Legal & Privacy
Your privacy,
clearly stated.
This policy explains what data ThinkFest collects, why we collect it, how we use it, and the choices you have. We believe knowing the rules of the game shouldn't require a law degree.
What is personal data?
How we define itPersonal data is any information that relates to an identified or identifiable individual. This includes your name, your device's unique identifiers, your gameplay statistics, and any other data that could reasonably be used to identify you — whether on its own or combined with other data.
Data we have aggregated and anonymised so that no individual can be identified is not personal data for the purposes of this policy.
Your privacy rights
What you can ask us to doRegardless of where you live, you have the right to know, access, correct, transfer, restrict the processing of, and delete your personal data. Exercising these rights will never result in you receiving a worse experience in the app.
Access
Request a copy of the personal data we hold about you.
Correction
Ask us to fix inaccurate or incomplete data.
Deletion
Request that we erase your account and associated data.
Portability
Receive your data in a structured, machine-readable format.
To make a request, email us at adeyemi.pj@gmail.com. We will respond within 30 days. Where we cannot fulfil a request — for example, where deletion would conflict with a legal obligation — we will explain why.
Data we collect from you
What we gather and whenWe strive to collect only the data we genuinely need to provide the game and improve it. Below is what we may collect depending on how you use the app.
Account & profile data
- Username or display name — shown to other players in multiplayer sessions
- Email address — used to create and recover your account
- Profile avatar — if you choose to set one
Gameplay data
- Quiz answers and scores — to generate your results, leaderboard position, and history
- Category preferences — Music, Sport & Leisure, Film & TV, Arts & Literature, etc. — to personalise suggested categories
- Session timestamps — when you start and finish a game
- Multiplayer room codes — to connect you with other players in created or joined games
Device & technical data
- Device model and iOS version — for troubleshooting and compatibility
- App version — to confirm you are on a supported release
- Crash and diagnostic logs — to identify and fix bugs
- IP address — collected transiently for fraud prevention and network communication
Data from other sources
Third parties who may share data with usWe may receive data about you from the following sources:
- Sign in with Apple — if you choose this login method, Apple shares a verified email address (or a private relay address) with us
- Analytics providers — aggregated, non-identifiable usage metrics only
- Crash reporting services — anonymised stack traces and device context to help us fix bugs
We do not purchase data from data brokers or receive personal data from advertisers.
How we use your data
Our purposes and legal basesWe use your data only when we have a valid legal basis to do so: your consent, the necessity to fulfil our contract with you (providing the game), a legitimate interest (improving and securing the app), or a legal obligation.
- Powering the game — displaying questions, recording answers, calculating scores, and showing results screens
- Multiplayer functionality — matching you with a room you created or joined, synchronising question delivery, and sharing scores between participants
- Personalisation — remembering which categories you play most to surface them prominently (opt-out available in Settings)
- App improvement — analysing anonymised crash and usage data to prioritise fixes and new features
- Security and fraud prevention — detecting abuse, cheating, and unauthorised access
- Communications — sending you emails about your account, password resets, and material changes to this policy
How we share your data
Who else sees itWe do not sell your personal data. We do not share it with third parties for their own marketing purposes. We may share data in the following limited circumstances:
- Service providers — companies that help us operate the app (cloud hosting, analytics, crash reporting) under strict data-processing agreements that prohibit them from using your data for any other purpose
- Other players — your username and score are visible to other participants in the same multiplayer room; your full email is never shared with other players
- Legal requirements — where disclosure is required by law, a court order, or to protect the safety of users or the public
- Business transfer — in the event of a merger, acquisition, or sale of assets, your data would transfer to the new entity under the same privacy protections; we will notify you in advance
Security
How we protect your informationWe use administrative, technical, and physical safeguards appropriate to the nature and sensitivity of the data we hold. These include:
- Encryption of data in transit (TLS 1.2 or higher) and at rest
- Passwords stored as salted hashes — never in plain text
- Access to production systems limited to authorised personnel only
- Regular security reviews and dependency audits
No system is perfectly secure. If you believe your account has been compromised, please contact us immediately at security@letsplay.app.
Children
Players under 13Let's Play is a family-friendly trivia game. We define a child as anyone under the age of 13, or the minimum age required by applicable law in your jurisdiction.
We do not knowingly collect personal data from children without verifiable parental consent. If you are a parent and believe your child has created an account without your permission, please email adeyemi.pj@gmail.com and we will delete the account and associated data promptly.
Multiplayer & online features
What's shared in a live gameWhen you Create Multiplayer or Join Multiplayer, the app connects to our real-time game server. The following data is exchanged during an active session:
- Your display name — visible to all players in the room
- Your answers and score — broadcast to all participants at the end of each question
- Room code — a short-lived identifier; expired codes cannot be used to retrieve historic session data
Session data on our servers is purged within 24 hours of the game ending. We do not retain a record of who played with whom beyond the anonymised aggregate statistics used to improve question difficulty.
Data retention
How long we keep your dataWe retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Specific retention periods:
Account data
Kept until you delete your account, then purged within 30 days.
Gameplay history
Retained for 12 months to power your personal stats screen.
Crash logs
Automatically deleted after 90 days.
Multiplayer sessions
Purged within 24 hours of session end.
International transfers
Where your data is processedOur servers are currently located in Canada and the United States. If you are based in the European Economic Area, the United Kingdom, or another jurisdiction with data-transfer restrictions, your data may be transferred internationally.
We rely on Standard Contractual Clauses and other approved transfer mechanisms to ensure your data receives the same level of protection regardless of where it is processed. By using Let's Play, you acknowledge this international processing.
Contact us
Questions, requests, complaintsIf you have any questions about this policy, wish to exercise your privacy rights, or want to make a complaint, our privacy team is ready to help. We will acknowledge your message within 48 hours and provide a substantive response within 30 days.
When there is a material change to this policy, we will post a notice at least one week before it takes effect and notify you by email if we have your address on file.
Get in touch
adeyemi.pj@gmail.com
We reply within 30 days.