Privacy Policy

This privacy policy is applicable to the Quizzes! app for mobile devices, together with any related services operated by Marat Kairbekov (collectively, the «Application»). Marat Kairbekov is hereinafter referred to as the «Service Provider» and, where the GDPR applies, as the «Data Controller».

Data Controller Information

Marat Kairbekov acts as the Data Controller responsible for the processing of your personal data.

Name: Marat Kairbekov
Address: 6 Sanzhara Asfendiyarov Street, Astana, 010000, Kazakhstan
Email: quizzes@kannoapps.com

For data protection inquiries, to exercise your rights under the GDPR or other applicable laws, please contact the Data Controller using the contact information above.

What information does the Application obtain and how is it used?

The Application does not require registration and does not request your name, email address, or phone number. If you contact the Service Provider by email, the Service Provider receives your email address and the content of your message and uses them solely to respond to your inquiry.

Legal basis for processing your personal data

Where the GDPR applies, the Service Provider relies on one or more lawful bases to process your personal data, including:

  • Contract performance: processing necessary to provide the Application or fulfil a contract with you.
  • Consent: where you have given explicit consent to processing, including for personalized advertising, push notifications, or optional features. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
  • Legitimate interests: where processing is necessary for the Service Provider’s specific legitimate interests, such as maintaining network and information security, preventing fraud and abuse, or improving the Application’s core functionality through analytics, provided those interests are not overridden by your data protection rights or fundamental freedoms.
  • Legal obligation: to comply with laws or government requests.

Cookies and similar technologies

The Application does not use browser cookies. Third-party SDKs integrated into the Application may use similar technologies for analytics, advertising, and purchase verification, as described in their respective privacy policies.

What information does the Application collect automatically?

In addition, the Application may collect certain information automatically, including:

  • Device type and model;
  • Operating system and version, Application version;
  • Language and country specified in device settings;
  • IP address of the mobile device;
  • An anonymized identifier (UUID) generated by the Application on first launch and stored on the device. This identifier is used as a user identifier in Firebase Analytics, does not contain information that could identify you personally, and is not linked to identifiers assigned by other services;
  • Advertising identifier (IDFA on iOS, Google Advertising ID on Android) — passed only to advertising services listed in this Privacy Policy and only with your consent where required;
  • Usage events: quiz opens, level completions, ad impressions and clicks, in-app purchases;
  • Device push token (FCM registration token on Android, APNs token on iOS), if you have enabled notifications.

Full progress state (current level, score, unlocked items) and Application settings are stored locally on your device and are not transmitted to the Service Provider. Anonymized usage events are transmitted to Firebase Analytics for analysis and improvement of the Application.

Push Notifications

The Application sends notifications about new quizzes only if you have granted permission. Notifications are delivered via Firebase Cloud Messaging (on Android) and the Apple Push Notification Service (on iOS). Notification content is identical for all users and does not contain personal data; the device push token is used solely for delivery of notifications.

Does the Application collect precise real time location information of the device?

This Application does not gather precise information about the location of your mobile device. Approximate location (country or city) may be determined by third-party advertising services based on your IP address solely for the purpose of ad selection. Quiz availability is determined by the country specified in your device settings.

Do third parties see and/or have access to information obtained by the Application?

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

International Data Transfers

The Service Provider or its third-party service providers may transfer personal data outside the European Economic Area (EEA) and outside the Republic of Kazakhstan. Where such transfers occur, the Service Provider will use an appropriate transfer mechanism required by applicable law:

  • Adequacy decisions by the European Commission;
  • Standard Contractual Clauses (SCCs) approved by the European Commission;
  • Other safeguards or derogations recognized under GDPR Chapter V, including consent where legally permitted.

For users in the Republic of Kazakhstan, cross-border transfer of personal data is carried out in accordance with the Law of the Republic of Kazakhstan No. 94-V «On Personal Data and its Protection», including where the receiving state ensures adequate protection of personal data or where the data subject has given consent to such transfer.

Countries outside the EEA may not provide the same level of data protection as the EEA. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

The Service Provider may disclose User Provided and Automatically Collected Information:

  • as required by law, such as to comply with a subpoena, or similar legal process;
  • when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
  • with their trusted service providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.

Where the GDPR applies, the Service Provider enters into Data Processing Agreements (DPAs) with third-party service providers that process personal data on its behalf, as required by Article 28 of the GDPR. These DPAs impose the same data protection obligations on those service providers as described in this Privacy Policy.

What are my opt-out rights?

You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

To request deletion of your personal data, withdraw consent, or exercise any of your rights, contact the Service Provider at quizzes@kannoapps.com.

What is the data retention policy and how can you manage your information?

