Incudra
Privacy Policy
This policy describes exactly what the app stores, where it goes, and how to get rid of it. It is short because the app collects little: there is no analytics service and no crash-reporting service in it. The one third party inside the app is Google’s advertising service, and what it may collect is described under Advertising, below.
What we collect
Your account
If you register, we store your email address and a cryptographic hash of your password — never the password itself. If you play as a guest, no email and no password exist; the account is an anonymous identifier and nothing more.
If you sign in with Apple or with Google instead, we receive an email address from them — the relay address, if you asked Apple to hide yours — and no password is ever created. We do not receive your contacts, your posts, or anything else held in that account. Signing in does tell that company that you use this app.
Your profile and progress
A username, your chosen avatar, your invite code, and your progress in the app: trophies, peak trophies, experience, energy, shield charges, matches played and won, win streaks, daily-reward bookkeeping, and whether you have claimed the launch-month gift and until when it runs.
Also a country, which decides only which players you appear beside on the “Local” leaderboard. You do not choose it and there is no picker for it: the app reads the country of the store account your phone is signed in to — Google Play’s billing country, or the App Store storefront — once, shortly after you first sign in. It can correct itself during your first week and is then fixed. Where no store can answer, nothing is stored and the Local leaderboard simply stays empty for you.
We do not ask for or store your real name, your date of birth, your phone number, your postal address, your contacts, your photos, or your location. The country above is your store account’s, not a position: it is not derived from GPS, from your IP address, or from your phone’s language.
Your matches
For each match: the mode, who played, the scores, the result, the timestamps, and whether someone left early. Solo modes store one best score per mode so it survives reinstalling the app.
Questions you report
If you report a question as wrong, we store which question it was, the reason you picked, the note you wrote if you wrote one, and that it came from your account. We read reports to correct the question data; nothing about a report is shown to other players.
A genuineness check, on Android
The Android app can ask Google Play Integrity, at most once a day, whether it is the genuine app from Google Play running on a genuine device. When it does, we store Google’s short answer and when it was given, against your account, to recognise tampered copies and cheating. It says nothing about who you are, and the iPhone app does not run this check.
Friends
Who you are friends with, and pending friend and match invitations. You add people by username or invite code — the app never reads your phone's contact list.
Purchases
If you buy something, we store the store name, the product identifier, the transaction identifier, the period, the status, whether it is set to renew, and the expiry date, so we know what you are entitled to. We also keep the store's own verification response for that purchase, so a support question or a disputed charge can be answered from what the store actually said rather than from our summary of it. It is never readable by the app; only we can see it. No card number or payment detail ever reaches us. Payment is handled entirely by Google Play or the Apple App Store; we only receive confirmation that a purchase is valid.
Technical logs
Our hosting provider keeps short-lived server logs — an IP address, a timestamp, which request was made — so that faults and abuse can be traced. We do not build profiles from them, we do not use them for advertising, and they are not published or sold.
We also keep, per account, a count of recent requests of a few kinds — friend requests, invite-code lookups, questions asked for, purchase checks — so that no single account can flood the service. Each count covers at most a day and is overwritten when the next one starts.
What stays on your device
Some settings are stored only on your phone and are never uploaded: sound on or off, chosen language, notification preference, whether you have seen the how-to-play guide, when the app last asked you to rate it, and the counter that decides how often an ad may interrupt a match. The sign-in session that keeps you logged in lives on the phone too. Uninstalling the app deletes them. Because they are local, they do not follow you to a new device. The one ad-related timing we do keep on our servers is when you last took the energy reward a rewarded ad pays for, so that reward cannot be claimed more often than it is meant to be.
Reminders are scheduled by your phone rather than sent from a server. The app uses no push-notification service at all, so no third party is told when or how often you play.
Advertising
The app shows ads through Google AdMob. To do that, Google may use your device's advertising identifier and standard technical information about your device. Google’s ad software also collects diagnostics about how the app and the ads perform — such as crashes, launch time and loading speed — to deliver and measure ads. When ads are personalised, Google may combine this with data from other apps and websites; that is what Apple calls tracking, and what the App Tracking Transparency prompt below asks about.
In the European Economic Area, the United Kingdom and Switzerland, where consent is required, the app asks you before any personalised advertising happens. You can change or withdraw that answer whenever you like, inside the app: Settings → Ad Privacy Settings reopens the same form. It is not a device setting and you do not have to ask us.
