Privacy Policy

Last updated: July 18, 2026

1. Who We Are

Quix ("we", "us") is a real-time interactive quiz platform operated by Uptake Agency ("data controller"). For any privacy-related question or request, contact us at [email protected].

2. Data We Collect

  • Account data: name, e-mail address and a securely hashed password. If you sign in with Google, we receive your Google account name, e-mail address and profile picture.
  • Content you create: quizzes, questions, answer options and related media you upload.
  • Participant data: participants join with a nickname and a game PIN — no account is required. We process nicknames, submitted answers and scores for the duration of the session and its results.
  • Technical data: IP address, browser and device information, and session cookies/tokens strictly required to keep you signed in and to secure the service.

We collect this data directly from you (registration and quiz forms), automatically (server and security logs, session cookies/tokens) and from Google when you choose Google Sign-In.

We do not use advertising or tracking cookies, and we do not sell personal data.

3. Why We Process Your Data

  • Providing and operating the service (accounts, real-time quiz sessions, leaderboards, analytics for quiz hosts)
  • Security, fraud and abuse prevention
  • Communicating with you about your account or the service
  • Complying with legal obligations

4. Legal Bases

We process personal data under Article 5 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, Article 6 of the EU General Data Protection Regulation ("GDPR"): performance of a contract, our legitimate interests (service security and improvement), your consent where required, and compliance with legal obligations.

5. Third Parties

  • Google Sign-In: if you choose to sign in with Google, authentication is handled by Google under its own privacy policy.
  • Infrastructure providers: your data is stored on our servers in Türkiye (database, cache and real-time messaging infrastructure) and processed there solely to provide the service.

We share data with third parties only as necessary to provide the service or where required by law.

6. Google Sign-In Data

If you sign in with Google, we request only the basic identity scopes (openid, e-mail and profile) and receive your name, e-mail address and profile picture. We use this data solely to authenticate you, create or link your Quix account and display your name and avatar in the product — never for advertising, profiling or unrelated analytics. This data is stored with your account on our servers in Türkiye for as long as your account exists and is deleted within 30 days of a deletion request. We do not share Google user data with third parties except the infrastructure providers described above. You can revoke Quix's access at any time from your Google account permissions and request deletion of your data by e-mailing us. If we ever intend to use Google user data for a new purpose, we will inform you and ask for your consent first.

7. Data Retention

We keep account data for as long as your account is active. When you delete your account or request deletion, we remove your personal data within 30 days, except where a longer retention period is required by law. Session-level participant data (nicknames, answers) is retained as part of quiz results for the quiz host.

8. Your Rights

Under Article 11 of the KVKK and Articles 15–21 of the GDPR you may request access to, correction of, deletion of, or restriction of the processing of your personal data, object to processing, and request data portability. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, e-mail us at [email protected]. We respond within the statutory time limits. If you believe your request was not resolved, you may lodge a complaint with the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) or, if you are in the EU/EEA, with your local supervisory authority.

9. Children

Quix accounts are not directed to children under 13. We do not knowingly collect personal data from children under 13 for account creation. Participants do not create an account or provide an e-mail address; we process their nickname, answers, scores and related technical data as described in this policy.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page shows the latest revision. Material changes will be announced on this page.