QuizCraft Privacy Policy

Last updated: September 21, 2026 • Applicable to: QuizCraft for Android (com.tidalwavedev.quizcraft)

Summary of Key Principles

• Your answers stay on your device. Every question you answer, every round you play, your accuracy, your streaks and your time played are stored in a local database on your phone, and we never receive them. The one exception is the Drive backup described in Section 6: if you allow it, a copy goes to a hidden folder in your own Google Drive, and we cannot read that either.
• We do operate servers, and we say what is on them. Unlike our other apps, QuizCraft has a shared quiz library, so we store a small account record, quiz descriptions, star ratings, comments you leave for other publishers, and monthly scores. Section 4 lists every field.
• Children are treated as children by default. If your age is unknown, QuizCraft applies the stricter child settings rather than the looser adult ones. Children, and users whose age is unknown, receive advertising that is tagged for child-directed treatment and for users below the age of consent, which means it is non-personalised and no advertising identifier is transmitted for them. Section 7 sets this out in full.
• Zero sale of personal data. We do not sell, rent or trade personal information to anyone, for any purpose.
• You can delete everything. On-device data is removed by clearing data or uninstalling. Server-side data is deleted on request — see Section 11.

1. Introduction

This Privacy Policy explains how Tidal Wave Dev ("we", "us", or "our") handles personal information in connection with QuizCraft, a multiple-choice quiz game for Android.

QuizCraft is designed to be enjoyable for children as well as adults. Because our declared audience includes children, this app is governed by Google Play's Families policies, by the United States Children's Online Privacy Protection Act (COPPA), and by the General Data Protection Regulation (GDPR) where applicable. Section 13 sets out what that means in practice.

Please read this policy alongside our general privacy policy. Where the two differ, this app-specific policy governs QuizCraft.

2. How We Ask Your Age

The first time QuizCraft opens, and before you sign in, it asks which age group you are in. The question is presented neutrally: every option looks the same, none is pre-selected, and the screen does not indicate that any particular answer unlocks more of the app.

• What we store: an age band — for example "9 to 12" — and never a date of birth. A band is all the app needs to choose suitable quizzes. It is the only age information we hold.
• If you do not answer: QuizCraft treats you as a child. An unknown age receives the stricter settings, not the looser ones.
• Changing it: the answer can be changed at any time in Settings.

3. Data Stored Only on Your Device

The following is written to a private database inside QuizCraft's own storage area on your phone. It is not transmitted to us, and we have no means of reading it:

• Every question you answer, what you chose, what was correct, and how long you took
• Each round you play: score, accuracy, best streak, stars earned and duration
• Daily usage totals — time played, rounds completed, questions answered
• The list of questions you find difficult, used for the practice suggestions
• Your settings: interface language, chosen game mode, timer, sound, and the question sets you have enabled
• Question sets you import yourself, which remain on your device unless you choose to publish one

Deleting the app, or clearing its data in Android Settings, permanently removes all of it.

4. Data Stored on Our Servers

QuizCraft has a shared quiz library, which requires servers. We operate an application service on Google Cloud Run, a database hosted by Supabase, and file storage in Google Cloud Storage. This is the complete list of what those hold about you:

• Account record: your Firebase user identifier, your email address (as supplied by Google Sign-In, retained so that we can identify your account when you contact support), your chosen nickname, your country, your age band, and whether an ad-free subscription is active.
• Quizzes you publish: the title, description, country, language, intended age range, source reference and question count you enter, together with the storage location of the file and its size.
• Star ratings you give: the quiz rated and the number of stars. Rating a quiz again replaces your previous rating rather than adding to it.
• Comments you leave on a quiz: the text you write, held against your account, readable by the publisher of that quiz and by nobody else. It is private feedback rather than a public review: no other player can read it, and it is never shown beside the quiz in the library.
• Monthly chart scores: your score, the quiz it was played from, the game mode and the month. A score is recorded only for a round played from a single downloaded quiz; rounds played from a mixture of question sets are never sent.
• Moderation records: reports you submit about other people's content, and the list of users you have blocked.

What is deliberately not on our servers: your individual answers, which questions you got wrong, your accuracy, your streaks, your time played, or any per-round history. Those never leave your device. The server receives a final score and nothing about how you reached it.

5. Signing In

• Provider: QuizCraft uses Firebase Authentication with Google Sign-In. QuizCraft has its own Firebase project, separate from our other applications, so a QuizCraft account is not linked to any other app we publish.
• What we receive: a unique user identifier and the email address of the Google account you choose. We do not receive your Google password at any point.
• Playing without an account: the game itself — every mode, every bundled and imported question set, and all of your statistics — works without signing in. Signing in is required only for the shared quiz library and the monthly chart.

