Privacy Policy

Effective: 26 April 2026 · Last updated: 26 April 2026

This Privacy Policy explains how FLATMAP SRL ("FLATMAP", "we", "us", "our") collects, uses, and shares personal data when you use our trivia mobile applications (each, the "App"). FLATMAP SRL is a company organised under the laws of Belgium. Each topic-specific App we publish on the Apple App Store is governed by this same Privacy Policy.

If you have questions, contact us at contact@flatmap.be.

1. Who we are

FLATMAP SRL is the data controller for personal data processed through the App.

• Entity: FLATMAP SRL
• Country: Belgium
• Contact: contact@flatmap.be

2. What data we collect

2.1 Account data

• Firebase user ID (assigned automatically when you create an anonymous or email-based account).
• Email address (only if you choose to link an email account).
• Username you choose.

2.2 Gameplay data

• ELO rating, current division, lives counter.
• Session results (questions answered, correctness, ELO change).
• Answered-question history used to avoid repeating questions and to match difficulty.
• Weekly leaderboard rank.

2.3 Device and technical data

• Firebase Cloud Messaging (FCM) push token, only if you enable notifications.
• App version, OS version, device model, locale.
• Identifier for Vendor (IDFV).

2.4 Crash and diagnostic data

• Stack traces, crash logs, and custom diagnostic events captured by Firebase Crashlytics.

2.5 Purchase data

• Apple App Store receipts validated through RevenueCat.
• RevenueCat subscriber attributes. We do not see or store payment-card data — Apple processes all payments directly.

2.6 Advertising data

• Rewarded-ad impression and reward events from Google Mobile Ads (AdMob).
• Identifier for Advertisers (IDFA), only if you grant tracking permission via Apple's App Tracking Transparency prompt.

3. How we use your data

• To create and operate your account and let you play the game (account data, gameplay data).
• To rank players and operate weekly leaderboards (gameplay data).
• To send timely push notifications (e.g. when your lives are full) — only if you opt in (FCM token).
• To process and validate in-app purchases and subscriptions (purchase data).
• To detect bugs and crashes and improve the App (crash and diagnostic data).
• To serve rewarded ads and grant in-game rewards (advertising data).
• To prevent fraud, cheating, and abuse (all categories, as needed).

4. Legal bases (GDPR Article 6)

• Performance of contract — account, gameplay, and purchase data are processed to provide the service you signed up for.
• Legitimate interest — diagnostic, crash, and basic analytics data are processed to keep the App stable and secure and to detect abuse.
• Consent — IDFA-based ad tracking and push notifications are processed only with your explicit consent (App Tracking Transparency prompt and notification permission). You may withdraw consent at any time in iOS Settings.

5. Third-party processors

We share data with the following processors strictly for the purposes listed above:

• Firebase / Google LLC — Authentication, Firestore, Cloud Messaging, Crashlytics, Analytics. Privacy notice: firebase.google.com/support/privacy
• RevenueCat, Inc. — subscription state validation. Privacy notice: revenuecat.com/privacy
• Google Mobile Ads (AdMob) — rewarded video ads. Privacy notice: policies.google.com/privacy
• Apple Inc. — App Store hosting, in-app purchase processing, push notification delivery (APNs). Privacy notice: apple.com/legal/privacy

We do not sell your personal data, share it with data brokers, or use it for cross-app or cross-site behavioural advertising beyond the rewarded ads served inside the App.

6. Retention

We retain your personal data for as long as your account is active. When you delete your account from inside the App (Profile → Delete Account) we delete your account data, gameplay history, and leaderboard entries within 30 days. Aggregated, anonymised analytics may be retained beyond that period.

7. Your rights (EU/EEA/UK)

If you live in the EU, EEA, or the UK, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate personal data.
• Erasure — request deletion of your personal data. You can do this directly in the App (Profile → Delete Account) or by emailing us.
• Restriction — request that we limit processing in certain cases.
• Portability — receive your personal data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdrawal of consent — at any time, without affecting the lawfulness of prior processing.
• Complaint — lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, dataprotectionauthority.be) or your local supervisory authority.

To exercise any of these rights, contact contact@flatmap.be.

8. Your rights (California — CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose (see Section 2).
• Request deletion of your personal information.
• Opt out of the sale or sharing of your personal information — we do not sell or share your personal information as those terms are defined under CCPA/CPRA.
• Non-discrimination for exercising your rights.

We have not sold any personal information in the preceding 12 months.

9. Children

The App is not directed to children under 13 (United States) or under 16 (European Union). We do not knowingly collect personal data from children under those ages. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International transfers

Some of our processors (Firebase/Google, RevenueCat, AdMob) are based in the United States. Where personal data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards put in place by those processors.

11. Security

We use industry-standard security measures, including TLS for data in transit and our processors' encrypted-at-rest storage. No system is perfectly secure; if we discover a breach affecting your personal data we will notify you and the competent authorities as required by law.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective" date at the top will reflect the latest version. Material changes will also be flagged in the App.

13. Contact

FLATMAP SRL · Belgium · contact@flatmap.be