Privacy Policy

Effective date: 1 October 2026
Last updated: 11 October 2026

This Privacy Policy explains what personal data we process when you use the ClinQuiz: Medical Case Quiz mobile application, its home-screen widget and the website at clin-quiz.com (together, the "App"), why we process it, with whom we share it, and what rights you have. It should be read together with our Terms of Use.

Short version

ClinQuiz is a game with simulated medical cases. It is not a healthcare service and does not ask for or need any health data about you or anyone else.
We collect what we need to run your account and the game: email, display name, avatar, country, optional specialty, your game results, colleagues, feedback, and basic device data for sign-in and notifications.
Your display name, avatar, country and game statistics are visible to other players (leaderboards, colleagues, player profiles).
No advertising, no ad tracking, no sale of your data, no third-party analytics SDKs.
Payments are handled by Apple or Google — we never see your card details.
You can delete your account in the App at any time (Profile → Delete account).

1. Who is responsible (data controller)

Uroš Rajčić, a natural person (not a registered company), Nemanjina 61, 12000 Požarevac, Serbia ("we", "us"). The App is published on the app stores under the BeerCounter developer account.
Privacy contact: support@clin-quiz.com
EU representative under Art. 27 GDPR: none appointed. We are an individual established in Serbia with no establishment in the EU. You can send any GDPR request or complaint directly to the contact above, and you may also contact the supervisory authority in your EU country.
Data Protection Officer: none appointed.

2. Do not enter health or patient data

The App does not need, and you must not enter, any information about your own health or about any real patient or other identifiable person — not in your display name, feedback comments or anywhere else. The cases in the App are fictional. If such information is nevertheless submitted, we may delete it without notice, and we do not process it for any purpose other than removing it.

3. What data we process and why

Category	Examples	Purpose	Legal basis (GDPR / Serbian Law on Personal Data Protection)
Account data	Email address; password (stored only as a one-way hash); sign-in provider identifier if you use Sign in with Apple or Google Sign-In (with Apple you may choose a private relay email)	Creating and securing your account, sign-in, password reset	Performance of the contract (Terms of Use)
Profile data	Display name, chosen avatar, country, optional specialty/role, language and theme preference	Showing your profile, country leaderboards, personalising the App	Performance of the contract
Game and progress data	Cases started and completed, investigations opened, guesses, points, scores, streaks, per-branch accuracy, daily activity, tutorial status; ranked and friendly duel results, ratings and match timings; fair-play signals, such as how fast answers come, whether the App stayed open during a live duel (while a duel is on screen it sends a short signal every few seconds and reports when it goes to the background) and whether two players share a network or device	Running the game, scoring, matchmaking, statistics, leaderboards, preventing cheating	Performance of the contract; legitimate interest (fair play, improving the game)
Social data	Colleague requests and connections, player search, duel challenges between colleagues (who challenged whom, when, and the answer)	Colleagues, friendly duels and leaderboards features	Performance of the contract
Feedback	Case ratings (up/down), optional written comments	Improving and correcting case content	Legitimate interest; your voluntary choice to submit
Purchase data	Entitlement status (e.g. Pro, specialty packs), product, store, transaction and renewal identifiers, expiry dates, and the locale and currency code of the purchase — received from Apple/Google via RevenueCat. RevenueCat receives only your internal user ID and purchase history from us, never your email, name or card details	Granting and verifying paid access, handling billing events	Performance of the contract; legal obligations (accounting/tax)
Device and technical data	Platform (iOS/Android), app version, device language and time zone, push-notification token, a random installation identifier, widget installation identifier, user agent, IP address and request logs	Security, sign-in sessions, abuse and fraud prevention, rate limiting, fair matchmaking (we do not pair accounts on the same network or device), delivering notifications, keeping the App working	Legitimate interest (security and operation of the service); performance of the contract
Visit counts and campaign source	On the website: page views and taps on the store buttons, the campaign tags in the link you came from (UTM), the referring site's host, and a one-way hash of your IP address and browser that changes every day and is used only to count visitors (no cookies, no persistent identifier). In the App: the campaign tag of the link that opened it, saved on your account when you sign up	Understanding which channels bring players	Legitimate interest (measuring our own reach)
Notification preferences	Whether push notifications, alerts for colleague requests and duel challenges, and study reminders are on	Sending only the notifications you enabled	Your consent (OS permission + in-App switch), which you can withdraw at any time
Crash and error reports	Error messages, stack traces, device model and OS version, app version, your internal user ID (not your email or name)	Finding and fixing bugs	Legitimate interest (stability and security of the App)
Communications	Emails you send us, password-reset emails we send you	Support and account security	Performance of the contract; legitimate interest

