Privacy policy

1. Who is responsible?

Thomas Boom, operating under the name BijbelQuiz, is the data controller for the processing described in this policy. For questions or requests about privacy you can email contact@thomasboom.com.

2. Which data do we process?

Account and profile

An account is optional. When you create an account, we process your email address, username, display name, a unique account number and secured sign-in credentials. Your password is processed by our authentication service Supabase; BijbelQuiz cannot view your password in readable form. We store session tokens on your device so you can stay signed in.

Quiz progress and usage statistics

We process your total score, correct and incorrect answers, rating, streak, last activity date and per-question statistics, such as the number of attempts, correct answers and total answer time. Without an account this data stays local on your device. When you sign in, it is linked to your account and synchronized with Supabase, so your progress is available on multiple devices.

Multiplayer

When you use online multiplayer, we process your account number, display name, game code, role as host or player, chosen language, answers, accuracy, answer time, points, presence and game timestamps. Participants in the same game room can see each other's display name, score and results.

Data on your device

The app stores settings and functional data locally, including language, Bible translation, theme, notification preference, progress, downloaded Bible text, a local copy of quiz questions and status information for onboarding and app features. On Android, the app can schedule a daily local notification if you give permission. BijbelQuiz does not use this notification to track your behavior.

Technical data

When you use the website, web app or online features, the servers involved necessarily receive technical data such as your IP address, the date and time of the request, the requested page or feature, browser or device information and error or security information. This data may appear in server logs. BijbelQuiz uses no advertising trackers and places no cookies for advertising or behavioral analysis on the public website. The web app does use local storage for sessions, settings and app data.

Bible texts and cross-references

When you download or read a Bible translation, the app requests the chosen text from GetBible. When you request cross-references, the Bible reference you chose is sent to OpenBible.info. These services also receive technical connection data, such as your IP address.

3. Purposes and legal bases

We process data for the following purposes:

• to register an account, sign you in, synchronize progress and offer multiplayer — necessary for the performance of the contract with you;
• to technically deliver the app, website and requested Bible features — necessary for the performance of the contract;
• to keep the services safe, available and reliable, prevent abuse and fix errors — based on our legitimate interest in a secure and well-functioning service;
• to show a daily Android notification — based on your consent, which you can withdraw at any time via the app or device settings;
• to comply with applicable legal obligations — where processing is legally required.

You are not required to create an account. Without an account you can use the core features, but synchronization between devices and online multiplayer will not work.

4. Service providers and data sharing

We do not sell your personal data. We only share data when needed to provide the service, when you ask us to or when the law requires it. We use the following categories of recipients:

• Supabase for accounts, authentication, profiles, synchronized statistics, the question database and multiplayer;
• Cloudflare for keeping the website and web app available and secure;
• GetBible for fetching and downloading Bible texts;
• OpenBible.info when you request cross-references;
• Google Play when you download or update the Android app or use the optional review feature. Google processes that data under its own privacy policy.

Some service providers may process data outside the European Economic Area. Where that happens, we ensure an appropriate transfer mechanism, such as an adequacy decision or standard contractual clauses approved by the European Commission, where legally required.

5. Retention periods

We keep account, profile and synchronized progress data for as long as your account exists. We keep multiplayer data for as long as needed to provide the game session, prevent abuse and operate the service. We and our service providers keep technical log data no longer than necessary for security, troubleshooting and operations, subject to their applicable retention periods. Data may be kept longer when needed for a legal obligation or the establishment, exercise or defense of a legal claim.

When you delete your account in the app, your account and the linked profile, statistics and multiplayer data are permanently removed from the active database. Local data on your device is not automatically wiped everywhere; you remove it by clearing the website storage or by deleting the Android app and its app data. Backups and security logs may remain temporarily until they are overwritten in the normal retention cycle.

6. Security

We take appropriate technical and organizational measures to protect personal data. Connections are encrypted, account data is shielded and access rules ensure that users can only view their own statistics and the data of their own game room. No storage or transmission method is completely risk-free, however.

7. Children

BijbelQuiz is suitable for a broad audience, but the online account features are not specifically aimed at children who may not independently give consent under applicable law. If you are younger than the age limit in your country, only use an account with permission from your parent or legal guardian. If you believe a child has provided personal data without valid consent, contact us so we can investigate and delete it where necessary.

8. Your privacy rights

Depending on the applicable law, you can request access, rectification, erasure, restriction of processing and portability of your personal data. You can also object to processing based on legitimate interest and withdraw consent at any time. Withdrawal does not affect the lawfulness of earlier processing.

You can delete your account directly via Settings → Delete account in the app. You can also email us at contact@thomasboom.com to have your account and the linked personal data deleted. Mention the email address your account is registered with. For other privacy requests you can use the same email address. We may ask for additional information to verify your identity and we respond within the legal timeframe.

You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the privacy regulator in the country where you live or work.

9. Changes to this policy

We may update this privacy policy when the app, our practices or the law changes. The current version is always on this page. For significant changes we will inform you where reasonably necessary via the app or website. The date at the top shows when the policy was last updated.