Privacy Policy
Effective date: October 7, 2026
This policy explains how 中村海道 ("we"), the operator of TriviaSpot (the "App"), handles your information. The App is designed so that your latitude and longitude are never sent to our server or to the AI.
1. Information that stays on your phone (we never receive it)
| Information | Purpose | Where / how long |
|---|---|---|
| Precise location (latitude and longitude) | Detecting that you stayed in one place for about 5 minutes, looking up the place name, and, when Premium "See new trivia" looks for trivia about a place saved in your history, checking which country or region you are in now | On the phone only; overwritten as you move |
| History of trivia you received (including an approximate spot, rounded to ~100 m) | History screen; avoiding repeats at the same place | On the phone; up to 180 days / 300 items; you can delete items one by one or all at once. Trivia that was taken down (after reports or by us) is marked "withdrawn": the App receives a list (trivia IDs only) and compares it on the phone (we are never told which trivia you have) |
| Record of trivia you deleted from the history (trivia ID, a place code made from the place name, time of the notification; no position or text) | Avoiding repeats | On the phone; up to 180 days / 200 items; removed by "Delete all history" and "Delete all data on this phone" |
| Activity log (kind of outcome and time, e.g. why no notification was sent; no location or place names) | Shown under Settings → Diagnostics to help with support questions | On the phone; latest 50 entries |
| "Places without notifications" (including an approximate spot, rounded to ~100 m) | Stopping notifications at those places | On the phone; you can remove them any time |
| Settings (quiet hours, language, etc.) | Running the App | On the phone |
Turning coordinates into place names uses the geocoding feature built into iOS / Android (provided by Apple or Google). When Premium "See new trivia" looks for trivia about a place saved in your history, the App also uses it to look up the country or region your phone is in now. For this, your coordinates are sent to Apple or Google and handled under their privacy policies.
On Android this information is excluded from Google Drive backups. On iPhone, if you use iCloud Backup, data on the phone may be included in the backup.
2. Information sent to our server
| Information | Purpose | Retention |
|---|---|---|
| Place names (country, region, city, district, landmark — never street numbers or postcodes; we also try to leave out names that look like residential buildings, but this is not perfect. Marking your home as a place without notifications stops automatic lookups there) and display language, together with the IDs of trivia you already received at that place (the newest 50 at most, including trivia you deleted from your history and trivia waiting to be shown as a notification) | Returning trivia for that place (leaving out trivia you already received, so that you do not get the same trivia there again); checking that the place's country or region is one our AI provider (Anthropic) supports | Place names and trivia are stored as a shared "trivia collection per place" and are never linked to who asked. We do not keep records that combine them with your identifier. The IDs of trivia you already received are not stored |
| Only when Premium "See new trivia" looks for trivia about a place saved in your history: the two-letter code of the country or region your phone is in now (an international ISO code, e.g. JP for Japan). It is looked up with the phone's geocoding feature; coordinates are never sent | A place saved in your history may not be where you are now, so this checks that where you are now is also a country or region our AI provider (Anthropic) supports | Not stored and not logged (we only count refused requests per day, without the country or region) |
| A random ID created by the App (install ID) and an authentication token | Preventing abuse; daily usage limits (also to show in the App how many more times new trivia can be created for you today); checking subscription status | Converted on the server into a keyed hash that third parties cannot reverse. Usage counters are deleted within about 3 days, the mark showing that an install was registered recently after about 3 days, and subscription check results after 30 days. After "Delete all data on this phone", a hash of the deleted ID is kept for about 3 days so that the same ID cannot be reused (it is not linked to anything else). Hashes of IDs we blocked for abuse are kept while the block lasts |
| IP address (sent as part of any internet connection) | Preventing abuse such as mass requests | Converted into a per-day keyed hash that third parties cannot reverse, used only for counting; deleted within about 3 days. The IP address itself is not stored |
| "Report a mistake" contents (type, optional comment, app version) | Improving quality; hiding inappropriate content | Stored with a separate keyed hash per trivia that third parties cannot reverse (to allow one vote per install) and deleted after 180 days. A separate keyed hash per place is kept for 30 days so that one install alone cannot hide the trivia of a place again and again. These hashes cannot be linked to other records, so "Delete all data on this phone" does not remove them; they are deleted automatically when their period ends |
| Subscription status (Premium or not) | Providing Premium features | The check result is kept for up to 30 days |
In countries and regions that our AI provider (Anthropic) does not support, we neither create trivia nor send trivia that was already created, as Anthropic's terms require (the history on your phone can still be viewed). This is decided by the place's country or region and, when "See new trivia" looks for trivia about a place saved in your history, also by the country or region you are in now. Both are judged by the two-letter country or region code. Anthropic excludes some regions of Ukraine, which the code cannot tell apart from the rest of the country, so we neither create nor send trivia anywhere in Ukraine.
