Who Knows More?

Bu sayfa şimdilik yalnızca İngilizce.

Privacy policy

How Who Knows More? uses your data. Short version: we collect what the game needs to work, we count how the apps are used so we can improve them, we don't show ads, we don't track you across other companies' apps and websites, and we never sell your data.

Son güncelleme: 2 November 2026

1. Who we are

Who Knows More? (the apps for iPhone, iPad and Android, and the website whoknowsmore.app) is made by SELLTICKETS Ltd, Ras Al Khaimah, UAE, licence no. 07011340, Office A, Innovation City Business Centre, RAK Bank ROC Office, Ground Floor, Al Rifaa, Sheikh Mohammed Bin Zayed Road, Ras Al Khaimah, United Arab Emirates. We are the controller of your personal data. Contact for anything about privacy: [email protected].

This policy covers the apps and this website. The website sells nothing; question decks are bought only inside the apps, through the App Store or Google Play.

2. What we collect

  • Sign-in: when you sign in with Apple or Google, the account id they give us and, if they share it, your email address (Apple may give a private relay address). We never see your Apple or Google password.
  • Your profile: name, @handle, date of birth, gender, language, and your photo, drawn avatar or initials. Your date of birth is used to check you are 13 or older and to set privacy defaults; other players never see it.
  • Profile photo (optional): if you add one, the image you pick or take. The camera or photo library is used only when you choose to, and we remove location and other hidden details (EXIF) from the image.
  • Friends and settings: friends, friend requests, players you blocked, privacy, analytics and notification settings, your chosen skin.
  • Games: the games you play, the settings, your answers (including answers you type), timing, marks and scores. With each game we store your age band (for example 18–24), gender and language at the time, for statistics.
  • Reports you send about other players or content, and reports others send about you.
  • Purchases: when you buy a question deck, Apple or Google take the payment. We receive the store's receipt: the product, a transaction id, the date, and the store country and price. We never see your card or bank details.
  • Your device: an install id made by the app, platform, app version, system version, device model, language and, if you allow notifications, a push token.
  • Usage analytics (apps): see section 5.
  • Website visits: none by default. Only if you accept analytics cookies, the information in section 6.
  • Support emails: what you write to us and your email address.
  • Technical logs: our servers and Cloudflare see your IP address and basic request details when you connect. We use them only to run and protect the service and keep them for at most 30 days.

We do not collect your contacts, precise location, microphone, health, financial or browsing data. We do not use advertising SDKs, we don't collect advertising identifiers (IDFA or Android advertising ID), and we don't build profiles of you for marketing.

3. Why we use it, and our legal basis

  • To run the game and your account — sign-in, rooms, turns, scores, friends, invites, skins (contract: needed to give you the service you asked for).
  • To unlock and restore decks you bought and keep the records tax law requires (contract and legal obligation).
  • To keep the community safe — the word filter, automatic checks of profile photos, reports, moderation and blocking (legitimate interest, and our duty under app store rules).
  • To check age — the apps are for people aged 13 and over (legal obligation and our terms).
  • To send notifications you allowed — game invites, friend requests, updates (consent; turn them off any time in Settings or your phone's settings).
  • To understand and improve the apps and website — counts of games, players, languages, popular decks, crashes of the flow, and which screens help (consent where the law requires it, otherwise legitimate interest; see sections 5 and 6).
  • To answer you when you write to support (legitimate interest).

We don't make decisions about you that are based only on automated processing and have legal or similarly significant effects. The automatic photo check only decides whether a photo is shown; a person reviews disputes.

4. What other players see

Players in your games see your name, @handle, face (photo, avatar or initials) and your answers when they are revealed. Who can find you, send you friend requests, invite you and see your photo follows your privacy settings.

5. Analytics in the apps (Google Analytics for Firebase)

The apps use Google Analytics for Firebase, a service of Google, to count how they are used: for example app opens, screens viewed, games started and finished, the deck chosen, purchases started and completed, the app version, device type, operating system, language, and the country and city worked out from your connection. Google gives each app install a random analytics id. We do not send your name, email, @handle, photo, answers or date of birth to Google Analytics, and we do not collect advertising identifiers.

  • Your choice: where the law requires consent (for example in the UK, the EU and the EEA) analytics stays off until you agree. You can turn it on or off at any time in the app: Settings › Privacy › Share usage analytics.
  • Settings we use: Google signals, ad personalisation and advertising features are switched off, and Google does not use this data for ads. IP addresses are not stored by Google Analytics 4.
  • How long: analytics events are kept for 14 months, then deleted automatically.
  • Google processes this data for us under the Google Analytics and Firebase data processing terms. More: how Google uses data from apps and sites that use its services.

