Privacy Policy

1. Who we are

Gapfyre is made by Sam Munro, an individual developer based in the United Kingdom. For the purposes of the UK GDPR and the Data Protection Act 2018, Sam Munro is the data controller for the limited personal data described in this policy.

You can reach us at support@gapfyre.com about anything in this document.

2. What this policy covers

It covers one app:

• GapfyreSWE — a software engineering quiz app (com.gapfyre.swe) on the App Store and Google Play.

This site publishes the app's policy, terms and support pages; the app itself is not distributed here. Where something is true of only one platform, this policy says so.

3. What stays on your device

The app keeps a record of how you are getting on so it can show your progress and your statistics. That record includes:

• the questions you have been asked and the answers you selected, including which were right and wrong;
• your quiz rounds and when they took place;
• your settings — the topics you have hidden, your preferred AI assistant, your saved filters, your YouTube search keyword, and a cached flag recording whether your Pro subscription is currently active.

All of this is written to your device's own storage and stays there. On iOS it is held in the app's UserDefaults, and on Android in SharedPreferences. It is not synchronised, not uploaded, not backed up to any service of ours, and not readable by us. We operate no server that receives it and no account it could be attached to.

Deleting the app removes this data from your device. That does not need to involve us, because there is nothing on our side to delete.

4. What is collected, and by whom

Two parts of the app are not self-contained. Buying and restoring the Pro subscription is one, and is covered here; the banner advert on the free tier is the other, and has a section to itself below (§5).

The subscription runs through RevenueCat. RevenueCat is a subscription infrastructure provider that sits in front of Apple's and Google's billing systems so that the app does not need a server of its own to verify a purchase.

If — and only if — you purchase Pro, start a free trial, or tap Restore purchases, RevenueCat processes the following on our behalf:

We do not pass RevenueCat your name, your email address, or any identifier of our own — the app calls RevenueCat without supplying a user ID, so RevenueCat generates an anonymous one. We never see your payment card, bank details or billing address: those go to Apple or Google, who process the payment. We receive only an answer to the question "does this device have an active Pro subscription?"

RevenueCat acts as our data processor. Its own privacy policy is at revenuecat.com/privacy.

How this appears in the app stores

For transparency, this is what the two stores are told, and it matches the tables in this section and the next:

• Apple App Privacy: Purchases — collected for App Functionality and Analytics, not linked to your identity, and not used for tracking. Identifiers (Device ID) and Usage Data (Advertising Data) — collected for Third-Party Advertising, not linked to your identity, and not used for tracking.
• Google Play Data safety: Purchase history — collected, not shared, required for the app to function, encrypted in transit, used for App functionality and Analytics. Device or other IDs — collected and shared with Google for Advertising, optional in the sense that buying Pro ends it, encrypted in transit.

"Not used for tracking" is a specific claim under Apple's definition, and it is why the app shows no App Tracking Transparency prompt: nothing collected here is joined to data from other companies' apps or websites to target advertising or measure it, and the app never reads the advertising identifier (IDFA). See §5.

"Analytics" appears against purchases because RevenueCat aggregates subscription figures — how many subscriptions are active, how many renewed — into a dashboard we can see. Those are counts, not a profile of you, and they are the only numbers we ever receive about anyone's use of the app. We receive nothing at all about which questions you answer, on either tier.

5. Advertising on the free tier

The free tier of the app shows one banner advert, at the bottom of the screen. It is served by Google AdMob. Three things about it are worth stating precisely, because each is a decision rather than a default:

• The adverts are non-personalised. Every request the app makes is flagged as non-personalised, which means Google selects the advert from general, contextual signals — roughly, your coarse location and the fact that this is an educational app — rather than from a profile of your interests or your history across other apps and sites. We do not send Google anything about you, because we have nothing to send: your quiz history and your answers never leave your device, and no interest, topic or score is attached to an ad request.
• The app does not use the advertising identifier. On iOS that means no IDFA and, consequently, no App Tracking Transparency prompt — Apple requires that prompt before an app may access the identifier or track you across other companies' apps, and this app does neither. On Android, Google's SDK may still use a resettable device identifier for the limited purposes below; you can reset or delete it in Settings → Google → Ads.
• It is not shown everywhere. There is no advert while you are answering a question, none on the first-run welcome screen, and none on the screen where Pro is bought. There are none anywhere in the web version, which carries no advertising code at all.

