Privacy Policy — Art Master: Art History Quiz

Summary

• There is no registration and no email/password account. When you first open the app, it signs you in anonymously with Firebase Authentication, which creates a random user ID (the “Firebase UID”). This ID does not contain your name or contact details, but it is a pseudonymous identifier and therefore personal data.
• We use Google Analytics for Firebase (usage statistics, with the Firebase UID set as the analytics user ID) and Firebase Crashlytics (crash reports). Both run from the first launch, without asking for consent, on the basis of our legitimate interests.
• We keep a small record in Cloud Firestore linked to your Firebase UID containing the date the record was created. If you used an older version of the app, this record may also still contain the quiz progress that older versions stored there.
• Your quiz progress, results and lives are now stored locally on your device.
• Free users see ads from Google AdMob. In regions where it is required, a consent form (Google User Messaging Platform) asks for your choices first; ads are personalized only if you consent. Outside those regions, the app currently requests only non-personalized ads. The Meta Audience Network SDK is also initialized once the consent flow allows ads (including when you decline personalized ads).
• Subscriptions are sold through Google Play Billing. We never receive your card details.
• Artwork images and information are loaded from public museum and Wikimedia servers, which see your IP address like any website you visit.
• An optional survey (Google Forms), our Facebook page and the privacy policy link open in your browser or the Facebook app, outside the app.
• We do not sell your personal data.

Third-party services we use

More information: Google Privacy Policy, How Google uses information from sites or apps that use its services, Privacy and security in Firebase, Meta Privacy Policy.

Information we collect

Pseudonymous user ID

On first launch the app signs in anonymously with Firebase Authentication. The resulting Firebase UID identifies your installation of the app, not you personally. We also set it as the user ID in Google Analytics so that usage statistics can be grouped per user. If you uninstall the app or clear its data, a new ID is normally created the next time you open it, and we cannot link the old ID to you unless you tell us what it was.

Firestore user record

The app creates a record in Cloud Firestore linked to your Firebase UID. The current version stores only the date on which the record was created. Older versions of the app also stored your quiz progress in this record. The current version reads that legacy progress once to move it to your device, but does not delete it from Firestore. If you used an older version and want this legacy data removed, you can ask us to delete it (see Your rights).

Usage statistics (Google Analytics)

The app sends in-app events, including:

• screens visited (for example, the home screen, categories and settings) and the category or quiz shown;
• quiz activity: quizzes started, interrupted and completed, and the number of correct answers out of the total questions;
• onboarding steps;
• subscription screen views and taps on the purchase button, including the plan selected;
• rewarded-ad outcomes (for example, a reward granted);
• taps on links such as the privacy policy, the survey or our Facebook page.

Google Analytics also collects standard information automatically, such as device model, operating system version, app version, language, session information and approximate location derived from your IP address.

Crash reports (Crashlytics)

If the app crashes, Crashlytics sends a report containing technical information such as the stack trace, device model, operating system and app version, and an installation identifier.

Support emails

The “Contact developer” option in Settings opens your email app with a message to us that already contains your Firebase UID, so we can find the data linked to it. We receive your email address, the UID and anything you write.

What we do not collect

The app does not ask for your name, email address (other than when you email us), precise location, contacts, photos or camera access, and it does not send push notifications.

Information stored on your device

The following is stored locally on your device and is not sent to us:

• quiz progress, results and performance (in a local database);
• your lives and a cached copy of your subscription status;
• app settings and your ad consent choices (stored by the consent SDK).

Backups. The app allows Android backup. Depending on your device settings, some app data (such as your quiz progress and settings) may be included in your Android/Google device backup or transferred when you move to a new device. This backup is managed by Google under your Google account settings, not by us. Lives and the cached subscription status are excluded from backup; your subscription is restored from Google Play instead.

Deleting the app or clearing its data in Android settings removes the locally stored data from your device.

