Privacy Policy — Shalom Bible Quiz

Effective Date: September 21, 2026

Shalom Bible Quiz ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

The data controller is Shalom Bible Quiz, contactable at churchfamilyquiz@gmail.com. Where GDPR / UK GDPR applies, this policy provides the Article 13–14 information.

1. Information We Collect

Personal Information You Provide: When you register or create a profile, we may collect your display name, team/family name, church name, email address (for login, account recovery, scheduling, and game reminders), and phone number (only where the registration form asks for it).

Account & Technical Identifiers: Team/player IDs and an anonymous Firebase Auth UID (generated when you first use Live Multiplayer) used to keep your scores, rooms, and sessions working. Error/diagnostic log entries only leave your device if you choose to email them to support.

Gameplay Data: We store local high scores, leaderboard achievements, quiz answers, streaks, XP/levels, and visual theme preferences locally on your device.

Device Information: We do NOT collect device identifiers, precise location, contacts, photos, or any other sensitive device data.

2. How We Collect Information

Information is collected through: (a) user registration forms within the app, (b) gameplay data generated during quiz sessions, (c) an anonymous Firebase Auth UID created on first Live Multiplayer use, and (d) local storage (localStorage and IndexedDB) on your device. No advertising or analytics SDKs are used. Firebase and Google Fonts process minimal technical data per their policies (see §4).

3. How We Use Your Information & Lawful Bases (GDPR)

We use the collected data solely to: (a) enable real-time multiplayer quiz functionality via Firebase Realtime Database, (b) compile localized church/family leaderboards, (c) save your customization preferences (themes, language, sound settings), (d) authenticate users and secure accounts against unauthorized access, (e) provide AI features (Infinite-mode questions and verse-grounded devotional reflections via Google Gemini through our backend), and (f) upgrade displayed verses to the NIV via our api.bible proxy where available.

Where GDPR / UK GDPR applies, our lawful bases are: contract (providing the game, leaderboards, and account features you request), consent (optional country pre-fill, reminder/schedule emails, and AI features — withdrawable anytime via Settings or by contacting us), and legitimate interests (keeping leaderboards honest, securing accounts, and diagnosing errors). We never use your data for advertising.

4. Third-Party Services

We use the following third-party services:

Firebase Authentication + Realtime Database (Google): Anonymous sign-in creates a random UID on first Live Multiplayer use (no password, no social login). The database carries transient room state (player names, scores, answers) during active sessions. Firebase Privacy Policy

Google Apps Script (Google): Used as our backend for leaderboard data, church/team/family registration, and score persistence. Data is transmitted over encrypted HTTPS connections. Google Privacy Policy

Google Gemini (via our Google Apps Script backend): Powers Infinite-mode questions and verse-grounded devotional reflections. Only the text needed for the feature (e.g. verse reference/text, topic) is sent; your API key never lives in the app. AI outputs may contain errors — verify with Scripture. Google Privacy Policy

api.bible (via our backend proxy): Provides NIV verse upgrades for the Verse of the Day. Only the verse reference is sent; the API key stays server-side and responses are cached. NIV text © Biblica — all rights reserved to its owner.

Font Awesome & Google Fonts: Used for icons and typography. These services may collect usage data as described in their respective privacy policies.

ipapi.co: Used for optional geo-IP lookup to pre-fill a player's country/region during registration. The request transmits the device's public IP address to ipapi.co (no account required, CORS-enabled). No persistent identifier is stored; the response is used only to pre-fill a country field. ipapi.co Privacy Policy

translate.googleapis.com (Google Translate): Used for on-demand translation of quiz questions and UI text when the player selects a non-English language. The request sends the source text to Google Translate; no personal identifiers are sent. Translations are displayed client-side only and are not stored. Google Translate Terms

We do NOT sell, rent, or share your personal information with any third parties for marketing or advertising purposes.

5. Data Storage and Security

All personal data is securely transmitted via HTTPS encrypted connections. Quiz data and user profiles are cached locally using your browser's localStorage and IndexedDB. Multiplayer room data in Firebase is ephemeral and deleted when a game ends or the room is closed. Google infrastructure (Firebase, Apps Script, Gemini, Translate) may process data outside your country under Google's safeguards (encryption, Standard Contractual Clauses). We implement reasonable technical safeguards to protect your data, but no method of electronic storage is 100% secure. Passcodes are verified server-side with rate limiting and are never embedded in the app.

6. Data Retention and Deletion

You retain full rights over your data. Delete it yourself anytime via Settings → Delete My Account (email + passcode verification), which removes server-side data and clears local storage. Alternatively, request deletion of your profile history, associated phone numbers, and all related data by contacting us at the email below. You may also clear locally cached data at any time via Settings → Clear Offline Cache. Firebase room data is automatically deleted when a game session ends.

We retain server-side data (leaderboard scores, church/team registrations) until you request deletion. To request data deletion, please email us from the email address associated with your registration. We respond to verifiable requests within 30 days.

7. Children's Privacy

Shalom Bible Quiz is intended for general audiences and is designed for family and church use, with a 13+ age gate (or higher where local law requires, e.g. 16 under GDPR in some EU states). We do not knowingly collect personal information from children below the applicable age without parental consent. If you believe a child has provided us with personal information, please contact us immediately so we can delete it.

8. Your Rights (including GDPR / UK GDPR)

Depending on your jurisdiction, you may have rights under GDPR, UK GDPR, CCPA, or similar laws including: the right to access, correct, delete, or port your data; the right to restrict or object to processing; the right to withdraw consent (without affecting prior lawful processing); and the right to lodge a complaint with a supervisory authority (e.g. the UK ICO or your EU data protection authority). To exercise these rights, contact us using the information below (we reply within 30 days).

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted within the app, and the "Effective Date" at the top will be updated. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or data requests regarding this Privacy Policy, please contact us at:

churchfamilyquiz@gmail.com