Privacy Policy
This policy describes exactly what the app stores, where it goes, and how to get rid of it. It is short because the app collects little: there is no analytics service, no crash-reporting service, no social-login provider, and no third-party tracker in it.
What we collect
Your account
If you register, we store your email address and a cryptographic hash of your password — never the password itself. If you play as a guest, no email and no password exist; the account is an anonymous identifier and nothing more.
Your profile and progress
A username, the country you selected, your chosen avatar, your invite code, and your progress in the app: trophies, peak trophies, experience, energy, shield charges, matches played and won, win streaks, and daily-reward bookkeeping.
We do not ask for or store your real name, your date of birth, your phone number, your postal address, your contacts, your photos, or your location. The country is the one you pick in the app; it is not derived from GPS.
Your matches
For each match: the mode, who played, the scores, the result, the timestamps, and whether someone left early. Solo modes store one best score per mode so it survives reinstalling the app.
Friends
Who you are friends with, and pending friend and match invitations. You add people by username or invite code — the app never reads your phone's contact list.
Purchases
If you buy something, we store the store name, the product identifier, the transaction identifier, the period, the status, and the expiry date, so we know what you are entitled to. No card number or payment detail ever reaches us. Payment is handled entirely by Google Play or the Apple App Store; we only receive confirmation that a purchase is valid.
Technical logs
Our hosting provider keeps short-lived server logs — an IP address, a timestamp, which request was made — so that faults and abuse can be traced. We do not build profiles from them, we do not use them for advertising, and they are not published or sold.
What stays on your device
Some settings are stored only on your phone and are never uploaded: sound on or off, chosen language, notification preference, and internal counters that control how often an ad may appear. Uninstalling the app deletes them. Because they are local, they do not follow you to a new device.
Reminders are scheduled by your phone rather than sent from a server. The app uses no push-notification service at all, so no third party is told when or how often you play.
Advertising
The app shows ads through Google AdMob. To do that, Google may use your device's advertising identifier and standard technical information about your device. Where the law requires consent — in the European Economic Area, the United Kingdom and Switzerland — the app asks you before any personalised advertising happens, and you can change that answer at any time from your device's settings or by asking us to reset it.
On iOS the app asks through Apple's App Tracking Transparency prompt before any tracking that needs it. Declining does not remove the ads; it means they are not personalised.
You can limit ad tracking on your device at any time: on Android via Settings, Privacy, Ads; on iOS via Settings, Privacy and Security, Tracking. Ads will still appear, but they will not be personalised.
Google's own handling of this data is described in the Google Privacy and Terms.
Why we are allowed to hold it
Account, profile, match and purchase data exist because they are what the app is — without them there is no account to log into, no opponent to be matched with, and no way to honour a purchase. Under the GDPR that is performance of a contract with you. Advertising that is personalised rests on your consent, which you may withdraw. Keeping the service working and resisting abuse rests on our legitimate interest.
Who else sees it
| Who | What they do |
|---|---|
| Supabase | Hosts the database and the login system. They process data on our instructions and do not use it for their own purposes. |
| Google (Play Billing, AdMob) and Apple (App Store) | Handle payment and, in Google's case, advertising. |
| Brevo | Sends account emails such as verification and password reset. |
That is the whole list. We do not sell your data, we do not share it with data brokers, and we do not use it to build advertising profiles of our own.
How we protect it
Everything travels over an encrypted connection. Passwords are kept only as a cryptographic hash, so nobody at Incudra can read yours. The database enforces per-row rules that stop one account reading another's data, and the keys that could bypass those rules never ship inside the app. No system is perfect; if a breach ever affected you, we would tell you and the relevant authority.
Where it is stored
Data is held on Supabase's infrastructure and may be processed outside your country, including outside the European Economic Area. Where that happens, it is covered by the European Commission's standard contractual clauses.
How long we keep it
Your account data stays until you delete your account. Deletion is immediate and permanent — see Delete your account. Records that a tax authority or a payment provider requires us to retain, such as proof of a purchase, are kept for as long as that obligation lasts, and for no other purpose.
Your rights
You may ask for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or complain to your national data protection authority. Write to support@incudra.com and we will answer within 30 days. Deletion needs no request at all: the app does it immediately from its Settings screen.
Children
Football Trivia Duel is not directed at children and we do not knowingly collect data from a child under 13 (or the higher age set by local law). If you believe a child has created an account, write to us and we will delete it.
Changes
If this policy changes we update the date at the top of this page, and we say so in the app when the change is significant.
Who is responsible for your data
Incudra is the trading name of an independent developer based in Türkiye, and is the controller of the data described here. The store listing carries the account holder's verified name and contact details as each store requires.
Contact
Incudra — support@incudra.com