Privacy policy

This policy explains how Room4Quiz processes information. It applies to guest play, linked accounts, multiplayer rooms, templates, moderation, purchases, rewarded advertising, and support.

Information we process

• Identity and account data: a Firebase user ID, player name, sign-in provider and, after Google account linking, the Google email address returned for sign-in.
• Gameplay and content: room names and codes, room settings, participation, answers and scores, private and public templates, questions, answers, votes, hidden templates and blocked creators.
• Safety and moderation: report category, optional report details, reporter and template identifiers, report status, rate-limit records, moderator decisions and moderator notes. Reports are available only to authorized moderators and the reporting user as permitted by the service rules. Updated versions also store private removal notices for the template creator, including the template name and identifier, creator-facing reason, policy or legal basis, decision date, scope and appeal reference. An optional read acknowledgement records when the creator marks a notice as read. The creator inbox excludes reporter identities, report details and internal moderator notes. Notices are part of the creator’s account data and are removed by the account-deletion process; restricted moderation audit records are handled separately as described below.
• Purchases and rewards: subscription status, Shop Point balances and reservations, purchase-token records, transaction and refund/revocation state, rewarded-ad sessions and reward history. Updated subscription checkouts send a hashed Room4Quiz account identifier to Google Play so our server can assign the purchase to the correct app account; the email itself is not sent through that identifier. Google Play handles payment-card details; Room4Quiz does not receive them.
• Usage, device and diagnostics: optional app interactions, purchase and reward events, an app-instance identifier, and device/app information from Firebase Analytics for users aged 16 or older who enable usage analytics; separately, Play Integrity/App Check signals, crash or service diagnostics made available by integrated Google services, and network/device identifiers needed for security and operation.
• Advertising: consent choices, rewarded-ad events, app interactions, diagnostics and, where permitted, advertising or device identifiers and approximate location inferred from your IP address by Google or its advertising partners. Room4Quiz shows rewarded ads only when you choose to watch them and does not show ads during live gameplay.
• Support communications: when you email support, we receive the sending email address and the message you choose to send. Bug-report drafts may also contain a Firebase support ID, app version, Android version, device model, app language and report time. You can review, edit or remove these details before sending.

Why we process information

• To provide the service and perform our agreement with you, including accounts, rooms, templates, purchases, subscriptions and requested rewards.
• To protect users and the service through authentication, App Check, fraud prevention, report limits, content screening, human moderation and enforcement of the community rules.
• With your consent, to understand and improve feature use through optional Firebase Analytics in the 16-or-older experience.
• To answer support requests, investigate reported problems and consider feature suggestions that you choose to send.
• With consent where required for advertising technologies and advertising partners. Advertising privacy choices can be reviewed in the app when Google’s consent tool makes them available.
• To comply with legal, tax, accounting, refund and regulatory obligations.

Optional usage analytics

In app versions with the Usage analytics control, Firebase Analytics stays off until a user aged 16 or older makes an affirmative analytics choice. Updated versions use Google's combined privacy form where supported in the EEA, UK and Switzerland. In Manage options, Room4Quiz requests its own consent for storing/accessing device information, understanding audiences through statistics, and developing/improving services (IAB purposes 1, 9 and 10). Analytics requires all three choices as well as Google's analytics-storage consent; agreeing to advertising purposes alone is insufficient. Elsewhere, or when Google's form does not support analytics, a separate Room4Quiz notice offers Enable analytics and Keep off. This notice is available in Settings and can appear once at startup if no choice has been recorded. Dismissal, a failed consent request or an incomplete choice leaves analytics off. The earlier age-based Analytics setting is not treated as consent after updating.

We use Google Analytics for Firebase to collect optional app interactions, purchase/reward events, an app-instance identifier and device/app information, and to produce usage statistics that help us improve Room4Quiz. Google processes this information to provide its Analytics service; see how Google uses information from apps that use its services. Our custom events do not include your name, email, birth date or typed answers. Analytics advertising-ID collection and Analytics advertising consent signals are disabled; usage analytics is not enabled for advertising personalization.

