Privacy notice for the app and the game
Last updated: 20 October 2026.
In short
- You don’t need an account. You choose a nickname, and the app gets a random guest ID. We don’t ask for your name, email address, phone number, age or location.
- Nicknames and answers in a game are deleted when the game closes, and at the latest 2 hours and 15 minutes after the game was created. Points and places are kept without the nickname, but linked to the guest ID, for 90 days for statistics.
- What you practise on your own is stored on your phone, not with us.
- DriveQuiz shows no adverts. We don’t sell data, and we don’t build profiles of you for advertising or marketing.
- The app has no analytics or crash tools from other companies. We only get crash reports through Apple’s and Google’s own schemes, which follow the settings on your phone. The QR scanner on Android comes from Google and can send technical usage data to Google; see below.
- DriveQuiz Pro is bought in the App Store or on Google Play. We never get your payment card.
- You can ask for access and deletion at hello@drivequiz.app, and complain to the ICO.
Who is responsible for your data?
Fri Vei AS · organisation number 934 748 468 · registered in the Norwegian Register of Business Enterprises · Kobbervegen 1A, 4820 Froland, Norway · hello@drivequiz.app
Fri Vei AS is the controller of the data described here: we decide how and why it is used. Send questions about privacy to hello@drivequiz.app.
What we process, why and for how long
- Guest ID: a random ID from our server, kept in a signed key on your phone or in your browser
Why: to recognise you in the game, also when your phone has locked
Lawful basis: legitimate interests
How long: the key is valid for 180 days and is renewed when you play. The same guest ID is used for at most 12 months; after that you get a new one. - The nickname you choose
Why: to show you in the lobby and on the scores in the game
Lawful basis: legitimate interests
How long: in the game until it closes. On your phone or in your browser until you change it or delete the app or the site data, so you don’t have to type it every time. On an iPhone it can stay in the keychain after the app is deleted; see below. - Answers, points and place in a game
Why: to play, show the scores and show you which topics you can practise more
Lawful basis: legitimate interests
How long: when the game closes, nicknames and answers are deleted and the result moves to the statistics below. A game closes at the latest 2 hours after it was created, and anything left of it is deleted at the latest 15 minutes after that. - Game results: points, number of right answers, place, whether you played again, the game code, the time, the number of players and questions, and the guest ID. Not the nickname and not individual answers.
Why: statistics: to see that the game works, adjust scoring and difficulty, and spot misuse
Lawful basis: legitimate interests
How long: 90 days, then deleted automatically within a day. - Events: “game started”, “game finished”, “played again” and “new player joined”, with the game code and the time. Start and finish also record which country’s questions were used and the number of questions and players, and start records whether “no time pressure” was on. Not the guest ID and not the nickname.
Why: to understand how the game is used and make it better
Lawful basis: legitimate interests
How long: 90 days, then deleted automatically within a day. - The guest ID of whoever starts a game, and the time
Why: to stop anyone from starting many games in a short time
Lawful basis: legitimate interests
How long: at most 2 days. - IP address and technical details in requests to the game server
Why: to deliver the game, keep the service secure and limit misuse, such as many new guest IDs from one address
Lawful basis: legitimate interests
How long: used while the request is handled. The misuse counter resets after one minute. We have not turned on log storage (a saved record of every request) at Cloudflare. - App updates: IP address, a random installation ID, platform and app version
Why: to deliver fixes and updated questions without you having to download the app again
Lawful basis: legitimate interests
How long: processed by Expo under Expo’s published retention rules; see Expo’s privacy policy. We don’t store it ourselves. - Buying DriveQuiz Pro: a random purchase ID, the receipt or purchase token from the store, what was bought and when, device type, operating system and app version
Why: to give you Pro, restore purchases and handle family sharing and refunds. On devices without a purchase: only to show the price and check whether you have Pro.