6. Google Drive Backup

• Optional, and only once you allow it. Your local statistics and your own question sets can be backed up to your own Google Drive. Nothing is ever sent there until you have granted access on Google's own consent screen, which is shown the first time you use the feature.
• Automatic after that. Once access has been granted, QuizCraft keeps the copy up to date by itself - on launch and when you return to the app, no more often than every fifteen minutes - so the backup reflects your recent play without your having to remember. You can back up or restore by hand from Settings at any time, and the automatic behaviour stops if you revoke access in your Google account.
• Application data folder only. QuizCraft requests the drive.appdata scope, which grants access to a hidden folder reserved for this app. It cannot see, read, or modify your documents, photos or any other file in your Drive.
• Direct transmission. The backup travels between your device and Google's servers. It does not pass through our servers, and we cannot read it.
• Restoring replaces. Restoring replaces the statistics on the device with the copy in your Drive. Question sets already on the device are updated rather than deleted, and a set you added after the backup is left alone.

7. Advertising

QuizCraft displays banner advertisements and offers rewarded advertisements through Google AdMob. Advertising is disabled entirely for subscribers.

• Children and users of unknown age receive advertising that is tagged for child-directed treatment and for users below the age of consent. For these users, advertising is non-personalised, no advertising identifier is transmitted, and interest-based targeting and remarketing are disabled.
• Users aged 13 and over receive advertising that is not tagged for child-directed treatment, so Google may use the advertising identifier to personalise it. That identifier is read by Google's advertising SDK on your device; it is never sent to our servers and we cannot see it.
• Advertisement content is limited to a "G" maximum content rating for every user, regardless of age.
• Rewarded advertisements are always optional. One is offered before downloading a quiz from the shared library and before publishing one, and declining never prevents either - if no advertisement can be shown, the action proceeds anyway. Children are never shown an advertisement during a round, and the age question in Section 2 is asked before any advertisement is requested.
• We do not receive advertising data. Impressions and clicks are handled by Google; we see only aggregate earnings reports containing no personal information.
• Google's own handling is described in the Google Advertising Privacy Notice.

8. Purchases

QuizCraft offers one optional purchase: a monthly subscription that removes advertising. Everything else in the game is free, and nothing is locked behind it.

• The subscription is processed entirely by Google Play Billing. The price shown in the game is the price Google Play charges in your country, including any applicable tax.
• We never receive or store card numbers, bank details or billing addresses. Google confirms that a subscription is active, and we record that confirmation - a true/false value and the date it runs to - against your account. Section 12 describes it as data we hold.
• The confirmation comes from Google, not from your device. When the game reports a purchase, our server checks it with Google before recording anything, so a subscription cannot be granted by modifying the app. That is also why the subscription follows your account rather than your phone: sign in on a new device and it is already there.
• Cancelling and refunds are managed through your Google Play account. The game cannot cancel a subscription and does not try to - it opens Google Play's own management page.
• If a payment fails, Google Play retries for a short grace period during which the subscription continues, as Google Play describes to you at the time.

9. Content You Publish, and What Others Can See

Publishing a quiz to the shared library is entirely optional. Question sets you write or import stay on your device unless you deliberately publish one. If you do publish:

• The quiz file and its description become publicly readable by other QuizCraft users, including children.
• Your nickname is displayed publicly beside quizzes you publish and beside your scores on the monthly chart. Your email address and your age band are never displayed to other users.
• Choose a nickname that does not identify you. We recommend that children in particular do not use their real name, school, or any other identifying detail. Nicknames are limited to 50 characters and are subject to moderation.
• Published content can be removed at your request, or by us following a moderation decision.

10. Moderation, Reporting and Blocking

Because QuizCraft hosts content written by its users and is available to children, we operate an ongoing moderation process:

• Every user can report a published quiz from within the app, choosing a reason and adding detail.
• Every user can block another user, which hides that person's published quizzes from them.
• Reported content is reviewed and may be hidden or removed. Records of reports and moderation decisions are retained so that repeated problems can be identified.
• Publishing content that is objectionable, unlawful, or unsuitable for children is not permitted and may result in removal of the content and of the account.