You can keep analytics off and still play, make purchases and earn rewards. To withdraw analytics consent independently of advertising, turn off Usage analytics in Settings. This local refusal remains effective across restarts even if Google's form retains an earlier choice, and stops collection and clears local Analytics data and its app-instance identifier. To change the combined choices, use the advertising privacy options in Settings; outside supported regions, use the Room4Quiz analytics notice. Withdrawal does not erase information already sent to Google; contact us for a request concerning previously collected data. Older app versions do not have all these controls; the app changes take effect when you receive the privacy update.

On 2 October 2026, we configured two-month retention for user and event detail governed by Google Analytics retention controls, with renewal on new activity disabled. Google deletes eligible detail on a monthly schedule. These controls do not cover every aggregate report or separate export; withdrawing analytics does not itself delete earlier server submissions.

Public content and moderation

Public templates and their creator names can be viewed by other Room4Quiz users. Private templates are limited by account access rules. Public template names, descriptions, questions and answers are checked by automated text rules before publishing or updating. Users can report content, hide templates and block creators. Authorized moderators can review the complete reported template and reports, then keep or remove the template. Automated screening and user reports assist moderation; they do not make legal or similarly significant decisions about you.

Age information

Room4Quiz is intended for people aged 13 or older. The bundled privacy update prevents people under 13 from entering the app. Earlier versions may still allow younger guest players. Your date of birth is stored only in app-private storage on your device and is not uploaded to Room4Quiz or Firebase. It selects the appropriate app experience. Players aged 13–15 can join a room whose code they know and play as guests, but cannot link a Google account, host rooms, publish or vote on public templates, use the Shop, view rewarded ads, or enable Firebase Analytics. Account and host features, optional advertising and optional usage analytics remain available from age 16, subject to the applicable privacy choices.

Read our privacy explanation for young players and parents, available in English and Lithuanian. A room code is an invitation mechanism, not a guarantee that the host or other participants are safe. Do not share personal contact details in your player name or quiz answers.

Rewarded advertising and privacy choices

In app versions with the privacy update, Room4Quiz requests a rewarded ad only after an eligible user taps Watch or Retry. Advertising providers can process information during initialization and loading, before the video starts. Opening the Shop or the points dialog does not start an ad request, and finishing an ad does not automatically load another one. Earlier versions can preload ads at startup or when opening these screens.

Google’s consent tool still checks applicable advertising privacy choices at session startup independently of Watch. Where available, you can review these choices in Settings. Declining personalized advertising does not necessarily prevent all ad requests: Google may permit limited advertising under the choices and rules that apply to you. Changing age or advertising choices, changing account, leaving the ad screen or putting the app in the background discards pending unshown ad work. Room4Quiz cannot undo requests already sent or stop verification of rewards already earned. These advertising controls are separate from Usage analytics and the processing needed to operate multiplayer rooms, accounts and purchases.

Camera and notifications

Camera access is requested only when you scan a room QR code. QR frames are processed on the device and are not uploaded or retained by Room4Quiz. Notification permission is used for active-room status and unanswered-question reminders. An ongoing notification is shown while the active-room foreground service is running.

Service providers and international processing

Room4Quiz uses Google Firebase Authentication for guest and linked identities, Cloud Firestore for cloud records, Cloud Functions for backend operations, and App Check with Play Integrity for security. The live Firestore database is in the European multi-region eur3, and deployed Functions are in Belgium. Google states that Firebase Authentication is processed in the United States, including guest identities; the database location does not make the whole service European-only. Firebase Hosting, security, support and other provider services can involve processing outside your country.

Google generally processes Firebase customer user data on our behalf under the applicable Firebase and Google Cloud processing terms. Optional Firebase Analytics has separate Analytics processing terms. Google AdMob's main advertising service operates as a controller under its applicable notices; advertising partners and Google’s User Messaging Platform handle applicable advertising choices. Reward verification sends your Firebase user identifier and a reward-session reference to AdMob. Google sign-in and Play provide their own identity, distribution and payment services. Support uses a Gmail mailbox; we do not claim a Google Workspace processor contract for that consumer mailbox.

Published Google transfer frameworks describe safeguards such as applicable Standard Contractual Clauses and the Data Privacy Framework, depending on the service and contracting entity. See Google’s transfer information and Firebase privacy and processing information. These links do not mean that all data stays in the EEA. We do not sell personal data.

