1. Operator and contact
This policy explains which personal data the Quantum Be1 mobile app and the be1.games website process, why, and for how long it is kept.
The personal data operator is an individual, Askhat Utegulov.
For any question about your data, email askhat.u@gmail.com.
2. What data we process and why
Below are all categories of data the service processes, with the purpose for each of them.
- Account and sign-in
- Data: name, nickname, email, password (stored only as a hash). When you sign in with Google or Apple — the identifier of your account with that service, plus the email and name it passes to us. When you sign in with Telegram — your Telegram identifier and username (@username), and your phone number if you shared it with the bot. When you reset your password — your email and a one-time code (stored as a hash).
- Purposes: registration, signing in, email confirmation, password recovery.
- Game profile
- Data: points and rating, answer statistics, game results, favorites, interface language and theme, notification settings.
- Purposes: showing your progress and leaderboards, keeping your settings.
- Playing and communication
- Data: your answers and bets in in-game points, messages and reactions in game room and live game chats, live game registrations, room participation.
- Purposes: running games and showing their progress to other participants.
- Your questions and files
- Data: questions you create or import, and the images, audio and video attached to them.
- Purposes: running games with your questions.
- Device and push notifications
- Data: platform (Android or iOS), app version, device identifier, Firebase Cloud Messaging push token.
- Purposes: delivering game notifications if you allowed them.
- Technical data
- Data: IP address, app or browser details (user agent), time and address of requests, technical records of errors and sign-in events (these may contain your email).
- Purposes: protection against abuse and unauthorized access, finding and fixing errors, real-time features.
- Feedback
- Data: the text of your message, a contact for the reply (if you provided one), your account identifier if you were signed in.
- Purposes: replying to you and improving the service.
- Game journal
- Data: service records of how games went — which action, by which participant, and when.
- Purposes: resolving disputes, protecting fair play, fixing errors.
We process this data to perform the terms of use of the service and on the basis of the consent you give by creating an account and by turning on specific features (for example, push notifications).
The app contains no advertising SDKs and no analytics services. We do not sell data or use it for targeted advertising. We do not collect location, phone contacts, camera or microphone data; files from your device reach us only if you choose them for upload yourself. We do not collect payment data: bets in the game are made with in-game points.
3. Retention periods
A retention period is stated for each category. Where a category has no automatic deletion, this is said explicitly.
- Account and game profile
- For as long as the account exists. After you request account deletion — 7 calendar days, then automatic deletion (see section 4).
- An account that has not been used for a long time is not deleted automatically: its data is kept until the account is deleted or at the user's request.
- App sign-in tokens
- A token has no expiry. It is kept until you sign out on that device, until the account is deleted, or at the user's request.
- Push token
- Erased when you sign out (on all your devices) and deleted together with the account.
- Answers, messages, reactions, game results, statistics, favorites, your questions
- Kept until the account is deleted or at the user's request; deleted together with the account.
- Uploaded files
- A file that is no longer attached to any question or other record is deleted automatically within 8 days.
- Password reset codes
- A code is valid for 15 minutes. The service record of the request (email and code hash) is not deleted automatically, including on account deletion, and is kept until you ask us to delete it.
- Web sessions (IP address, user agent)
- Deleted automatically, about 2 hours after the last activity.
- Application log (errors, sign-in events)
- 14 days.
- Web server log (IP address, request address, user agent)
- 14 days.
- Game journal
- 30 days for online rooms, 365 days for live games. After account deletion the records are kept until this period ends.
- Feedback
- Not deleted automatically. On account deletion the link between your message and the account is removed, while the message text and the contact given in it are kept until you ask us to delete them.
- Backups
- Up to 12 months. Backups are stored encrypted; data is not removed from them selectively and disappears when the backup expires.
To delete data that is kept until your request, email askhat.u@gmail.com.
4. Account deletion
You can delete your account in the app: Profile screen → “Delete account” → “Delete”.
The account is deleted automatically 7 calendar days after you confirm. Until then you can cancel the deletion by emailing askhat.u@gmail.com.
Deleted together with the account: account and game profile data, statistics, your answers and game results, messages and reactions, live game registrations, favorites, your questions, rooms you created, notifications, your device data and push tokens, sign-in tokens.
Kept after account deletion: the text of your feedback messages and the contact given in them — no longer linked to the account; records of password reset requests; game journal, application log and web server log records, and backups — until their periods from section 3 end.
5. Who receives data
We do not sell personal data. Data is received only by the companies listed below and only to the extent needed for the service to work:
- netcup GmbH (Germany) — hosting: the service and the database run on its servers.
- Google: Firebase Cloud Messaging — push notification delivery (device push token and notification text); Firebase Remote Config — fetching app settings (technical app installation identifier); Google sign-in — if you chose this sign-in method; Google Drive — storing backups, which are encrypted before upload.
- Apple — Apple sign-in, if you chose this sign-in method, and push notification delivery to iOS devices.
- Telegram — Telegram sign-in, if you chose this sign-in method.
- Government authorities — only in cases expressly provided for by law.
Emails (email confirmation, password recovery) are sent from our own mail server, which is also located in Germany.
Google, Apple and Telegram process the data they receive under their own privacy policies.
Other players see your nickname, rating and your messages in games you take part in.
6. Storage location and cross-border transfer
The service servers, the database and the mail server are located in Germany (hosting provider netcup GmbH). This means that data of users from Russia and other countries is transferred abroad and stored in Germany, i.e. a cross-border transfer of personal data takes place.
In addition, Google, Apple and Telegram receive data to the extent described in section 5; these companies may process it in various countries.
Data is transferred over a secure connection (HTTPS), passwords are stored only as hashes, backups are encrypted.
7. Your rights
You can find out which data about you we keep, ask us to correct or delete it, restrict its processing, and withdraw your consent. To do so, email askhat.u@gmail.com.
You can turn off push notifications in the app settings or in your phone settings. Without some of the data, some features (sign-in, notifications) cannot work.
You also have the right to file a complaint with the authority responsible for protecting the rights of personal data subjects.
8. Changes to this policy
We may update this policy. The current text is always available on this page; the revision date is shown at the top.