Serving an advert at all involves Google receiving some data, and it would be dishonest to list a banner without saying what:

For this processing Google acts as an independent controller rather than as our processor, so its own terms govern what it does with the data. Google's privacy policy is at policies.google.com/privacy, and how Google uses data from apps that use its services is described at policies.google.com/technologies/partner-sites.

How to turn adverts off: buy Pro. The banner disappears as soon as the purchase is confirmed, on that device and on any other device where you restore the purchase, and no further ad requests are made. That is the only relationship between the two — nothing about your subscription is sent to Google, and nothing about the adverts is sent to RevenueCat.

6. What we do not do

These are worth stating plainly, because they are all things a quiz app could easily do and this one does not:

• No accounts. There is no sign-in, no registration, no profile and no password. You never tell us who you are.
• No analytics. The app contains no analytics SDK. We do not know which questions you answered, which topics you use, how long you spend in the app, or whether you opened it at all. The advertising SDK is not one: it is never told what you are studying, and what it reports back to us is a count of impressions and taps, not a record of anyone's session.
• No personalised advertising. There is one banner advert on the free tier and it is non-personalised: it is not chosen from a profile of you, and buying Pro removes it. See §5. There is no advertising of any kind in the web version, and no interstitial, full-screen, video or rewarded advert anywhere — one banner is the whole of it.
• No tracking. We do not track you across apps or websites, and we do not allow the advert to. The app does not use the Advertising Identifier (IDFA), and for that reason you will never see an App Tracking Transparency prompt.
• No user-generated content. There is nothing to post, comment on or upload, so there is nothing of yours for others to see.
• No selling or sharing. We do not sell personal data, and we do not share it for cross-context behavioural advertising. Non-personalised advertising is, by definition, not cross-context behavioural advertising: the advert is chosen without a profile built from your activity elsewhere.
• No location, contacts, camera, microphone, photos or health data. The app requests none of these permissions.
• No calls home. Apart from RevenueCat and the AdMob banner, the app makes no network requests of its own — and neither of those two carries anything about your studying. The questions ship inside the app, so it works fully offline; on the free tier an offline device simply shows no advert.

7. Links that leave the app

When you are reviewing your answers, the app offers two links that open in your device's browser. Both are things you choose to tap; neither happens on its own, and nothing is sent anywhere unless you tap.

Find videos on YouTube

This opens a YouTube search built from the keywords of the question you were reviewing, plus any search keyword you have set in Settings. YouTube receives that search term and, as with any website you visit, your IP address and whatever your browser and your own YouTube account send it. Your quiz history is not included.

Dig deeper

This opens a new conversation at the AI assistant you chose, pre-filled with the context of the question you were looking at, so you can ask about it properly. The text sent contains up to 6,000 characters and includes: the question, any code shown with it, every answer option, which option you selected, whether you got it right, and the explanation the app gave.

It goes to whichever assistant you picked — Claude (claude.ai), ChatGPT (chatgpt.com), Copilot (copilot.microsoft.com), Grok (grok.com) or Gemini (gemini.google.com). It is carried in the URL that opens in your browser, so it is subject to that provider's own privacy policy and terms, not ours, from the moment the link opens. If you are signed in to that provider, the conversation will appear in your account there. We have no involvement in and no visibility of what happens next.

8. Android backup

On Android, the app allows Android's own backup system (android:allowBackup="true"). If you have device backup enabled in your Google account settings, Android may include the app's stored settings and quiz history in your device backup and restore them when you set up a new device. That backup is between you, your device and Google under Google's privacy policy — we do not operate it, cannot access it and are not sent a copy. You can turn device backup off in your Android settings.

iOS behaves comparably: app data may be included in your iCloud or encrypted local backup according to your own iOS backup settings.

9. Legal bases for processing

Where the UK GDPR or EU GDPR applies to you, our legal bases are:

• Performance of a contract (Art. 6(1)(b)) — processing your purchase and subscription status through RevenueCat so that we can provide the Pro features you paid for, and restore them when you ask.
• Legitimate interests (Art. 6(1)(f)) — keeping the subscription service secure and working, and understanding aggregate subscription counts in order to run the app sustainably. We consider this proportionate given that the data is pseudonymous and no profile of you is built.
• Legitimate interests (Art. 6(1)(f)) — funding a free tier by showing one non-personalised advert, and preventing click fraud against it. Personalised advertising would require your consent, which is why the app does not do it: the adverts are contextual, no profile is built, and there is a paid way to remove them entirely. Where local law nonetheless requires consent for the device identifier used to cap repetition and detect fraud, that identifier is one you can reset or delete in your device settings at any time.