For disaster recovery, our database keeps restorable past states for up to 30 days, so deleted data may remain in that recovery storage for up to 30 days.
We do not send your precise coordinates, name, e-mail address, phone number, advertising ID or contacts to our server. There are no accounts.
3. Third-party services
We use the following services only to provide the App. We do not use them for advertising and we never sell your information.
| Recipient | Data | Purpose | Location |
|---|---|---|---|
| Anthropic, PBC (AI "Claude") | Place names, language, and the titles of trivia already written for that place and for the same city, so that the same story is not repeated (they do not say who received them; never your identifier) | Writing the trivia text (the AI writes from the place names alone, using its own knowledge). Anthropic may retain inputs for a limited period to monitor misuse, under its own terms | USA |
| Cloudflare, Inc. | The data in section 2 (transport and storage) | Running our server | USA and others |
| RevenueCat, Inc. | Install ID, purchase information, device type, OS version, language, country and IP address (sent by its SDK). Only after you agree to the Terms | Managing subscriptions. Kept under RevenueCat's own retention rules. "Delete all data on this phone" does not delete RevenueCat's records, so please contact us below if you want them deleted | USA |
| Expo (650 Industries, Inc.) | A random per-device ID, app and OS version, IP address | Delivering app updates (bug fixes) | USA |
| Apple Inc. / Google LLC | Purchase and payment data; latitude and longitude (as an OS feature) | Payments; turning coordinates into place names (including the current country or region when "See new trivia" looks for trivia about a place saved in your history) | USA |
Your information may therefore be processed outside your country. We send data to Anthropic through its commercial API, under terms that do not allow it to be used to train AI models.
4. Why we use information
- To create, show and notify you of trivia
- To create and deliver trivia only in countries and regions our AI provider (Anthropic) supports, as its terms require
- To prevent abuse and keep the service stable
- To answer questions and reports and improve quality
- To provide subscriptions (Premium)
If you e-mail us, we use your e-mail address and message only to reply, and delete them one year after the matter is closed (e-mail is stored with the e-mail service we use, such as Gmail, which may be a US company).
5. Security
All communication is encrypted (HTTPS). Identifiers stored on the server are converted into keyed hashes that third parties cannot reverse, and data is deleted automatically when its retention period ends. Our own server logs do not contain place names, country or region codes, identifiers or IP addresses, and the hosting provider's per-request logs are turned off.
6. Your choices and rights
- "Delete all data on this phone" in Settings removes everything stored by the App on your phone and also deletes your subscription check result and usage counters on our server. As described in section 2, the hash of the deleted ID (about 3 days) and the hashes attached to reports (until their period ends) remain. RevenueCat's purchase records also remain; contact us below if you want them deleted (we find them with, for example, the store order number). Uninstalling the App removes the data on your phone (on iPhone the install ID may stay in the secure storage, but it is deleted the first time a reinstalled App starts).
- You can revoke location and notification access at any time in your phone's settings.
- Server-side data is kept only for the periods in section 2, in a form that does not identify you. To request access, correction, deletion or restriction, e-mail us below. There is no fee. The "Support ID" shown in the App's Settings (the first 8 characters of the install ID) helps us tell devices apart and find purchase records at RevenueCat. Because the server keeps the ID only as a hash, the Support ID cannot be used to find records on our server. Because we do not store server data in an identifiable form, in most cases there is no information we can disclose.
If you live in the EEA, the UK, California or similar jurisdictions
- We process information to provide the service you asked for (performance of a contract) and for abuse prevention and service improvement (legitimate interests).
- You have rights of access, rectification, erasure, restriction, objection and data portability, and you may complain to your local data protection authority.
- We do not sell or "share" personal information (for cross-context behavioural advertising).
7. People under 18
The App is intended for people aged 18 and over. People under 18 may not use the App. We do not knowingly collect information from people under 18. The App only asks you to confirm that you are 18 or older when you start; it does not ask for your age or date of birth, and your answer is not sent to us.
If someone under 18 has been using the App, "Delete all data on this phone" (section 6) deletes the information on the phone and, on our server, the subscription check result and the usage counts. Parents and guardians can contact us at the address in section 10. We also accept requests to delete the purchase records at RevenueCat in the same way as in section 6.
8. Transfer of the business
If the business of the App is transferred to a third party or the operator changes, we may transfer information to the new operator within the scope of this policy. We will announce this in the App or on this page.
9. Changes
We will announce changes to this policy in the App or on this page. For important changes, we may ask for your agreement again in the App.
10. Contact
Operator: 中村海道 (individual developer)
E-mail: support@triviaspot.app
The App is run by one individual. We do our best to answer every inquiry, but replies may take some time.