Privacy Policy

1. Information we collect

Account information. When you sign up as a host, we collect your email address (used for magic-link sign-in) and a unique account ID.

Content you create. Events, questions, answers, team names, optional team photos, and settings you enter.

Player information. When someone joins a game, we store the team name, chosen color, optional uploaded avatar image, and their answers for that event. Players do not create accounts.

Usage data. Basic technical data such as device/browser type, pages visited, and feature usage, and metered usage such as AI questions generated.

Payment data. If you buy a plan or credits, our payment processor collects and processes your payment details. We do not store full card numbers.

Cookies. We use essential cookies for authentication and to remember a player’s team on a device. We do not use them to build advertising profiles.

2. How we use information

• To provide, operate, and secure the Service (run events, score games, sign you in).
• To enforce plan limits and process payments and credits.
• To provide AI question generation (your prompt/theme is sent to our AI provider).
• To improve and troubleshoot the Service.
• To communicate with you about your account, security, and (if enabled) notifications.
• To comply with legal obligations.

We do not sell your personal information.

3. Service providers we share with

We share data with vendors that help us run the Service, only as needed to provide it:

• Hosting & database — to store your account, events, and content.
• AI provider — receives the theme/prompt you submit when you use AI generation.
• Payment processor — handles plan and credit purchases.
• Application hosting/CDN — serves the app.
• Embedded media (e.g. YouTube) — when a host adds media to a question; subject to that provider’s privacy practices.

We may also disclose information if required by law or to protect rights, safety, and the integrity of the Service.

4. Children's privacy

Host accounts are intended for adults. Some content packs are designed for children to play, but players join without creating accounts and we ask only for a team name, color, and an optional photo provided at the host’s discretion. Hosts running events for children are responsible for obtaining any parental consent required by law. If you believe a child has provided us personal information without appropriate consent, contact us and we will delete it.

5. Data retention

We keep your account and content while your account is active. Event data (teams, answers) is retained so hosts can review results. You can delete events from the admin, which removes their associated data. We retain limited records as needed for legal, security, and accounting purposes.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these, email us at the address below. You can also delete your events and content directly in the app.

7. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International users

We and our service providers may process and store information in countries other than your own. By using the Service you consent to such transfers, which we carry out with appropriate safeguards where required.

9. Changes to this Policy

We may update this Policy from time to time. We will update the “Last updated” date and, for material changes, take additional steps where appropriate. Continued use after changes take effect means you accept the updated Policy.

10. Contact

Questions or requests about your data? Email support@playsmartypants.com.
[Operator: insert your legal entity name and, if applicable, a data-protection contact/EU representative.]