In the United States, the state privacy laws ask for an opt-out rather than a prompt, so there is no form at first launch. The same Settings → Ad Privacy Settings row carries a “Do Not Sell or Share My Personal Information” choice, and it appears for players in the states whose laws provide one: California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. Choosing it stops personalised advertising for you.
On iOS the app asks through Apple's App Tracking Transparency prompt before any tracking that needs it. Declining does not remove the ads; it means they are not personalised.
You can limit ad tracking on your device at any time: on Android via Settings, Privacy, Ads; on iOS via Settings, Privacy and Security, Tracking. Ads will still appear, but they will not be personalised.
Google's own handling of this data is described in the Google Privacy and Terms.
Why we are allowed to hold it
Account, profile, match and purchase data exist because they are what the app is — without them there is no account to log into, no opponent to be matched with, and no way to honour a purchase. Under the GDPR that is performance of a contract with you. Advertising that is personalised rests on your consent, which you may withdraw. Keeping the service working and resisting abuse rests on our legitimate interest.
Who else sees it
| Who | What they do |
|---|---|
| Supabase | Hosts the database and the login system. They process data on our instructions and do not use it for their own purposes. |
| Google (Play Billing, AdMob, Play Integrity) and Apple (App Store) | Handle payment. Google also serves the ads and, on Android, can confirm that the app and the device are genuine. If you sign in with either company, it also learns that you use this app. |
| Brevo | Sends account emails such as verification and password reset. These messages carry a small image from Brevo that records whether the email was opened. |
Each of them is bound, by its contract with us or by the data-protection terms it publishes for these services, to give your data the same or equal protection as this policy does.
That is the whole list. We receive no money for your data: we do not sell it, we do not pass it to data brokers, and we do not build advertising profiles of our own.
One word needs care, because United States state law defines it more widely than everyday speech does. When advertising is personalised, your device’s advertising identifier goes to Google so that the ad can be chosen — and California and several other states class that as sharing (there, “sale or sharing”) even though no money changes hands. That is exactly what the “Do Not Sell or Share My Personal Information” choice above switches off. We would rather say this plainly than let the two sentences appear to contradict each other.
How we protect it
Everything travels over an encrypted connection. Passwords are kept only as a cryptographic hash, so nobody — us included — can read yours. The database enforces per-row rules that stop one account reading another's data, and the keys that could bypass those rules never ship inside the app. No system is perfect; if a breach ever affected you, we would tell you and the relevant authority.
Where it is stored
Data is held on Supabase's infrastructure and may be processed outside your country, including outside the European Economic Area. Where that happens, it is covered by the European Commission's standard contractual clauses.
How long we keep it
Your account data stays until you delete your account. Deletion is immediate and permanent — see Delete your account. Records that a tax authority or a payment provider requires us to retain, such as proof of a purchase, are kept for as long as that obligation lasts, and for no other purpose.
Your rights
You may ask for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or complain to your national data protection authority. Write to support@incudra.com and we will answer within 30 days. Deletion needs no request at all: the app does it immediately from its Settings screen.
This website
Everything above is about the app. incudra.com itself sets no cookies — no analytics, no advertising, no preference cookies. There is no form on it, nothing to log into, and no tracking pixel.
The site is hosted on Cloudflare, which keeps short-lived access logs to run the service and resist abuse. That is the only company involved in serving you this page: the fonts are served from this site rather than from a font CDN, so reading here introduces your browser to nobody.
If you live in Türkiye
Turkish law (KVKK, Law No. 6698) gives you a specific set of rights on top of the ones above, and the Turkish version of this policy lists them article by article along with how to exercise them: Gizlilik Politikası. Where the two versions differ, the Turkish text governs for readers living in Türkiye.
Children
Football Trivia Duel is not directed at children and we do not knowingly collect data from a child under 13 (or the higher age set by local law). If you believe a child has created an account, write to us and we will delete it.
Changes
If this policy changes we update the date at the top of this page, and we say so in the app when the change is significant.
Who is responsible for your data
Football Trivia Duel is made and run by Alp Soyöz, an independent developer based in Türkiye, who is the controller of the data described here. On Google Play and on this website the developer appears under the trading name Incudra; on the App Store, under the name Alp Soyöz. Both are the same person, and “we” and “us” in this policy mean that developer. Each store listing also carries the verified contact details that store requires.
Contact
Alp Soyöz (Incudra) — support@incudra.com