Privacy Policy
This policy explains what information the Thaqafa app ("the app") collects, why, and the choices you have. The app is operated by Abdallah Moukdad ("we", "us"). If you have any question, email support@fikra.pro.
1. Information we collect
Account information
- Email & password sign-up: your email address, a username, a display name and a password (stored only as a salted hash).
- Google or Apple sign-in: the name, email address and profile picture the provider shares with us. We never see your Google or Apple password.
- Guest play: a random identifier only. You can later link a guest account to an email, Google or Apple identity; nothing else is collected until you do.
- An optional avatar image you choose to upload.
Gameplay data
Scores, XP, level, coins, hints, answer history, streaks, achievements, daily-challenge results, leaderboard rank and multiplayer match history. This is what makes the game work and lets your progress follow you across devices.
Device and diagnostic data
Through Google Firebase we receive device model, operating-system version, app version, approximate country (derived from IP), crash reports and usage events such as which screens are opened and which quizzes are started. If you allow notifications, a push-notification token is stored so we can send you daily-challenge reminders.
Advertising data
The free version shows ads served by Google AdMob. AdMob may collect your device's advertising identifier and ad-interaction data under Google's Privacy Policy. Premium subscribers see no ads and no ad SDK requests are made on their behalf.
Purchase data
Subscriptions are processed by Google Play or the Apple App Store. We receive a purchase token or receipt so we can confirm your subscription is active. We never receive your card number or billing address.
Data stored on your device only
Questions are cached on your device so you can play solo quizzes offline, and your preferences (language, sound, notification choice) are saved locally. This data never leaves your device unless you sign in and sync.
2. How we use it
- Run the game: quizzes, daily challenge, real-time multiplayer, leaderboards, achievements.
- Keep your progress in sync across devices.
- Verify subscriptions and switch ads off for Premium users.
- Show ads to non-Premium users.
- Send daily-challenge reminders, only if you enabled notifications. You can turn them off in the app or in your phone settings.
- Diagnose crashes and understand which features are used, so we can improve the app.
- Prevent cheating and abuse.
3. Who we share it with
| Recipient | Purpose |
|---|---|
| Google (Firebase Analytics, Crashlytics, Performance, Cloud Messaging, Remote Config) | Analytics, crash reporting, push notifications, feature configuration |
| Google AdMob | Advertising in the free version |
| Google Play Billing / Apple App Store | Subscription purchases and receipt verification |
| Google Sign-In / Sign in with Apple | Optional authentication |
| Other players | Your username, display name, avatar, level and score are visible on leaderboards and to opponents in multiplayer matches. Your email is never shown to other players. |
We do not sell your personal information, and we do not share it with data brokers.
4. How long we keep it
- Account and gameplay data: for as long as your account exists.
- When you delete your account, your personal data is removed from our live systems within 30 days. Encrypted backups may retain it for up to 90 further days before they are rotated.
- Guest accounts that have been inactive for 12 months may be deleted.
- Crash and analytics data is retained by Firebase according to Google's retention settings (up to 14 months).
5. Your choices and rights
- Update your display name and avatar at any time from your profile in the app.
- Delete your account from Settings → Delete account in the app, or follow the steps on our account deletion page.
- Notifications: disable them in the app settings or in your phone's system settings.
- Advertising: reset or limit your advertising identifier in your phone's privacy settings, or subscribe to Premium to remove ads entirely.
- Depending on where you live (for example the EU/UK under GDPR or California under CCPA) you may also have rights to access, correct, export or restrict the processing of your data. Email us and we will respond within 30 days.
6. Children
Thaqafa is a general-audience app and is not directed at children under 13 (or the higher age required in your country). We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it.
7. Security
All traffic between the app and our servers is encrypted with TLS. Passwords are stored as salted hashes. Access to production systems is restricted to the people who operate the service. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your data.
8. International transfers
Our servers, and those of the providers listed above, may be located outside your country. Where required we rely on the provider's standard contractual safeguards for such transfers.
9. Changes to this policy
If we make material changes we will update the effective date above and, where appropriate, notify you inside the app. Continued use after a change means you accept the updated policy.
10. Contact
Abdallah Moukdad
Email: support@fikra.pro
Website: thaqafa.fikra.pro