Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is:

Great Scott! AB
Luftfartsgatan 19, 128 34 Skarpnäck, Sweden
Email: support@kronotrivia.com

2. Account Requirement

A Krono Account is required to use the App. You create an account by signing in with Apple (Sign in with Apple). When you do so, Apple may share your name and an email address with us. If you choose to hide your email, Apple provides a private relay address instead — we never see your real email in that case.

If you previously used Krono with Game Center, your existing gameplay data will be migrated to your new Krono Account. Your legacy Game Center Player ID is retained solely for migration traceability and is not used for any other purpose.

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Account & Profile Data

• Apple ID identifier and relay email address (provided by Sign in with Apple)
• Firebase Authentication user ID
• Your chosen unique handle (username)
• Display name
• Profile avatar image (stored in Firebase Cloud Storage)
• Account status (active, pending deletion)

3.2 Gameplay Data

• Krono Score, level, and experience points
• Number of games played, wins, tournament results, and streaks
• In-app currency balances (tickets, lifelines)
• Game history and answer records

3.3 Device & Usage Data

• Device type, operating system version, and app version
• IP address
• Push notification device tokens (if you allow notifications)
• Anonymous analytics events (e.g. screens viewed, features used) — collected via TelemetryDeck, a privacy-focused analytics service that does not track individual users and does not use cookies or fingerprinting

3.4 Legacy Migration Data

• Game Center Player ID (retained only for migration traceability from the legacy Game Center–based system)

4. Legal Bases for Processing

Under the GDPR, we process your personal data on the following legal bases:

• Performance of a contract (Art. 6(1)(b)): Processing your account, profile, and gameplay data is necessary to provide you with the Service — including creating and maintaining your account, tracking your progress, and enabling gameplay features.
• Legitimate interest (Art. 6(1)(f)): We process anonymous analytics data to understand how the App is used, identify bugs, and improve the experience. Our legitimate interest is balanced against your rights because the analytics data is anonymous and collected via a privacy-respecting service (TelemetryDeck).
• Consent (Art. 6(1)(a)): We only send push notifications if you have granted permission on your device. You can withdraw consent at any time by disabling notifications in your device settings.

5. How We Use Your Data

We use your personal data to:

• Create, authenticate, and manage your Krono Account
• Provide gameplay features — including scoring, leaderboards, tournaments, and in-app currency
• Display your public profile (handle, display name, avatar) to other players
• Send push notifications about game events such as Daily Challenge results and tournament updates (only with your consent)
• Migrate your data from the legacy Game Center system to your Krono Account
• Analyze anonymous usage patterns to improve the App
• Prevent fraud, abuse, and enforce our Terms of Service

6. Third-Party Service Providers

We use the following third-party services to operate the App. Each acts as a data processor on our behalf:

7. International Data Transfers

Our Firebase infrastructure is hosted in the United States. This means your personal data is transferred to and processed in the US. Google (which operates Firebase) relies on the EU–US Data Privacy Framework and Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection for such transfers.

TelemetryDeck processes analytics data within the European Union.

8. Data Retention

We retain your personal data for as long as your Krono Account is active. Specifically:

• Account & gameplay data: Retained for the lifetime of your account. Deleted when you delete your account (see Section 10 below).
• Analytics data: TelemetryDeck retains anonymous analytics signals in accordance with their own retention policy. Since these signals are not personally identifiable, they are not tied to your account.
• Push notification tokens: Retained while your account is active and notifications are enabled. Removed upon account deletion.
• Legacy Game Center Player ID: Retained alongside your account data for migration traceability. Deleted when your account is deleted.

9. Your Rights Under the GDPR

As a data subject, you have the following rights:

• Right of access (Art. 15): You can request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): You can update your display name, handle, and avatar directly in the App. For other corrections, contact us.
• Right to erasure (Art. 17): You can delete your account from within the App (see Section 10). You may also contact us to request deletion.
• Right to restriction of processing (Art. 18): You can ask us to restrict how we process your data in certain circumstances.
• Right to data portability (Art. 20): You can request your personal data in a structured, machine-readable format.
• Right to object (Art. 21): You can object to processing based on our legitimate interest. We will stop processing unless we demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent (e.g. push notifications), you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@kronotrivia.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) if you believe your data has been processed in violation of the GDPR:

Integritetsskyddsmyndigheten (IMY)
Box 8114, 104 20 Stockholm, Sweden
www.imy.se

10. Account Deletion

You can delete your Krono Account at any time from within the App. When you request deletion:

• Your account enters a 7-day cooling-off period during which it is marked as pending deletion and you are logged out.
• During this period, you can cancel the deletion by signing back in.
• After the 7-day period, we permanently and irreversibly delete: your player profile document, your handle reservation, your avatar image from Cloud Storage, your Firebase Authentication user record, and all associated subcollection data.

Once hard deletion is complete, your data cannot be recovered. If you have any questions about the process, contact us before the cooling-off period ends.

11. Push Notifications

If you allow push notifications, we collect a device token to deliver notifications such as Daily Challenge results and tournament updates. We do not use push notifications for marketing purposes.

You can disable push notifications at any time through your device's Settings. When you do, we stop sending notifications; your device token is removed when your account is deleted.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), Firebase Security Rules to restrict data access, and server-side validation of all operations. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

13. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and you believe your child has created a Krono Account, please contact us at support@kronotrivia.com and we will promptly delete the account and associated data.

In EU/EEA member states where the age of digital consent is higher than 13, we rely on the applicable local threshold. If consent from a parent or guardian is required, we may require such consent before allowing use of the Service.

14. Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your data becomes subject to a different privacy policy.

Legal Requirements

We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g. a court or government agency), or if we believe in good faith that such action is necessary to:

• Comply with a legal obligation
• Protect and defend our rights or property
• Prevent or investigate potential wrongdoing in connection with the Service
• Protect the personal safety of users or the public

We do not sell your personal data.

15. Links to Other Websites

The App may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of any site you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top and, where appropriate, notify you via the App or by other means.

We encourage you to review this page periodically. Changes take effect when posted on this page.

17. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us:

• By email: support@kronotrivia.com
• By mail: Great Scott! AB, Luftfartsgatan 19, 12834 Skarpnäck, Sweden