9PM Quiz ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise handle your information when you use our website, mobile application, and related services (collectively, the "Service").
1. Information We Collect
1.1 Information You Provide Directly
Authentication: When you sign in via Google or Apple, we receive your email address and basic profile information (name, profile picture).
Profile Information: Optional display name, avatar URL, and biography when you create a creator profile.
Quiz Data: When you create or participate in quizzes, we collect quiz questions, answers, and participation metadata.
Real Name & Shipping Address: Only collected if required by a quiz host for prize distribution (at your consent).
Communication: When you contact us for support, we collect your message and any attachments.
1.2 Information Collected Automatically
Device Information: Device type, OS, browser type, and language settings.
Usage Data: How you interact with the Service, including quiz participation, features accessed, and timestamps.
Location Data: Country (derived from IP address) for regional restrictions on prize quizzes. We do NOT collect precise location data.
Performance Data: Server uptime, response times, and error logs for service improvement.
1.3 Information We Do NOT Collect
Phone numbers
Precise GPS location
Photos, videos, or any other camera imagery
Payment card numbers (any subscription on iOS is billed by Apple via the App Store; we never see card details)
Biometric data
The Android Advertising ID — we strip the ad-id permissions from our app and do not perform cross-app tracking
Note on IP addresses: we briefly process the source IP of incoming requests for rate limiting and to derive your country for regional restrictions on prize quizzes. We do not store IP addresses tied to your account beyond transient session logs.
1.4 Device Permissions (Mobile Apps)
Our mobile apps request the following device permissions only when needed for a specific feature:
Camera: Used exclusively to scan QR codes that link to quizzes. The camera preview is shown only while the QR scanner is open. We do not capture, store, or transmit any photos, video, or imagery — only the decoded text of recognized QR codes is read, and only locally on your device.
Notifications: With your opt-in, we send a daily reminder around 9 PM local time and remote pushes about quizzes you have joined. You can disable these at any time from system settings or in-app Settings.
Internet & Network State: Required to load quizzes, submit answers, and sync results with our servers.
2. How We Use Your Information
To provide and improve the Service
To authenticate you and manage your account
To facilitate quiz creation, scheduling, and participation
To calculate scores and leaderboards
To send you quiz reminders and notifications (if you opt-in)
To detect and prevent fraud, abuse, and clock tampering
To comply with legal obligations
To create aggregated, anonymized analytics
To contact you about changes to our Service
3. Data Retention
Data Type
Retention Period
Then
Quiz answers (detailed)
30 days
Aggregated & anonymized
Leaderboard entries
1 year
Anonymized to "Deleted User"
Account data after deletion
0 days
Immediate hard delete
Prize records
7 years
Legal requirement
Session logs
7 days
Deleted
4. Sharing Your Information
We share your information only in these circumstances:
Quiz Hosts: Your answers and performance data are shared with quiz hosts for scoring and leaderboards.
Service Providers: Third-party vendors who assist us under confidentiality agreements:
All platforms: SendGrid (transactional email), Crisp (live chat support), and Anthropic (Claude Haiku for quiz translation and AI content moderation).
iOS app only: Apple — Sign In with Apple for authentication, Apple Push Notification service for delivering push notifications, App Store In-App Purchases for creator subscriptions (Apple bills the subscriber and we never see card details), and standard App Store / TestFlight crash reports for opt-in diagnostics.
Android app only: Google Firebase — Cloud Messaging (FCM) for push delivery, Crashlytics for crash diagnostics, and Analytics for aggregate, non-personal usage metrics.
Legal Requirements: When required by law, court order, or regulatory agency.
Business Transfers: If 9PM Quiz is acquired or merged, your data may be transferred as part of the transaction.
Aggregated Data: We may publish anonymized, aggregated analytics.
We DO NOT sell your personal data to third parties.
5. Your Privacy Rights
5.1 GDPR (EU Users)
Right to Access: Request a copy of your personal data in a portable format (within 48 hours)
Right to Rectification: Correct inaccurate personal data
Right to Erasure: Request deletion of your account and data
Right to Restrict Processing: Limit how we use your data
Right to Object: Opt out of marketing communications
Right to Withdraw Consent: Withdraw any consent you've given
5.2 CCPA (California Users)
Right to know what personal information is collected
Right to delete personal information
Right to opt-out of "sale" of personal information (we don't sell data)
Right to non-discrimination for exercising CCPA rights
Authentication Cookies: Secure, HTTP-only cookies for JWT authentication (1-hour expiration).
Preference Cookies: Language and theme preferences (stored locally).
Opt-Out: You can disable cookies in your browser settings, but this may affect functionality.
iOS app:
Analytics: The app sends aggregate, non-personal event metrics (quiz joins, completions, feature usage) to our own analytics endpoint at 9pmquiz.com. No third-party analytics SDK is embedded. We do not use the iOS IDFA (Identifier for Advertisers) and do not request App Tracking Transparency consent because we do not track across apps.
Crash Diagnostics: Standard iOS crash reports collected by Apple under your device's "Share With App Developers" setting. No third-party crash SDK is embedded.
Android app:
Analytics: The app sends the same aggregate event metrics to our 9pmquiz.com endpoint as iOS, and additionally uses Google Firebase Analytics for aggregate, non-personal usage metrics. We do not use the Android Advertising ID — we strip the ad-id permissions from the build — and we do not perform cross-app or cross-device tracking.
Crash Diagnostics: Google Firebase Crashlytics receives anonymized stack traces and device/OS context when the app crashes, so we can fix bugs.
7. Push Notifications
You can opt-in to push notifications for quiz reminders and results.
You can disable notifications at any time in your account settings or device settings.
We only send notifications about quizzes you have joined or hosted, plus an optional daily reminder around 9 PM local time.
Push delivery is performed via Apple Push Notification service (iOS) and Google Firebase Cloud Messaging (Android). Your device's push registration token is sent to our servers and used only to route notifications to your device. Sign out, disable notifications, or uninstall the app to revoke.
8. Security
We implement industry-standard security measures including:
HTTPS encryption for all data in transit
AES-256-GCM encryption for sensitive quiz content
Secure password hashing (bcrypt)
Regular security audits
Database firewalls and access controls
No storage of payment card numbers — any subscription billing on iOS is handled entirely by Apple via the App Store
If you discover a security vulnerability, please report it to security@9pmquiz.com.
9. Content Moderation
Quiz content is automatically reviewed using AI before public listing
Moderation scans for policy violations across 12+ languages
Flagged content is manually reviewed by our team
Users can report inappropriate content
10. Children's Privacy
Our Service is not intended for children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete such information and terminate the child's account immediately.
Prize quizzes require users to be 18+ years old.
11. International Data Transfers
Your data may be processed in the European Union. By using our Service, you consent to the transfer of your information to countries that may not provide the same level of data protection as your home country. We comply with GDPR for EU data transfers via appropriate safeguards.
12. Third-Party Links
Our Service may contain links to third-party websites and services not operated by us. This Privacy Policy does not apply to external sites. We encourage you to review their privacy policies before providing any information.
13. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
We may update this Privacy Policy from time to time. We will notify you of material changes via email or by updating the "Last updated" date above. Your continued use of the Service constitutes acceptance of the updated policy.