How we use information

• to provide the app, including loading artworks, keeping your progress and restoring subscriptions;
• to understand how the app is used and improve its content, features and difficulty;
• to detect, diagnose and fix crashes and errors;
• to show ads to free users and measure them, and to respect your ad consent choices;
• to process and verify subscriptions;
• to answer your support requests and handle requests to exercise your rights;
• to comply with legal obligations.

We do not use your information for automated decision-making that produces legal or similarly significant effects on you.

Legal bases (GDPR)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR): providing the app and its features, anonymous sign-in, and processing subscriptions you buy.
• Legitimate interests (Art. 6(1)(f) GDPR): usage analytics (Google Analytics) and crash reporting (Crashlytics), which run from the first launch without a consent prompt; keeping the Firestore user record; showing non-personalized ads to fund the free version; initializing the Meta Audience Network SDK; answering support emails. Our interest is to keep the app working, improve it and fund it. You may object at any time (see Your rights).
• Consent (Art. 6(1)(a) GDPR): personalized advertising and, where required by law, storing or accessing information on your device for advertising purposes, as collected through the consent form.
• Legal obligation (Art. 6(1)(c) GDPR): for example, keeping records required by law.

Advertising

If you do not have an active subscription, the app shows ads provided by Google AdMob:

• interstitial ads, for example before the results screen or when you run out of lives;
• rewarded ads, which you can choose to watch, for example to replay a quiz or to restore lives (once per day).

Consent. At launch, the app uses the Google User Messaging Platform to determine whether a consent form is required in your region (for example, in the EEA and the UK) and, if so, shows it. The ad SDKs are initialized only after this consent flow allows ads. Where the form is shown, Google applies the choices you make in it; if you consent, ads may be personalized based on your advertising ID and other information. If you do not consent, and in regions where no consent form is required, the app requests non-personalized ads, which are based on context (such as the app itself and your approximate location) rather than your profile; Google may still use certain data for purposes such as frequency capping, fraud prevention and aggregated reporting.

Meta Audience Network. The app includes the Meta Audience Network SDK, which is initialized after the consent flow allows ads, including when you decline personalized ads and when you have a subscription. Once initialized, Meta may receive device and advertising identifiers, device and app information and ad-related data, and processes them under the Meta Privacy Policy.

Your choices. The app currently does not include a button to reopen the consent form. You can change your choices by clearing the app’s data or reinstalling the app, after which the consent form is shown again where required. You can also limit ad personalization at any time in your device settings (on Android: Settings > Google > Ads, or Settings > Privacy > Ads, where you can delete or reset your advertising ID or opt out of ads personalization). Subscribers do not see ads.

Subscriptions and purchases

The app offers an optional premium subscription (monthly or yearly; the yearly plan may include a free trial) sold through Google Play Billing. Premium removes ads and unlocks additional features such as premium categories, custom quizzes and unlimited lives.

Payments are processed by Google Play. We never receive your card or payment details. The app receives from Google Play information needed to confirm your purchase, such as a purchase token, the product purchased and the subscription status, and stores a cached copy of your subscription status on your device. Google processes your purchase under the Google Privacy Policy. You can manage or cancel your subscription in Google Play.

Who receives your information

We share information only as described in this policy:

• Google (Google LLC / Google Ireland Limited), for Firebase Authentication, Cloud Firestore, Google Analytics, Crashlytics, AdMob, the User Messaging Platform, Google Play Billing and Google Forms. For Firebase services, Google acts as our processor; for AdMob, Google Play and Google Forms, Google may act as an independent controller.
• Meta Platforms, for the Audience Network SDK, as an independent controller, and when you choose to open our Facebook page.
• TinyURL, which redirects the in-app privacy policy link and receives your IP address and standard request data when you tap it.
• Art Institute of Chicago, The Metropolitan Museum of Art, Cleveland Museum of Art and the Wikimedia Foundation, which receive your IP address and standard request data when the app loads artworks from them. We do not send them any identifier or personal information about you. They are independent third parties that process this data under their own privacy policies.
• Authorities or others, if required by law or needed to protect rights, safety or security.

