Last updated: 3 October 2026
This privacy policy explains which personal data the app Geography Quiz Challenge (iOS and Android, “the App”) processes, for what purposes, and which rights you have. The App works without an account: you do not need to provide your name or email address to play.
1. Controller
InnoMobile GmbH
Schlehenweg 20
18069 Lambrechtshagen
Germany
Amtsgericht Rostock, HRB 15811
Managing Director: Paul Stelzer
Email: support@innomobile.de
2. Summary
- When you first start the App, our server creates an anonymous player ID. There is no login and no email address.
- Your answers, results and game progress are stored on our server in Germany so that rankings, duels, the passport and comparisons with other players work.
- Profile details (nickname, country, year of birth, gender, education) are optional. Year of birth, gender and education are never shown to other players.
- Purchases of the Club subscription are handled by Apple or Google; we use RevenueCat to manage the subscription status.
- Optional reward videos (to unlock hints) are delivered by Google AdMob. Personalised advertising only takes place with your consent. Club members do not see ads.
- To fix crashes and errors, we use the error reporting service Sentry.
3. Anonymous player ID
On first start, the App registers with our server. The server creates a random player ID and a secret token; only a hash of the token is stored on the server. The App sends the token with every request so that your results can be assigned to your player profile. You can find your player ID in the App under “Profile”.
With registration and with requests, the App transmits: app language, time zone offset (difference to UTC in minutes), app version and the version of the App interface. We need the time zone offset so that daily challenges, streaks and the daily reminder start at midnight in your local time.
Legal basis: Art. 6(1)(b) GDPR (providing the App in accordance with the terms of use).
4. Game data
When you play, we process and store in connection with your player ID:
- each game round: mode, category, day, language, the tasks shown, your answers (for map tasks the position of your pin), points, distance, hints used and the time you needed per answer
- results and records in the daily challenge, Sudden Death, country sprint, duels, Outline and Route of the day and theme runs
- progress: experience points, achievements, countries and places in your passport (“stamps”), already seen tasks
- repeat list: tasks and countries you answered incorrectly, so that the App can show them to you again
- duels you created (code, tasks)
Legal basis: Art. 6(1)(b) GDPR. Without this data, results, rankings and duels cannot work.
5. Optional profile details and comparison groups
In your profile you can optionally enter a nickname, your country, your year of birth, your gender and your education. All details are voluntary; the App works without them. We use country, age group, gender and education to compare your results with groups of other players (e.g. “better than 70 % of players in your age group”). For this, results are only added up in aggregated statistics per group, without assignment to individual players.
Legal basis: Art. 6(1)(a) GDPR (consent by entering the details). You can change or delete the details in your profile at any time; this does not affect statistics already aggregated anonymously.
6. What other players can see
- In rankings and duels, other players see your rank, score or streak, time, date and your country (flag), as well as whether you are a Club member.
- Your nickname is only shown to others if you are a Club member. Otherwise you appear anonymously.
- Country sprint rankings only contain Club members and can only be viewed by them.
- Year of birth, gender and education are never shown to other players.
7. Shared links
When you share a result, the text contains a link to geography-app.de/share/… . If someone opens such a link and the App is installed, the App reports the link type (e.g. “share/daily”) to our server. If this happens within 24 hours after the first start, we store the link type as the origin of the player profile. This shows us which kinds of shared content bring new players. The origin is also passed to RevenueCat (see section 9). On the website, the link redirects to the App Store or Google Play depending on the device; the store receives the link type as campaign name.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in understanding how the App is recommended).
8. Usage statistics for the Club offer
When the Club offer is shown, opened or closed, the App reports this event and where it was opened. On the server we only count these events per day; no entry per player is stored.
Legal basis: Art. 6(1)(f) GDPR (improving the App and the offer).
9. Purchases and Club subscription
In-app purchases are processed by Apple (App Store) or Google (Google Play). We do not receive your payment details. The privacy policies of Apple and Google apply.
To manage purchases we use RevenueCat (RevenueCat, Inc., USA). The App passes RevenueCat your player ID, the purchase receipts from Apple/Google, device and app information, where in the App a purchase was started and the origin from a shared link (section 7). RevenueCat informs our server about purchases, renewals and cancellations; we store these messages with your player ID to manage your Club status. More information: RevenueCat privacy policy.