Lawful basis: contract and legitimate interests
How long: for as long as DriveQuiz Pro is offered, so that you can restore your purchase. Data about devices without a purchase is deleted at the latest 12 months after it was last used. - Sales reports and payouts from Apple and Google
Why: bookkeeping
Lawful basis: legal obligation
How long: 5 years after the end of the financial year, under the Norwegian Bookkeeping Act (bokføringsloven) section 13. - Crash reports from Apple and Google: what went wrong, device model, operating system and app version
Why: to find and fix faults
Lawful basis: legitimate interests
How long: kept in Apple’s and Google’s developer tools and deleted under their published retention rules; see their privacy policies. We don’t keep copies ourselves. - Emails and reports to us: your email address, what you write, and any game code or nickname you report
Why: to answer you and follow up reports about nicknames and mistakes in questions
Lawful basis: legitimate interests
How long: deleted at the latest 12 months after the matter is closed. - Test versions: the email address we invited you with, and feedback, screenshots and crash reports you send through TestFlight or Google Play
Why: to run the test and fix faults
Lawful basis: legitimate interests
How long: you are removed from the test list when the test ends, or earlier if you ask. Feedback is deleted at the latest 12 months after the test ends.
Legitimate interests refers to Article 6(1)(f) of the UK GDPR and the GDPR: we have an interest in delivering the game you ask for, in it being stable, fair and safe, and in making it better. Contract means the processing is needed to deliver what you have bought (Article 6(1)(b)). Legal obligation refers to Article 6(1)(c).
Because many people who use DriveQuiz are young, we have given particular weight to their interests and limited what we store. The statistics are linked to a random guest ID, not to a name or nickname. We look at them in aggregate, and at single rows only when we investigate faults or misuse. They are deleted after 90 days. You can object to processing based on legitimate interests; see Your rights.
A guest ID and a nickname are needed to play in a game. The nickname can be made up. If you don’t want us to process them, don’t join games.
We don’t ask for your name, email address, phone number, location, contacts or photos to play. The camera is only used when you scan a game’s QR code. The image is processed on your phone and is neither stored nor sent to us. On Android the scanning is done on the phone by Google’s ML Kit, and ML Kit can send technical data about usage and performance, such as the app name, device model and an installation ID, to Google. The image is not sent. You can also scan the code with your phone’s camera app.
When something is deleted from the database or from a game, it can remain in Cloudflare’s technical recovery history for up to 30 days before it is gone for good. We only use that history to put faults right.
When you play in a game
- Your nickname and points are shown to the others in the same game. They can see who has answered, but not what you answered until the answer is shown to everyone.
- The suggestion of which topics to practise more is worked out from your answers in the game and shown only to you. It is not an assessment of whether you will pass your test.
- Choose a nickname that doesn’t give away your full name, phone number or other private details.
- The person who starts the game can remove players from it.
What is stored on your phone
The guest ID and the nickname are stored in your phone’s secure storage: the keychain on iPhone and the Keystore on Android. What you practise on your own, such as which topics you have practised and your results, is also stored on the phone. We have no access to it.
On iPhone, a small copy of your practice progress can be stored in your iCloud account if iCloud is turned on. On Android, it can be included in Google’s backup of apps if you have turned that on. The copies are in your account with Apple or Google, and we have no access to them.
On Android, you delete what is on the phone by deleting the app. On iPhone, the guest ID and the nickname can stay in the keychain after the app is deleted, and they are used again if you install the app again. Once the key with the guest ID has expired, it can no longer be used with us. The copy in iCloud or with Google follows the settings and deletion rules of your account there.
Playing in the browser
If you play from a game link in your browser, the guest ID, the nickname and a key to get back into the current game are stored in your browser’s local storage for play.drivequiz.app, so that you can return to the game. This is needed to deliver the game you asked for. We use no cookies for this, and the game in the browser uses no analytics or advertising tools. You delete it by clearing the site data for play.drivequiz.app in your browser.
Buying DriveQuiz Pro
DriveQuiz Pro is bought in the App Store or on Google Play. Apple or Google is the seller, handles the payment and processes data about you as an independent controller under its own privacy policy. We never get your payment card.
We use RevenueCat to keep track of who has Pro. The app creates a random purchase ID, and RevenueCat gets it together with the receipt or purchase token from the store, what was bought and when, and the device type, operating system and app version. RevenueCat does not get your name or your nickname. When Pro can be bought in the app, the app contacts RevenueCat to show the price and check whether you have Pro.
Family sharing of Pro does not give parents or anyone else access to your practice results.