The Service Provider retains personal data based on its necessity for the stated purposes:

  • User Provided Data (email correspondence): retained for as long as necessary to respond to your inquiry, unless longer retention is required by law.
  • Automatically Collected Data (analytics events): retained in Firebase Analytics for up to 2 months from collection, after which only aggregated and anonymized data may be retained.
  • Purchase Data: retained for as long as necessary to verify and restore purchases, in accordance with the policies of RevenueCat and the relevant app store.
  • Aggregated and Anonymized Data: retained indefinitely as it no longer identifies you.
  • Data required for legal compliance: retained as long as required by applicable law.

You have the right to request deletion of your personal data at any time, except where retention is required by law. If you would like the Service Provider to delete User Provided Data that you have provided via the Application, please contact them at quizzes@kannoapps.com and they will respond within the time required by applicable law.

How does the Application address children’s privacy?

The Application is not intended for children under 13 years of age, or under 16 years of age where a higher age of digital consent is established under applicable law (including in the EEA). The Service Provider does not knowingly solicit data from children or market the Application to them.

Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. If the Service Provider discovers that a child has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider (quizzes@kannoapps.com) so that they can take the necessary actions.

How is your information kept secure?

The Service Provider is committed to safeguarding the confidentiality of your information. The Service Provider implements physical, electronic, and procedural safeguards to protect information it processes and maintains. Access is limited to the Service Provider and engaged contractors (hosting, analytics, advertising, purchase processing) who need to know that information to operate, develop, or improve the Application. However, no security system can prevent all potential security breaches.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, the Service Provider will notify the relevant supervisory authority within 72 hours of becoming aware of the breach (or within 1 business day for users in the Republic of Kazakhstan, as required by the Law of the Republic of Kazakhstan No. 94-V). Where the breach is likely to result in a high risk to your rights and freedoms, the Service Provider will also notify you without undue delay, providing information about the nature of the breach, the categories of data affected, and the measures taken or proposed to address the breach.

How will you be informed of changes to this Privacy Policy?

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at quizzes@kannoapps.com.

This privacy policy is effective as of 2026-10-19.

What are your GDPR data protection rights?

Under the GDPR, you have the following rights:

  • Right of Access: You can request access to your personal data.
  • Right to Rectification: You can request correction of inaccurate data.
  • Right to Erasure: You can request deletion of your personal data (the «right to be forgotten»).
  • Right to Restrict Processing: You can request that the Data Controller limits how they use your data.
  • Right to Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
  • Right to Object: You can object to processing based on legitimate interests. You have an absolute right to object to processing for direct marketing purposes at any time.
  • Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time by adjusting the relevant settings in the Application (advertising and push notification preferences) or in your device settings, or by contacting the Data Controller.
  • Rights Regarding Automated Decision-Making: You have rights related to automated decisions that affect you.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority. Contact details for each country’s Data Protection Authority can be found at: https://edpb.ec.europa.eu/about-edpb/members_en

If you are located in the United Kingdom, you may contact the Information Commissioner’s Office at https://ico.org.uk

Your rights under the Law of the Republic of Kazakhstan

If you are located in the Republic of Kazakhstan, the Law of the Republic of Kazakhstan No. 94-V «On Personal Data and its Protection» provides you with the following rights:

  • The right to know about the existence of your personal data and to receive information about who processes it and for what purposes;
  • The right to free access to your personal data, including the right to obtain a copy;
  • The right to demand correction of inaccurate or incomplete personal data;
  • The right to demand destruction of your personal data;
  • The right to withdraw consent to the collection, processing, and cross-border transfer of your personal data;
  • The right to object to processing carried out for the purposes of automated decision-making.

To exercise these rights, contact the Service Provider at quizzes@kannoapps.com. If you believe your rights have been violated, you may lodge a complaint with the authorized body of the Republic of Kazakhstan — the Committee for Information Security of the Ministry of Digital Development, Innovation and Aerospace Industry of the Republic of Kazakhstan.

What are your California privacy rights (CCPA/CPRA)?

If you are a resident of California, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

  • Right to Know: You can request disclosure of the categories and specific pieces of personal information the Service Provider has collected about you.
  • Right to Delete: You can request deletion of personal information the Service Provider has collected from you, subject to certain exceptions.
  • Right to Correct: You can request correction of inaccurate personal information.
  • Right to Opt-Out: You can opt out of the sale or sharing of your personal information for cross-context behavioral advertising. The Service Provider does not sell personal information.
  • Right to Limit Use of Sensitive Personal Information: You can limit the use of your sensitive personal information to essential purposes.
  • Right to Non-Discrimination: The Service Provider will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact the Service Provider at quizzes@kannoapps.com. The Service Provider will verify your request using the information you provide and respond within the timeframes required by law. You may designate an authorized agent to make a request on your behalf.

How do you give your consent?

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases, including contract performance, legitimate interests, or legal obligations, is carried out as described above.

How can you contact the Data Controller?

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at quizzes@kannoapps.com.

To request deletion of your personal data or to exercise any of your rights, contact the Service Provider using the details provided above. The Service Provider will respond within one month of receiving your request, extendable by up to two months where necessary due to the complexity or volume of requests, as permitted by applicable law.