Privacy
Privacy Policy
Effective 26 October 2026. The short version: no accounts, your games stay on your phone, and outside of crash reports we only collect data where you've allowed it or where no consent is needed.
This policy explains how personal data is handled when you use the Fact Or Else mobile app (the “App”) and this website. It applies to users worldwide. Questions? Email factorelsemgmt@gmail.com.
Who we are
The App and this website are run by OÜ Karmas Solutions, a company registered in Estonia (“we”, “us”). We are the data controller for the processing described here.
- Email: factorelsemgmt@gmail.com
In short
- There are no accounts. Player names and your own questions never leave your device.
- In the EEA, UK and Switzerland, analytics and personalised ads only run if you agree in Google's consent message. You can change your mind any time in Settings → Privacy choices.
- Crash reports help us fix bugs and contain technical data only.
- Payments are handled by Apple and Google. We never see your payment details.
- We don't sell your personal data.
What stays on your device
Player names, the questions you write in My Questions, your settings, an unfinished game and your subscription status are stored only on your device. We never receive them. They are deleted when you uninstall the App or clear its data.
What we collect and why
Your consent choice
When you first open the App, Google's consent tool (User Messaging Platform) checks whether a consent message applies where you are and, if so, asks for your choice. Your choice is stored on your device so the App can respect it.Legal basis: our legal obligation to obtain and record consent (GDPR Art. 6(1)(c)).
Usage analytics (Google Firebase Analytics)
To understand how the App is used and improve it, we use Firebase Analytics. In the EEA, UK and Switzerland it is switched off unless you agree to it in the consent message. It collects:
- screens viewed, sessions and engagement time, first opens and app updates;
- in-app purchase events (product, price and currency, never payment details) and ad impressions;
- an app-instance identifier and, where available and permitted, your device's advertising identifier;
- device model, operating system, app version, language, and approximate location (such as city or country) derived from your IP address.
It never includes player names or your questions. If you withdraw consent, collection stops and the analytics identifier on your device is deleted. Legal basis: your consent (GDPR Art. 6(1)(a)) where required; elsewhere, our legitimate interest in improving the App (Art. 6(1)(f)).
Crash reports (Google Firebase Crashlytics)
If the App crashes, Crashlytics sends us a report with the technical details: the error and stack trace, device model, operating-system version, app version, free memory and disk space, and a crash-installation identifier. Legal basis: our legitimate interest in keeping the App stable and secure (Art. 6(1)(f)). You can object at any time by emailing us.
Advertising (Google AdMob)
If you haven't bought Premium, the App shows ads from Google AdMob at the start and end of a game. To serve, measure and limit ads and prevent fraud, Google receives data such as your advertising identifier, IP address, approximate location, device information and your interactions with ads. Google acts as an independent controller for this data.
- Personalised ads are only shown with your consent where it's required. Otherwise Google shows non-personalised or limited ads. Change your choice in Settings → Privacy choices.
- On iPhone, ads use your device's advertising identifier only if you allow it in Apple's App Tracking Transparency prompt. You can change this in Settings → Privacy & Security → Tracking.
- On Android, you can reset or delete your advertising ID in your device settings (usually Settings → Privacy → Ads).
- Learn more in How Google uses information from sites or apps that use its services, and manage Google ad personalisation in My Ad Center.
Legal basis: your consent (Art. 6(1)(a)) where required; elsewhere, our legitimate interest in funding the free version of the App through advertising (Art. 6(1)(f)).
Purchases
Premium subscriptions are sold and billed by Apple (App Store) or Google (Google Play), who act as independent controllers under their own privacy policies. We never see your payment details. The store tells the App which product you bought and whether your subscription is active, and the App checks this on your device to unlock Premium. Legal basis: performing our contract with you (Art. 6(1)(b)).
Support emails
If you email us, we receive your email address and whatever you write, and use them only to help you. Our mailbox is a Gmail account, so Google also processes these messages under the Google Privacy Policy.Legal basis: our legitimate interest in answering you, or performing our contract with you if it's about Premium.
This website
This website uses no cookies, analytics or trackers, and loads no third-party content. Our host, Google Firebase Hosting, processes standard server logs (such as IP address, browser type and the page requested) to deliver and protect the site. Legal basis: our legitimate interest in running a secure website.
Who receives data
- Google (Firebase Analytics, Crashlytics and Hosting) processes data on our behalf as our processor, under Google's data processing terms. See Privacy and Security in Firebase.
- Google (AdMob and Gmail) receives advertising data and support emails as an independent controller. See theGoogle Privacy Policy.
- Apple and Google handle purchases as independent controllers. See theApple Privacy Policy and theGoogle Privacy Policy.
- Authorities, where we are legally required to disclose data.
We only work with providers that are contractually bound to protect personal data at least as well as described in this policy. We don't sell your personal data.
International transfers
Google may process data in the United States and other countries outside the EEA. Google LLC is certified under the EU-US Data Privacy Framework (and its UK and Swiss extensions), and Google's data processing terms include the European Commission's Standard Contractual Clauses as a further safeguard.
How long we keep data
- On your device: until you delete it, clear the App's data or uninstall the App.
- Analytics: event data linked to identifiers is deleted automatically after no more than 14 months.
- Crash reports: deleted automatically after 90 days.
- Advertising data: kept by Google under its own policies (how Google retains data).
- Support emails: deleted within 24 months after the conversation ends, unless we need them for a legal claim.
- Website server logs: kept by Firebase Hosting for a short period for security and operations.
Uninstalling the App deletes the data on your device, but not data that was already sent to Google; that is deleted on the schedule above.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy of it (portability);
- have it corrected or deleted, or its use restricted;
- object to processing based on our legitimate interests, including crash reporting;
- withdraw your consent at any time in Settings → Privacy choices, without affecting processing that happened before;
- complain to a data protection authority. Ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), but you can also contact the authority where you live.
To use your rights, email factorelsemgmt@gmail.com. We reply within one month. Because the App has no accounts, we normally can't link analytics, crash or advertising data to you as a person, so we may be unable to find it. Withdrawing consent and deleting the on-device identifier is the most effective way to stop collection, and existing data expires as described above.
Automated decisions
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Where you consent to personalised ads, Google uses your data to choose which ads to show.
Security
We collect as little as possible: there are no accounts, and game data stays on your device. Data sent by the App and this website is encrypted in transit (HTTPS/TLS), and access to our Firebase and AdMob accounts is limited to the people who run the App.
Children
Fact Or Else is not directed at children, and we don't knowingly collect personal data from children. If you believe a child has provided personal data through the App, contact us and we will delete it.
US privacy notices
We don't sell personal information for money. Under some US state laws, personalised advertising can count as “sharing” or “targeted advertising”. You can opt out in Settings → Privacy choices where that option is shown, or by limiting your advertising ID in your device settings. Neither the App nor this website responds to “Do Not Track” browser signals; the website doesn't track you either way.
Changes to this policy
We may update this policy as the App changes. We'll publish the new version on this page and update the effective date above. If a change requires your consent, the App will ask for it again.
Contact
OÜ Karmas Solutions, Estonia. Email factorelsemgmt@gmail.com.