We choose providers that commit to protecting personal data to a standard equivalent to this policy. We do not sell your personal data.

International transfers

Google and Meta process data in the United States and other countries outside the EEA. These transfers rely on the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission. The museums listed above and the Wikimedia Foundation are located in the United States; when your device loads content from their servers, it connects to them directly.

How long we keep information

• Firebase UID and Firestore user record (including any legacy quiz progress): kept until you ask us to delete them. We currently do not delete them automatically.
• Google Analytics data: event-level data is retained for the period set in our Google Analytics settings, at most 14 months; aggregated reports may be kept longer.
• Crashlytics crash reports: approximately 90 days.
• Support emails: up to 2 years after the conversation ends, unless a longer period is required to handle a legal claim.
• Data on your device: until you delete the app or clear its data.
• Advertising and purchase data held by Google or Meta: according to their own retention policies.

Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data deleted;
• restrict processing;
• data portability;
• object to processing based on legitimate interests, including analytics and crash reporting;
• withdraw consent at any time, without affecting processing carried out before withdrawal.

How to make a request. Because we do not know who you are, we need your Firebase UID to find your data. The easiest way is to use “Contact developer” in the app’s Settings: the email it prepares already contains your user ID. You can also email us (see Who we are and how to contact us) and include your user ID. Tell us what you want (for example, access to or deletion of your data, including legacy quiz progress stored in Firestore). We will respond within one month, which may be extended in accordance with the law. When we delete data linked to your Firebase UID, we also ask Google to delete the corresponding analytics data where their tools allow it.

If you have deleted the app or cleared its data, a new ID will have been created and we may not be able to find your old data unless you still have the old ID (for example, in an earlier support email).

Complaints. If you are unhappy with how we handle your data, please write to us first — we will try to sort it out. You also have the right to lodge a complaint with a data protection authority.

Children

The app is intended for a general audience aged 13 and over. It is not directed to children under 13, and we do not knowingly collect personal data from children under 13. In the EU, the age at which a person can consent to online services varies by country (from 13 to 16, depending on the country); where required, a parent or guardian must give consent. If you believe a child under 13 has used the app and we hold their data, please contact us with the user ID and we will delete it.

California and other US states

In the last 12 months, the app has collected the following categories of personal information: identifiers (Firebase UID, advertising ID, IP address), internet or other electronic network activity (in-app usage events, ad interactions), commercial information (subscription status), approximate geolocation derived from IP address, and inferences made by advertising partners where ads are personalized. The sources, purposes and recipients are described above.

We do not sell personal information for money. In the United States and other regions where no consent form is shown, the app currently requests only non-personalized ads from Google AdMob. However, the ad SDKs we use (including the Meta Audience Network SDK) receive device and advertising identifiers, and this may be considered “sharing” for cross-context behavioral advertising under California law (CPRA) or “targeted advertising” under other state laws. You can opt out by deleting or resetting your advertising ID or opting out of ads personalization in your device settings, and, where the consent form is shown, by not consenting to personalized ads.

Subject to applicable law, you may have the right to know, access, correct and delete your personal information and to opt out of sharing or targeted advertising. To make a request, email us as described in Your rights. We will not discriminate against you for exercising these rights. We do not knowingly sell or share personal information of consumers under 16.

Security

We do not operate our own servers; the app uses Google Firebase backend services. Data sent to Google and Meta services is encrypted in transit (HTTPS/TLS), and we limit access to our Firebase project to our own accounts. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

Changes to this policy

We may update this policy from time to time, for example when the app or the services it uses change. We will update the “Last updated” date at the top, and we will highlight material changes on this page and, where appropriate, in the app.

Who we are and how to contact us

Art Master: Art History Quiz is developed and published by Andrei Lukoits, an independent developer based in Vilnius, Lithuania. We are the data controller for the personal data described in this policy, except where a third-party provider acts as an independent controller (see Who receives your information).

• Email: lukoits.developer@gmail.com (our only contact channel)
• Website: https://art-memo.com/art-master-quiz/