Who receives the data, and transfers abroad
We use these processors. They process the data only on our behalf and under an agreement with us:
- Cloudflare, Inc. (USA) runs the game server, the database and the websites. Games are created in Cloudflare’s EU jurisdiction, and the database with results and events is in the EU. Requests pass through Cloudflare’s nearest data centre, and Cloudflare may process data in the United States, for example for operations and security. According to Cloudflare’s data processing addendum, transfers rely on the EU–US Data Privacy Framework (for the UK, the UK Extension to it), and on the EU Standard Contractual Clauses (for the UK, with the UK’s International Data Transfer Addendum) for transfers the framework does not cover. See also Cloudflare’s privacy policy.
- RevenueCat, Inc. (USA) keeps track of purchases of DriveQuiz Pro. The data is stored in the United States, and the transfer relies on the EU Standard Contractual Clauses in RevenueCat’s data processing addendum. See also RevenueCat’s privacy policy.
- Expo (650 Industries, Inc., USA) delivers updates of the app. Expo states that it takes part in the EU–US Data Privacy Framework. See Expo’s privacy policy.
- The provider of our email service processes the emails you send to hello@drivequiz.app.
- On Android, Google’s ML Kit, which reads QR codes on the phone, sends technical data about usage and performance to Google. Google uses it for its own purposes, such as improving and securing ML Kit, under its own terms and privacy policy. We don’t get this data. The camera image is not sent.
Apple and Google are independent controllers for the App Store and Google Play, payment, family sharing, TestFlight and testing on Google Play, crash reports, and backups in iCloud and with Google. See Apple’s privacy policy and Google’s privacy policy.
Fri Vei AS is in Norway, in the EEA. We don’t share data with anyone else unless the law requires it. If you want to know which safeguard applies to a transfer of your data, or want a copy of it, write to hello@drivequiz.app.
Children and young people
DriveQuiz is made for learner drivers, most of them teenagers, who are practising for their theory or permit test, and for the adults who practise with them. It is not directed at children under 13. We don’t ask for age and don’t know how old the players are. That is why the app is built so that nobody needs an account, and we collect no contact details from anyone who plays.
None of the processing described here is based on consent. If we later want to ask for consent to something, children under 13 will need consent from a parent (in the UK, under Article 8 of the UK GDPR). We recommend that children under 13 use DriveQuiz together with an adult.
DriveQuiz has no chat, no contact list and no friend list. Nicknames are shown only to the players in the same game. The same protective settings apply to every player, and nothing can be switched on to share more. Parents can contact us at hello@drivequiz.app about their child’s data.
In the United States: DriveQuiz is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, such as a nickname in a game, email hello@drivequiz.app and we will delete it.
Advertising, sale and profiling
DriveQuiz shows no adverts. We don’t sell data and don’t share it for advertising. We don’t build profiles of you for advertising or marketing, and we make no automated decisions that have legal effects or similarly significant effects on you. The app works out points, places and awards in the game, and, for you alone, the share of right answers and which topics you can practise more. None of this is used outside the app.
Your rights
You have the right to access, correct and erase your data, to restrict its processing and to data portability, where the conditions in the law are met. You can also object to processing based on legitimate interests. Write to hello@drivequiz.app. We answer as quickly as we can, and within one month.
The data on our servers is linked to a random guest ID, not to your name. We never ask for a password or for the key stored on your phone. Before we give access or delete anything, we have to be reasonably sure the data is about you, and not about someone else in the same game. The game code, time and score can also be known to the others in the game, so that is not always enough. If we cannot work out which data is about you, we will tell you. Results are deleted automatically after 90 days in any case.
For purchases, we can delete the data about you at RevenueCat. The purchase itself stays with Apple or Google, and you can get Pro back with “Restore purchases”.
In the UK you can complain to the Information Commissioner’s Office (ICO). In the EEA you can complain to the data protection authority where you live; in Norway that is Datatilsynet. We would appreciate the chance to put things right first.
In the United States, in plain English: depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to have it corrected and to have it deleted. Email hello@drivequiz.app to ask; we will not treat you differently for asking. We do not sell or share personal information, and we do not use it for targeted advertising, so there is nothing to opt out of. The app and the game work the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.
Changes
We update this notice when the app or the processing changes. The date at the top shows the last change. For significant changes, we tell you in the app before the new processing starts. If a change needs consent, we ask for it separately. If we ever add sign-in, you will get separate information about what is stored, why and how to delete it.
Contact
Fri Vei AS, Kobbervegen 1A, 4820 Froland, Norway. Email: hello@drivequiz.app.