Privacy Policy

Last updated : July 19, 2026

This policy describes how the 17Quizz application ("the App") processes your personal data, in accordance with Regulation (EU) 2016/679 of 27 April 2016 ("GDPR") and the French Data Protection Act (law 78-17 of 6 January 1978, as amended). Data controller: Ak2rDev — contact: contact@ak2r.com.

1. Minimum age

The App is restricted to people aged 15 or older (the age of digital consent in France). A declarative check is performed when the account is created: the date of birth you enter is used only for this check and is never stored — only an "age verified" flag is kept.

2. Data we collect

• Account: sign-in provider identifier (Google or Apple) and e-mail address provided by that provider. The name and profile picture possibly present in the identity token are neither used nor stored (data minimisation): your public identity is your username, and your avatar your initials on an in-game colour — or a photo you choose to add yourself.
• Profile photo (optional): if you add one, our servers crop it, strip its metadata (including GPS location) and show it to other players next to your username — except in anonymous mode. You can remove it at any time; a reported photo, or one that breaks the rules, is removed by our team. It is deleted with your account (file erased by the automatic purge, within 48 hours at most).
• Game profile: username, ranking (ELO), virtual coins, cosmetics, duel history, quizzes you created.
• Notifications: device push token, only if you enable them.
• Advertising: device advertising identifiers and technical signals processed by our ad provider (see section 3), only according to your consent choices.
• Purchases: account identifier and in-app purchase transaction history (no banking data — payment is processed by Apple).
• Moderation: reports sent or received, blocks.
• Security: technical logs with a hashed (irreversible) IP address for auditing sensitive actions.

No precise location data is collected and your data is never sold.

3. Advertising

The App displays ads served by Google AdMob (ad screens and optional rewarded videos). In the European Economic Area, a consent form is shown before any ad; on iOS you are also asked for tracking permission (App Tracking Transparency). Without your consent, only non-personalized (contextual) ads are shown. You can review or withdraw your consent at any time from within the App (Settings → Privacy and advertising), which reopens the consent form; iOS tracking permission is withdrawn separately in iOS Settings → Privacy → Tracking. For rewarded videos, a technical identifier of your account is sent to the ad provider so the reward can be validated server-side.

Ads served are limited to content suitable for the App's age rating. If an ad seems inappropriate, you can report it from Settings → Privacy and advertising.

"'Consent' of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her."

Art. 4(11) GDPR

4. Purposes and legal bases

• Running the game, duels and ranking — performance of the contract (Art. 6.1.b GDPR).
• In-app purchases and delivery of purchased content — performance of the contract (Art. 6.1.b) and statutory accounting obligations (Art. 6.1.c).
• Moderation of content and behaviour — legitimate interest (Art. 6.1.f).
• Security and fraud prevention — legitimate interest (Art. 6.1.f).
• Notifications — consent (Art. 6.1.a), can be disabled at any time.
• Personalized advertising — consent (Art. 6.1.a), can be withdrawn at any time from within the App.
• Technical diagnostics and usage measurement (crash reports, aggregated usage statistics) — legitimate interest (Art. 6.1.f) in keeping the App working; you may object at any time (Settings → Privacy and advertising → Diagnostics and usage statistics), in accordance with Art. 21 GDPR.

5. Recipients and processors

Your data is processed by the following providers, acting on our behalf under contracts compliant with Article 28 GDPR:

Each of these third parties is contractually required to provide the data entrusted to it with a level of protection at least equivalent to the one described in this policy, to process it only on our documented instructions and solely for the purposes stated above. We do not sell or transfer your data, and none of these providers is allowed to reuse it for its own purposes.

6. Transfers outside the European Union

Some of these providers (Google, Apple, RevenueCat, Expo) are established in the United States. The corresponding transfers are governed by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (Art. 46 GDPR).

7. Retention periods

8. Your rights

Under Articles 15 to 22 GDPR you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21). You can download all your data from the app (Settings → Download my data) and delete your account at any time; for any other request, write to privacy@ak2r.com (answer within one month, Art. 12.3). You may also lodge a complaint with the French supervisory authority, the CNIL.

"The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay […]"

Art. 17(1) GDPR (excerpt)