1. Overview
Sabio, Inc. ("Sabio", "we", "us") operates the Sabio mobile and web application (the "Service"). This Privacy Policy explains what personal data we collect from you, how we use and share it, and the rights you have over it.
We are committed to a light-touch data model: we collect the minimum needed to run a great daily-trivia experience, and we don't sell your personal information. Ever.
By using Sabio, you agree to the terms of this Privacy Policy. If you disagree, please don't use the Service.
2. Data we collect
2.1 Information you provide
- Account details — email address, display name, and password (stored hashed, never in plain text).
- Profile information — optional bio, city, country (2-letter code), age group, gender identity. All fields are optional and can be removed at any time.
- Content you submit — sponsored questions, banner campaigns, and reports you file about other content.
- Communications — messages you send to our support team.
2.2 Information generated by your use
- Quiz activity — which questions you answered, whether correctly, response time, category, and dates played. Used to calculate streaks, coins, leaderboards, and to prevent repeat delivery of questions you've already seen.
- Coin transactions — a per-user ledger of coins earned and spent, with references to the associated action (quiz, referral, campaign, redemption).
- Device information — operating system version, app version, device model, and a limited set of diagnostic identifiers for stability and analytics.
- Push notification token — if you grant notification permission, we store an Expo push token to deliver quiz reminders and streak warnings.
2.3 Information from third parties
- Payment processors — for coin-pack purchases, we receive a transaction confirmation from Apple, Google, or Stripe. We do not receive or store your full payment card details.
- Referrals — when you sign up using a referral code, we associate your account with the referring user to award coins.
3. How we use your data
We use your personal data to:
- Operate the Service — deliver your daily quiz, calculate streaks, credit coins, run leaderboards, and process referrals.
- Authenticate you and secure your account.
- Send transactional communications (streak reminders, campaign approval notifications, receipts).
- Enforce our Terms of Service and community guidelines (including moderating sponsored questions, banners, and user reports).
- Improve the Service — through aggregated usage analytics and stability metrics.
- Comply with legal obligations, resolve disputes, and prevent fraud or abuse.
We do not use your quiz activity or profile data for cross-app advertising, and we don't build a shadow profile of you for third-party advertisers.
4. Who we share with
We share personal data only with:
- Service providers that operate our infrastructure (hosting: Xano; push delivery: Expo; email: our transactional email vendor; analytics). They act as processors under contract and only use data on our behalf.
- Payment processors — Apple App Store, Google Play, and Stripe — for coin-pack purchases.
- Advertising partners on the Sabio platform — when your public display name and country appear on our leaderboards, they may be visible to other users, including any user who has purchased a banner campaign. We never share private profile fields.
- Legal / safety recipients — where required by law, court order, or to protect the rights, property, or safety of Sabio, our users, or others.
- Successors in a business transfer — if we merge, are acquired, or sell substantially all our assets, your data may be transferred, subject to this Privacy Policy.
We do not sell your personal information for money, and we do not disclose your personal information for cross-context behavioral advertising.
5. Retention
We retain personal data for as long as your account is active. When you delete your account (Settings → Delete my account), we:
- Anonymize your quiz activity and leaderboard entries within 24 hours.
- Remove your email, display name, and profile fields within 7 days.
- Preserve minimum audit records (coin ledger, transaction receipts) for up to 24 months for legal, tax, and fraud-prevention purposes.
6. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct or update inaccurate information.
- Delete your personal data (see Section 5).
- Object to or restrict certain processing.
- Data portability — receive a copy of your data in a machine-readable format.
- Withdraw consent for optional processing (e.g., push notifications).
- Lodge a complaint with a supervisory authority.
You can exercise most of these rights directly from the app under Settings, or by emailing privacy@sabio.app. We respond within 30 days.
7. Security
We use industry-standard measures to protect your data — encryption in transit (TLS 1.2+), encryption at rest, hashed passwords (bcrypt), rate limiting on authentication endpoints, and admin access controls. No system is perfectly secure; if we detect a breach affecting your data, we will notify you and the appropriate regulators without undue delay.
8. Children
Sabio is intended for users 13 and older (16+ in the European Economic Area). We do not knowingly collect data from children under this age. If you believe a child has provided us data, please email privacy@sabio.app and we will promptly delete it.
9. International data transfers
Sabio operates globally. Your data may be transferred to, stored in, or processed in countries other than your own, including the United States and India, whose data-protection laws may differ from yours. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app before they take effect. The "Last updated" date at the top of this page always reflects the most recent revision.
11. Contact
Questions about this policy or your data?
Email: privacy@sabio.app
Postal address: Sabio, Inc. — address on file with our registered agent.
This Privacy Policy is provided as an operating template. For jurisdiction-specific requirements (e.g., GDPR, CCPA, LGPD, DPDP Act), consult qualified legal counsel before publishing publicly.