Who this notice is from
WhozMe operates this quiz service. Use our Contact page for questions, privacy requests or concerns.
Your iOS account
The app creates an account automatically. A random installation credential and account session tokens are held in your device’s Keychain. The server stores a protected hash of the installation credential and session tokens, along with an account identifier, nickname, avatar and notification preferences. We do not ask for an email address or password to create a quiz account.
Account access is tied to the device credential. There is currently no recovery or transfer flow for another device. Your selected language and appearance preferences are stored on the device.
Quizzes and results
We store the quiz title, questions, choices, correct answers, sharing settings, submitted guesses, player nicknames, scores and related timestamps. Drafts are also saved on the creator’s device and synchronized when connected. Passcodes are stored as protected hashes on the server.
The creator can see completed entries and guesses. Depending on the creator’s reveal settings, a player may see only their own result, a leaderboard after finishing, or results after a group reveal. A public leaderboard includes participating nicknames and scores. Anyone receiving a forwarded link and any required passcode may be able to join. Nicknames do not verify identity.
Browser storage
The browser player saves a scoped player credential and your picks in local storage to resume an attempt or reopen a result for up to seven days. The credential is not included in share links. “Forget this session” removes saved browser access; it does not delete the result held by the creator. If browser storage is blocked, progress may last only while the tab remains open.
Notifications
With your permission, iOS may register an Apple push notification token with our server. Result notifications use Apple’s notification service. WhozMe’s default push message does not include a player’s nickname, score or answers. The Activity inbox remains available without push permission.
Contact messages and reports
Website contact forms store your email, optional name, topic, message and submission time privately for operator review. In-app feedback and reports store the details you send with an account reference. Contact messages remain stored until removed by the operator. Please avoid including sensitive information that is not needed for your request.
Service operation and third parties
Our servers and hosting infrastructure process network requests to deliver the service. The API uses hashed identifiers for abuse limits and avoids including authorization tokens, quiz links or message bodies in its standard request logs. Hosting providers may process technical information necessary to run their infrastructure.
The current website has no advertising scripts or third-party analytics. Fonts and visual assets are served with the site. App Store links take you to Apple, whose own privacy practices apply there. Purchases and rewarded ads are not connected in the current implementation.
Country statistics and question research
We store an approximate country code derived from the connecting IP through Cloudflare for creator and completed-round country totals. We do not add raw IP addresses to these analytics records. Older records, VPNs and requests without verified country information may appear as unknown or a different country.
Authorized operators can privately review creator question text and choices to improve our question packs. The question-research view does not include creator identities, selected correct answers or player guesses. These tools are available only through a private server connection.
Keeping and deleting data
Account, quiz and completed-result records remain until deleted. Expired access is rejected by the service; operational cleanup can remove expired sessions, abandoned attempts and transient abuse-limit records. Removing the app alone does not delete server records.
In iOS, go to Settings → Privacy & data → Delete my account. Server deletion runs before device credentials are removed. It deletes the account’s quizzes, attempts, activity, registered push devices and account-linked reports. Creators may also delete a single quiz and its results. A website contact message is not automatically linked to an iOS account; contact us separately to request its removal. If you played a friend’s quiz, you can ask its creator to delete that quiz or contact us with enough information to locate your submission.
Your choices
You can change your nickname, selected language, appearance and result-notification preference in the app. Creators control invitation sharing, passcodes, closure, reveal and revocation. Use the Contact page to ask about access, correction or deletion of information. Do not send a device credential or player token with a request.
Changes to this notice
We will update this page when service behavior or data practices change. The date at the top identifies this version.
Contact us about privacy ↗