account or use the App, we may collect:
- Email Address: Your email address when you register with email or convert a guest account
- Authentication Information: Passwords (encrypted and hashed, never stored in plain text), authentication tokens
- Third-Party Account Information: If you sign in with Google or Apple, we may receive your email address and name as permitted by those services
- Account Type: Whether you have an authenticated account or are using a guest account
2.2 Learning Progress and Performance Data
To provide you with a personalized learning experience, we collect:
- Quiz Results: Scores, completion status, number of correct/incorrect answers
- Progress Data: Courses and lessons completed, items learned, learning history
- Session Data: Quiz start times, completion times, duration of quiz sessions
- Learning Analytics: Time spent on quizzes, answer patterns, difficulty levels attempted
2.3 Device and Technical Information
We automatically collect certain technical information when you use the App:
- Device Information: Device type, operating system (iOS/Android), device model, unique device identifiers
- App Information: App version, installation source, crash reports
- Language and Region: Your preferred language and regional settings
2.4 Usage Analytics (App only)
When you use the App, we collect analytics data to improve it:
- Screen Views: Which screens and features you access
- User Interactions: Button clicks, navigation patterns, feature usage
- Performance Metrics: App load times, response times, error rates
- Engagement Data: Frequency of use, session duration, feature adoption
2.5 Information from Third-Party Services
The App integrates with the following third-party services that may collect information:
- Supabase: Provides authentication, database, and backend services. Their privacy policy applies to data processed by their services.
- Firebase (Google): On the App, provides analytics, crash reporting, and infrastructure services. On the Web Challenges, Firebase is used only to host and deliver the website (no Firebase Analytics or Crashlytics in the browser). Google's privacy policy applies to data processed by their services.
- App Stores (Apple App Store, Google Play): If you purchase or subscribe to paid features (such as Squiz Plus), payment and subscription management are handled by the store under your store account. We do not receive your full payment card details; we may receive limited purchase or entitlement-related identifiers from the store or from authorized subscription tools we use to unlock features in the App, as permitted by the platform.
- Subscription / entitlement providers: Where we use a service to verify active subscriptions or purchases, that service may process technical identifiers linked to your app installation and store account in accordance with its privacy policy and our data processing agreements.
2.6 Web Challenges Website
The Web Challenges let you play quiz challenges in a web browser without creating a Squiz account. When you use the Web Challenges, we may collect or process the following:
- Quiz results: When you finish a challenge, we may store your score, the number of questions, and the challenge identifier on our servers (via Supabase) so we can display rankings and percentiles.
- Anonymous session identifier: A random identifier is generated in your browser and stored locally to help limit duplicate score submissions from the same browser. It is not linked to a Squiz account.
- Technical data: Standard connection data (such as IP address and user agent) may be processed by our hosting and backend providers when you load the site or call our APIs. We do not use this data on the Web Challenges for advertising or behavioral profiling.
- Language preference: Your chosen language may be stored locally in your browser so the site can open in the same language on your next visit.
- Local cache and progress: Challenge catalog data, in-progress quiz state, and daily-challenge scores may be stored locally in your browser to improve performance and let you resume a quiz.
The Web Challenges do not use Firebase Analytics, advertising trackers, or marketing cookies. We do not require you to sign in on the Web Challenges.
2.7 Browser Storage and Cookies (Web Challenges)
The Web Challenges use browser local storage (not HTTP cookies) for strictly necessary, functional purposes, such as:
- remembering your language preference;
- caching challenge content for faster loading;
- saving quiz progress before you finish;
- storing an anonymous session identifier for score submission;
- remembering daily-challenge scores on your device.
We do not use this storage for cross-site tracking or advertising. Because it is limited to what is needed to run the Web Challenges, we do not show a separate cookie consent banner on that site. You can clear this data at any time through your browser settings (for example by clearing site data for defis.squiz-app.com).