Data that never leaves your device is not processed by us at all, so no legal basis is required for it.

10. How long data is kept

• On your device: for as long as you keep the app installed. Deleting the app deletes it. There is no copy elsewhere.
• At RevenueCat: subscription records are retained for as long as needed to operate and support the subscription and to meet tax, accounting and legal obligations, in line with RevenueCat's retention practices. You can ask us to delete your RevenueCat record — see below.
• At Apple and Google: your purchase and billing records are kept by them under their own policies, and we cannot delete them. The same is true of the ad-serving data described in §5: Google holds it as an independent controller under its own retention practices, we hold no copy of it, and we cannot delete it on your behalf. Resetting your advertising identifier in your device settings breaks the link to anything held against the old one.

11. Your rights, and how to use them

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to complain to a regulator. Because we hold almost nothing about you, most of these resolve quickly:

• To delete everything on your device: delete the app. You do not need to ask us, and we cannot do it for you.
• To access or delete your subscription record: email support@gapfyre.com. We can look up and delete your RevenueCat customer record. To find it we will need something that identifies the purchase — usually the store's order or transaction ID from your App Store or Google Play receipt. Deleting the record does not cancel your subscription or refund it: cancel through your store account, as described on our support page.
• To stop the "Dig deeper" links transmitting anything: set your AI assistant to None in Settings.
• To stop the adverts: buy Pro, which removes them outright. Short of that, you can reset or delete your advertising identifier in your device settings — Settings → Privacy & Security → Tracking on iOS, where this app is already absent because it never asks; Settings → Google → Ads on Android, which also offers "opt out of Ads personalisation", though the adverts here are non-personalised in any case.

We will respond within one month. There is no charge. If you are in the UK you may complain to the Information Commissioner's Office; if you are in the EEA, to your national supervisory authority.

If you are a California resident: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use personal information for cross-context behavioural advertising. We will not discriminate against you for exercising any privacy right.

12. Children's privacy

The app is educational and general-audience, but it is not directed at children under 13, and we do not knowingly collect personal data from children. There are no accounts, no profiles and no way for a user to contact another user, so there is little for a child to disclose. If you believe a child has provided personal data through a purchase made on your device, contact support@gapfyre.com and we will delete the associated record.

The app is not directed at children, so it is not declared as a child-directed app to Google's ad services and adverts are not tagged for users under the age of consent. Ad content is restricted to Google's General audience rating, the most restrictive of the four, so what appears in the banner is material suitable for a general audience. If you are setting the app up for a child, buying Pro removes advertising entirely.

Note that the "Dig deeper" links open third-party AI assistants, most of which set their own minimum age. If you are setting the app up for a child, choosing None as the AI assistant in Settings removes those links.

13. Changes to this policy

If this policy changes we will update the date at the top of this page. If a change is significant — if the app begins collecting something it does not collect today — we will say so clearly here and, where the change requires it, in the app before it takes effect. Previous versions are available on request.

What changed on 9 September 2026

The free tier began showing a banner advert, and this is the change that section promises to state plainly rather than leave to a moved date. Before this, nothing about your device reached anyone except when you bought a subscription. Now, on the free tier, Google AdMob receives what §5 sets out in full — a resettable device identifier, general device information, coarse location from your IP address, and whether an advert was shown or tapped — for as long as the app is showing you adverts.

Three earlier statements in this policy stopped being true and have been rewritten rather than quietly dropped: that there was no advertising and no advertising SDK, and that RevenueCat was the only thing the app talked to over a network. What has not changed is everything about your studying: your quiz history, your answers and your settings still never leave your device, no advert is chosen from anything you have answered, and there is still no analytics of any kind. The adverts are non-personalised, the app still reads no advertising identifier and still shows no App Tracking Transparency prompt, and buying Pro removes advertising entirely.

14. Contact

Questions, requests or complaints about privacy: support@gapfyre.com.