Legal basis: Art. 6(1)(b) GDPR (fulfilling the purchase) and Art. 6(1)(c) GDPR (statutory retention obligations).
10. Advertising (Google AdMob)
You can voluntarily watch a reward video to unlock a hint. The advertising service is only started when you want to watch a video for the first time, and never for Club members. Ads are delivered by Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
The App asks for your consent via Google’s consent form; on iOS, Apple’s tracking request is also shown. Only with your consent may Google use the advertising ID (IDFA or Google Advertising ID) and other data to show personalised ads. Without consent, Google only shows non-personalised ads; even then Google processes data such as IP address, device information and interactions with the ad to deliver ads, prevent fraud and measure ads. You can change your choice in the device settings (tracking/advertising ID). More information: How Google uses data from apps, Google privacy policy.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent) for personalised ads, otherwise Art. 6(1)(f) GDPR (financing the free version).
11. Maps (OpenFreeMap)
The world map comes from our own server. When you zoom in further, the App loads map tiles, labels and symbols from the free service OpenFreeMap (openfreemap.org). Like any web request, this transmits your IP address and the requested map section to the operator. We do not pass any other data.
Legal basis: Art. 6(1)(f) GDPR (displaying detailed maps).
12. Error reports (Sentry)
If the App or our server encounters an error, an error report is sent to Sentry (Functional Software, Inc., USA). It contains the technical error description, the app version, platform, operating system and device type and, for server errors, the requested address. We do not send names, nicknames or profile details. We use the reports exclusively to find and fix errors. More information: Sentry privacy policy.
Legal basis: Art. 6(1)(f) GDPR (stable and secure operation of the App).
13. Server, hosting and log files
The App communicates with our server api.geography-app.de. Server and database run at IONOS SE (Elgendorfer Str. 57, 56410 Montabaur) in a data centre in Germany; IONOS processes the data on our behalf (Art. 28 GDPR). When the App accesses the server, the web server records technical access data (IP address, time, requested address, status code, app/browser identifier) in log files. These log files are rotated automatically and deleted after a short time. In addition, we use the IP address briefly in memory to limit excessive requests (rate limiting); it is not stored in our database.
Legal basis: Art. 6(1)(f) GDPR (security and operation of the server).
14. Daily reminder
If you switch on the reminder, the App schedules a local notification on your device. For this the App asks for permission to send notifications. The reminder is created on the device itself; we do not use a push service and do not store a push token. You can switch the reminder off in the App or in the device settings at any time.
15. Data on your device
The App stores your player ID, settings, statistics and game states locally on your device so that it also works offline and starts quickly. This data is deleted when you uninstall the App. The App also uses the device functions for sharing (system share dialog), store ratings (rating dialog of Apple/Google) and checking for updates (query of the store version).
16. Contact
If you contact us by email or via the support page, we process your message and your contact details to answer your request. Legal basis: Art. 6(1)(b) or (f) GDPR.
17. Storage period
- Player profile, game data and rankings: as long as the player profile exists. As there is no account, please contact us if you want us to delete your data (section 19).
- Origin from shared links: as long as the player profile exists.
- Purchase messages from RevenueCat: as long as needed to manage the subscription and to fulfil statutory retention obligations.
- Started game rounds without any answer: deleted after 24 hours.
- Aggregated statistics per comparison group do not contain any personal data and are kept permanently.
18. Recipients and transfers to third countries
We only pass data to the service providers named in this policy (IONOS, RevenueCat, Sentry, Apple, Google, OpenFreeMap). RevenueCat and Sentry are based in the USA. Transfers take place on the basis of the EU Standard Contractual Clauses or, where the provider is certified, the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023). We do not sell data.
19. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent at any time with effect for the future (Art. 7(3)).
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time for reasons arising from your particular situation.
To exercise your rights, write to support@innomobile.de. Please include your player ID (App → Profile) so that we can find your data; we will then delete the player profile and all game data assigned to it. Subscriptions must be cancelled separately in the App Store or Google Play.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Werderstraße 74a, 19055 Schwerin, Germany.
20. Changes
We adapt this privacy policy when the App or the legal situation changes. The current version is always available on this page.
