Privacy Policy

Account details. Your email address, and if you sign in with Google or Apple, the name, email and profile photo they share with us. You also choose a username, and can add a full name and profile photo.

Security details. The PIN you set, which we store only in hashed form so we can’t read it, and whether you’ve turned on biometric unlock. Face ID, Touch ID and fingerprint checks happen on your device. We never receive your biometric data.

Gameplay. Games you register for and play, the answers you pick and when, your scores, time taken, rankings and streaks.

Friends. Friend requests you send and accept, and the friends on your list.

Device and sign-in information. Your IP address when you sign in, and the approximate location we work out from it (country, region, city and rough coordinates for that area). We don’t use your device’s GPS. We also store a device name for each signed-in session and, if you allow notifications, a push notification token.

Messages to us. Anything you send when you contact support.

• To create and run your account, sign you in and keep it secure.
• To run games: score your answers, rank leaderboards, track streaks and show your history.
• To power social features, such as friend requests and letting friends know when you’ve beaten their score.
• To send sign-in codes by email, and notifications you’ve allowed, such as game reminders.
• To prevent cheating, fraud and abuse, and to enforce our Terms of Service.
• To understand, in aggregate, how and where the app is used so we can improve it and plan new games.
• To respond to you and to meet our legal obligations.

We rely on the following legal bases: providing the Service you signed up for (contract), keeping it secure and fair and improving it (legitimate interests), your consent for notifications, and complying with the law.

Your username, profile photo, scores and rankings appear on leaderboards and to other players. Your friends can also see your results and streaks. Your email address, PIN and location are never shown to other players.

We don’t sell your personal data, and we don’t share it with advertisers. We share it only with:

• Service providers who help us run KnowItAll, such as hosting, database, file storage and email delivery. They may only use it to provide their service to us.
• Expo, which delivers push notifications to your device.
• Google and Apple, if you choose to sign in with them, to confirm your identity.
• Authorities or others where the law requires it, or where it’s needed to protect the rights, safety or property of our players or of us.
• A buyer or successor if our business is merged, sold or reorganised, under this same policy.

Some providers may process data outside the country you live in. Where they do, we use appropriate safeguards required by applicable data protection law.

We keep your data while your account is open. When you delete your account, it’s scheduled for deletion after a 30-day grace period, during which you can sign back in to cancel. After that, we delete or anonymise your personal data. Anonymised game statistics may be kept, and we may keep limited records for longer where the law requires it or to resolve disputes and prevent abuse.

In the app, go to Profile, then Account Information, then Delete account. If you can’t access the app, email privacy@knowitall.app from the address on your account and we’ll process it for you.

Depending on where you live, you have the right to:

• access the personal data we hold about you;
• correct data that is wrong or incomplete;
• ask us to delete your data;
• object to or ask us to limit how we use it;
• receive a copy of your data in a portable format;
• withdraw consent at any time, for example by turning off notifications;
• complain to your local data protection authority.

You can update your name, username and photo in the app. For anything else, email privacy@knowitall.app. We may need to confirm your identity before acting on a request.

Data is encrypted in transit. PINs and sign-in tokens are stored hashed, sign-in codes expire quickly, and repeated wrong PIN attempts lock the account for a while. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

KnowItAll is not intended for children under 13, and we don’t knowingly collect their data. If you believe a child under 13 has created an account, contact us and we’ll delete it.

This website doesn’t use advertising or tracking cookies. It remembers your light or dark theme choice in your browser, and our hosting provider may keep standard server logs, such as IP addresses, for security.

We may update this policy from time to time. We’ll change the date at the top and, for significant changes, let you know in the app or by email.

For privacy questions or requests, email privacy@knowitall.app.