11. Data Retention, Control and Deletion

• On-device data is under your control at all times. Clearing the app's data or uninstalling it removes everything described in Section 3, permanently and immediately.
• Your account and server-side data are retained while your account exists. To have them deleted, email revsphere.mail@gmail.com from the address associated with the account, or ask a parent or guardian to do so on a child's behalf. We will delete the account record, ratings and chart entries.
• Published quizzes can be withdrawn on request. Where a quiz has been downloaded by others, copies already on their devices cannot be recalled.
• Moderation records may be retained after deletion of an account where required to keep the library safe, and are minimised to what that purpose requires.
• Google Drive backups, if you enable that feature once it is available, are in your own Drive. Remove them through Google's own "Manage apps" settings; we cannot delete them for you.

12. Google Play Data Safety Disclosure

The following summarises our Google Play Data Safety declaration for QuizCraft:

• Personal info — Email address: collected, linked to your identity, used for account management and support. Not shared. Deletion available on request.
• Personal info — User IDs: collected, linked to your identity, used for account management and to attribute published quizzes, ratings and chart scores.
• Personal info — Name (nickname): collected, linked to your identity, displayed publicly beside your published quizzes and chart scores.
• Personal info — Other (country, age band): collected, linked to your identity, used to suggest suitable quizzes. Country and age band are not displayed publicly.
• Messages — comments you leave on a quiz: collected, linked to your identity, read only by that quiz's publisher, used to pass feedback to them. Not shared with any third party. Deletion available on request.
• App activity — In-app search history and actions: not collected. Your gameplay history remains on your device.
• Files and docs — Quiz files you publish: collected and shared publicly, at your explicit choice, for the shared library.
• Financial info: not collected. Purchases are handled by Google Play.
• Location: not collected. The country on your profile is chosen by you, not detected.
• Data is encrypted in transit using HTTPS/TLS.

13. Children's Privacy (COPPA and Google Play Families)

QuizCraft is intended for a mixed audience that includes children, and is operated in accordance with Google Play's Families policies.

• We ask age before anything else, using the neutral screen described in Section 2, and we store a band rather than a date of birth precisely so that we hold less about a child.
• Unknown age is treated as a child. This is deliberate: the safe default restricts rather than permits.
• No advertising identifier for a child. Children, and users whose age is unknown, receive non-personalised advertising tagged for child-directed treatment, and no advertising identifier is transmitted for them. Users aged 13 and over may receive personalised advertising, which uses the advertising identifier; Section 7 sets out the difference in full.
• We do not knowingly collect more from a child than from an adult. The account record in Section 4 is the same for everyone, and gameplay detail stays on the device in both cases.
• Parents and guardians may request access to, or deletion of, their child's information by emailing revsphere.mail@gmail.com. We will act on verified requests without charge.
• Publishing and public display are optional. A child can use every part of the game without signing in, without publishing anything, and without appearing on any chart.

14. European Privacy Rights (GDPR and UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. Contact us at revsphere.mail@gmail.com to exercise any of these.

Our lawful bases are: contract, for the account record needed to provide the library and chart; consent, for optional Google Drive backup and for publishing content; legitimate interests, for moderation that keeps the library safe for children; and legal obligation, where retention is required by law. You may withdraw consent at any time without affecting processing already carried out.

15. California Privacy Rights (CCPA and CPRA)

California residents may request disclosure of the categories and specific pieces of personal information collected, request deletion, and request correction. We do not sell or share personal information as those terms are defined by the CCPA and CPRA, and we have never done so, including for consumers under 16 years of age. We will not discriminate against you for exercising any of these rights.

16. Security

• All communication between the app, our service, and our storage uses HTTPS/TLS.
• Quiz files are uploaded and downloaded using short-lived, single-purpose signed links. Files are not publicly readable without one.
• Our service verifies a signed Google identity token on every request and derives your identity from that token, never from a value supplied by the app.
• Database access is restricted to our application, and the reference data the app reads is held in a read-only area.
• No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

17. International Data Transfers

We are based in the Philippines, and the services we rely on operate in several regions:

• Application service: Google Cloud Run, United States (us-central1)
• Database: Supabase, hosted on Amazon Web Services, Japan (ap-northeast-1)
• Quiz file storage: Google Cloud Storage, Singapore (asia-southeast1)
• Authentication and advertising: Google, which operates globally

By using QuizCraft you acknowledge that your information may be processed in countries other than your own, whose data protection laws may differ from those of your jurisdiction.

18. Changes to This Privacy Policy

We may update this policy as QuizCraft changes. Revisions are posted on this page with an updated "Last updated" date. Where a change materially reduces your privacy, we will seek to notify you within the app before it takes effect.

19. Contact Us

For any question about this policy, to exercise a privacy right, or to make a request on behalf of a child, contact us. We aim to respond within 30 days.