We don't use App Tracking Transparency because we do not track you across other companies' apps and websites.

6. Cookies and analytics on this website

By default this website sets no cookies and loads no analytics. If analytics is switched on for the site, a banner asks you first:

  • If you accept: we load Google Analytics 4, which sets the cookies _ga and _ga_<id> to tell visits apart. They last up to 13 months. We use them only to count visits, pages viewed, where visitors come from and which buttons (for example "Download on the App Store") are tapped. Google signals and advertising features are off, and IP addresses are not stored.
  • If you reject: nothing from Google is loaded and no analytics cookie is set.
  • Your choice is remembered in your browser's local storage (wkm.consent, not a cookie) for 6 months, then we ask again. You can change it at any time with Cookie settings at the bottom of every page.
  • Cloudflare, which protects the site, may set a strictly necessary security cookie (__cf_bm, 30 minutes) to tell people from bots. It is not used for analytics.

7. Teenagers (13 to 17) and children

If you are under 18, your account starts with the most private settings, in line with the UK Age Appropriate Design Code: you can't be found in search, only people you played with can send you friend requests, and your photo is shown only to friends. You can change these later. We don't use your data for nudges, profiling or advertising.

The apps are not meant for children under 13. People under 13 cannot create an account: if a date of birth under 13 is entered, no account is kept. If we learn that we hold data of a child under 13, we delete it. Parents can write to [email protected].

8. Who processes data for us

We share data only with these service providers, who handle it on our instructions and must protect it at least as well as we do:

  • Amazon Web Services — servers, database, photo storage and backups in Frankfurt, Germany; Amazon Rekognition checks new profile photos for nudity, violence and hate symbols.
  • Cloudflare — network, delivery of images and skins, protection against attacks, and forwarding of support email.
  • Apple — Sign in with Apple, App Store purchases, and push notifications (Apple Push Notification service).
  • Google — Google sign-in, Google Play purchases, push notifications (Firebase Cloud Messaging), Google Analytics for Firebase and Google Analytics 4.
  • Microsoft — the mailbox where support emails arrive.

We may also share data if the law requires it, to protect people's safety, or with a buyer if the business is sold (you would be told first). We never sell or rent personal data.

9. Where data goes

Our game servers and database are in the EU (Frankfurt, Germany). SELLTICKETS Ltd is based in the United Arab Emirates, and some providers above may process data in other countries, including the United States. Where data leaves the UK or the EEA, it is protected by the European Commission's standard contractual clauses, the UK International Data Transfer Agreement or addendum, or an adequacy decision.

10. How long we keep it

  • Account data: until you delete your account.
  • When you delete your account, your name, @handle, date of birth, gender, photo, sign-in details, devices, friends and settings are erased at once. Game records stay without your name, so other players' scores and statistics remain correct; they can no longer be linked to you.
  • Purchase records: as long as tax and accounting law requires (up to 7 years), without your profile.
  • App analytics: 14 months. Website analytics: 14 months; cookies at most 13 months.
  • Server logs: at most 30 days. Database backups: 30 days, then deleted.
  • Reports and moderation decisions: as long as needed to keep the service safe, at most 2 years.
  • Support emails: 2 years after the conversation ends.

11. Security

All connections are encrypted (HTTPS/TLS). Data is stored encrypted in AWS data centres. Only the people who run the service can reach it, through accounts protected by two-factor authentication, and every admin action is logged. Photos are served from unguessable addresses. No system is perfectly secure; if a breach puts you at risk, we tell you and the authorities as the law requires.

12. Your rights and choices

You can ask for a copy of your data, correct it, delete it, take it elsewhere, object to how we use it, ask us to limit it, and withdraw consent at any time (for example for analytics or notifications) without affecting what was done before. Much of this you can do in the app (Settings). Delete your account in the app (Settings › Account › Delete my account) or on the account deletion page. For anything else write to [email protected]; we answer within one month.

  • UK and EU: you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
  • California and other US states: we do not sell or share personal information for cross-context behavioural advertising, and we don't use sensitive data to infer things about you. You have the right to know, delete and correct, and we won't treat you differently for using these rights.
  • Türkiye: you can use your rights under the Personal Data Protection Law (KVKK, article 11) by writing to us.

13. Changes

If we change this policy in a way that matters, we tell you in the app before it applies and update the date above.