Retention and deletion

Rooms and public lookup records store an expiry about 48 hours after creation. The scheduled room cleanup checks every six hours; deletion can occur later if cleanup is delayed or has a backlog. Account and template data is retained while needed to provide the feature or until it is deleted. Guest identities are deleted on request rather than automatically after inactivity. Pending content reports are retained for human review.

Our routine support retention policy is 12 calendar months after a request closes, with monthly manual review of closed cases and related attachments. Messages necessary for an active appeal or a specific legal case can be held longer, with the need reviewed monthly. Gmail may retain deleted messages in Trash for a further 30 days. Routine server logs in the project's default logging bucket are retained for 30 days; Google’s required Cloud audit-log bucket retains records for 400 days. Provider-managed authentication, hosting and other service logs have separate periods described in their notices.

At this review checkpoint, Firestore point-in-time recovery was disabled and no scheduled database backups were listed. This does not establish that all provider-managed recovery copies or any historical manual exports have been erased. Requested account deletion and provider backup/log removal do not occur simultaneously. Purchase records and minimal purchase-ownership markers may be retained where needed to prevent duplicate claims, handle refunds, or meet applicable accounting and legal obligations; these are restricted records and are not treated as anonymous merely because an identifier is hashed.

You can delete your account in the app or use the account deletion process. Account deletion removes the account and associated active cloud data, while limited records covered by the exceptions above and below may remain without the active account profile. Deleting Room4Quiz does not itself cancel a Google Play subscription.

Moderation-record retention

Under the updated moderation-retention process, routine decision records, creator removal notices and associated remaining reviewed reports are scheduled for deletion after six calendar months. For a removal, this period starts when the updated app reports displaying the notice in the creator’s foreground inbox, or an administrator confirms personally informing the creator. For a decision to keep a template, it starts at the review decision. Creating a removal notice alone does not start this period. Unconfirmed notifications require review. Daily cleanup may delete records after their deadline.

Records necessary for an active appeal or a specific legal case can be held beyond the routine period. The need for each hold is reviewed monthly, and records become eligible for deletion when the hold ends and the routine period has elapsed. Limited notification, deadline and hold/review information is stored for this purpose. Older records with unconfirmed notification or retention status require individual review before cleanup is enabled. Cleanup preserves a kept public template and its new pending reports. Account deletion removes the private creator inbox; a restricted internal audit may remain where continued retention is justified.

Guest data deletion

Guest profiles are not automatically deleted based on account age or inactivity. You can request deletion without linking a Google account. In app versions with the guest-deletion action, open Settings and choose Delete guest data. If the action is unavailable, you cannot open the app, or you are a parent or guardian, follow the guest deletion request instructions. Deletion removes the guest authentication profile, its stored player entries and associated gameplay references, and its owned rooms and templates. The app also clears its saved player name, birth date, local templates and guest points after successful in-app deletion; the age-based access restriction and general device preferences are kept. Continuing creates a new guest profile. Other people’s rooms and player data are preserved. Provider logs, backups and records lawfully retained under the exceptions above may follow separate deletion periods.

Deleting a saved template

You can remove one of your templates without deleting your account. Open a room setup screen, choose Templates, and open either the Private or Public list. On a template you created, tap the three-dot menu, choose Delete, and confirm. The Delete action is shown only for templates owned by the signed-in account.

Your choices and rights

You may use basic player features as a guest, change usage analytics and available advertising privacy choices in Settings where those controls are present, report or block public content, delete templates, delete your account, and review or change the birth date stored on your device. Depending on applicable law, you may also request access, correction, deletion, restriction, portability, or object to certain processing, and may withdraw consent without affecting earlier lawful processing.

Security

Room4Quiz uses encrypted network connections, Firebase Authentication, Play Integrity App Check, restricted database rules and server-authorized purchase and moderation operations. No service can guarantee absolute security; please protect access to your Google account and contact us if you suspect misuse.

Contact and complaints

For privacy, rights, support, or deletion questions, contact the Room4Quiz developer at room4quiz.support@gmail.com. To protect the account, we may ask you to verify ownership. If EU or EEA data-protection law applies, you may also complain to your local supervisory authority; in Lithuania this is the State Data Protection Inspectorate.

Changes to this policy

We may update this policy when the app, service providers, or legal requirements change. The effective date above identifies the current version. Material changes will be communicated in the app or through another appropriate channel when required.