3. How We Use Your Information
We use the collected information for the following purposes:
- Service Provision: To provide, maintain, and improve the App and its features
- Account Management: To create and manage your account, authenticate your identity, and provide account-related services
- Personalization: To personalize your learning experience, track your progress, and recommend relevant content
- Progress Tracking: To save and synchronize your learning progress across devices
- Analytics and Improvement: To analyze usage patterns, identify issues, and improve App functionality and user experience
- Security: To detect and prevent fraud, abuse, unauthorized access, and security threats
- Communication: To send you important updates about the App, your account, or changes to our services
- Compliance: To comply with legal obligations and protect our rights
- Support: To provide customer support and respond to your inquiries
- Subscriptions: To determine whether your account is entitled to paid features (for example Squiz Plus), in line with purchases made through the app stores
- Web Challenges: To run quiz challenges in the browser, display scores and percentiles, cache content locally, and prevent abusive duplicate submissions
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: We may share information with trusted service providers who assist us in operating the App, such as Supabase (authentication and database), Firebase (analytics and infrastructure), and cloud hosting providers, subject to strict confidentiality agreements
- Legal Requirements: We may disclose information if required by law, court order, government regulation, or to respond to legal process
- Protection of Rights: We may share information to protect our rights, property, or safety, or that of our users or others
- With Your Consent: We may share information with your explicit consent or at your direction
5. Data Security
We implement industry-standard security measures to protect your personal information:
- Encryption: All data transmitted between your device and our servers is encrypted using HTTPS/TLS
- Password Security: Passwords are hashed using secure algorithms (bcrypt) and never stored in plain text
- Authentication Security: Secure authentication tokens, session management, and multi-factor authentication support
- Access Controls: Access to personal information is restricted to authorized personnel only, with role-based access controls
- Database Security: Row-level security policies, encrypted data storage, and regular security audits
- Regular Updates: We regularly update our security measures and conduct security assessments
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as necessary to provide the App and fulfill the purposes outlined in this Privacy Policy:
- Account Information: Retained while your account is active and for a reasonable period after account deletion for legal and operational purposes
- Learning Progress: Retained while your account is active to provide continuity of your learning experience
- Analytics Data: Retained in anonymized form for analytics and service improvement
- Crash Reports: Retained for a limited period to identify and fix technical issues
- Authentication Logs: Retained for security and fraud prevention purposes for a limited period
- Web Challenge scores: Retained on our servers for as long as needed to operate rankings and statistics; local browser data is kept until you clear it or we change storage keys as part of an update
When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or operational reasons. When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies.
7. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: You can request access to the personal information we hold about you
- Correction: You can update or correct your account information through the App settings
- Deletion: You can delete your account and request deletion of your personal information through the App settings, subject to legal and operational requirements
- Data Portability: You can request a copy of your data in a portable format
- Objection: You can object to certain processing of your information, such as analytics
- Opt-Out: You can opt out of certain data collection through your device settings or App preferences
To exercise these rights, please contact us through the Squiz mobile application, our contact page, or by email. If you use the Web Challenges without an account, you can clear locally stored data in your browser; for questions about scores stored on our servers, contact us at contact@squiz-app.com. We will respond to your request within a reasonable timeframe.
7.1 How to Delete Your Account
If you wish to delete your account and all associated personal information, you can do so directly from the App by following these steps:
- Open the Squiz application on your device
- Navigate to the Settings section of the App
- Tap on "Manage My Account"
- Select "Delete My Account"
- Follow the on-screen instructions to confirm the deletion
Please note that account deletion is permanent and cannot be undone. Once your account is deleted, all your personal information, learning progress, and associated data will be permanently removed from our systems, subject to any legal or operational retention requirements. If you have any questions or need assistance with account deletion, please contact us at contact@squiz-app.com.
8. Analytics and Tracking
8.1 Mobile App
The App uses analytics services to understand how users interact with it:
- Firebase Analytics: We use Firebase Analytics to track app usage, screen views, and user interactions. This helps us improve the App's functionality and user experience.
- Crash Reporting: We use Firebase Crashlytics to identify and fix technical issues that may affect your experience.
- Performance Monitoring: We monitor app performance to ensure optimal functionality.
You can control some analytics through your device settings, though this may affect App functionality. Analytics data is generally anonymized and aggregated.
8.2 Web Challenges
The Web Challenges website does not load Firebase Analytics, advertising pixels, or similar audience-measurement tools in your browser. Usage on the Web Challenges is not tracked the same way as in the App. Server and hosting logs may still record technical connection data as described in section 2.6.
9. Third-Party Services
Our services integrate with the following third-party providers:
- Supabase: Provides authentication, database, and backend services for the App and Web Challenges (for example challenge content and score storage). Their privacy policy applies to data processed by their services. Learn more at supabase.com/privacy
- Firebase (Google): On the App, provides analytics, crash reporting, and infrastructure services. On the Web Challenges, provides website hosting only. Google's privacy policy applies to data processed by their services. Learn more at policies.google.com/privacy
- App Stores: Payment processing for in-app purchases is handled by Apple App Store or Google Play Store according to their respective privacy policies.
We encourage you to review the privacy policies of these third-party services to understand how they handle your information.
10. Children's Privacy
The App and Web Challenges are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If you are between 13 and 18 years of age, you represent that you have your parent's or guardian's permission to use the App and to provide us with your information.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the App or Web Challenges, you consent to the transfer of your information to these countries. We take appropriate safeguards, including standard contractual clauses and other legal mechanisms, to ensure your information receives adequate protection.
12. Guest Accounts
You may use the App with a guest account, which provides limited functionality. Guest account data is stored locally on your device and may be lost if you uninstall the App or clear app data. To preserve your progress, we recommend creating an authenticated account. You can convert a guest account to an authenticated account at any time.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the App or Web Challenges after such modifications constitutes acceptance of the updated Privacy Policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at contact@squiz-app.com.