We do not use your data for automated decision-making that produces legal or similarly significant effects on you. Game scoring is automated but has no such effect. The same goes for the automated fair-play checks in ranked duels: they can count a match as lost (for example when the App leaves the foreground during a live duel), pause matchmaking for a few minutes after repeatedly abandoned matches, or pause rating changes while unusual play is reviewed. They affect only the game. If you think one was wrong, contact us and we will review it.

4. What we do NOT do

We do not sell or rent your personal data, and we do not "share" it for cross-context behavioural advertising.
We do not show ads and do not use advertising identifiers (IDFA/AAID) or third-party tracking; we do not track you across other companies' apps or websites.
We do not use third-party analytics or marketing SDKs. The only measurement we do is our own cookieless visit and campaign counting described in Section 3.
We do not send your personal data to artificial-intelligence services. (Automated tools may be used to create or translate case content, which contains no user data.)

5. Who we share data with

We share personal data only as needed to run the App, with service providers acting on our instructions (processors) or as independent controllers where noted:

Recipient	Role	What
Hetzner Online GmbH (Nuremberg, Germany) Terms of use · Privacy policy	Processor	Servers and databases where App data, logs and self-hosted error reports are stored (EU)
Apple (App Store, Sign in with Apple, APNs) Terms of use · Privacy policy	Independent controller / processor	Sign-in, payments, push delivery on iOS
Google (Google Play, Google Sign-In, Firebase Cloud Messaging) Terms of use · Privacy policy	Independent controller / processor	Sign-in, payments, push delivery on Android
RevenueCat, Inc. (USA) Terms of use · Privacy policy	Processor	Managing purchase and subscription status (receives an app user ID and store purchase data)
Expo / 650 Industries, Inc. (USA) Terms of use · Privacy policy	Processor	Push-notification delivery (push token and notification content) and delivery of App updates
Other players	—	Your display name, avatar, country and game statistics (see Section 6)
Authorities, advisers, successors	—	If required by law or a valid legal request; to protect our rights, users or the public; to our legal and accounting advisers; or to a buyer or successor in a merger, acquisition or sale of assets, who will be bound by this Policy

Apple and Google process data under their own privacy policies when you use their stores, sign-in or payment services.

6. What other players can see

Your display name, avatar, country and game statistics (such as points, rank, streaks and solved cases) appear on leaderboards, in player search, in colleague lists and on your player profile, and are visible to other users. Your email address is never shown to other users. If you share a result card or link, whatever it contains is visible to its recipients. Please do not use your full legal name as a display name if you want to stay anonymous.

If you take part in ranked duels, your duel rating and rank, your season record and your recent results are shown on the ranked board and on your duel player card. When you challenge a colleague to a friendly duel, they see your display name and avatar with the challenge.

If you take part in ranked duels, your recorded duel runs (when and how you progressed through each case, and your result, never your guesses) may be shown to other players as a ghost opponent under your display name, avatar, country and rank, unless you turn this off in Profile.

7. International transfers

Our servers are located in the European Union (Nuremberg, Germany). Some providers (e.g. RevenueCat, Expo, Apple, Google) may process data in the USA or other countries outside Serbia and the EU/EEA. Where this happens we rely on appropriate safeguards, such as adequacy decisions (including the EU–US Data Privacy Framework where the provider is certified), the European Commission's Standard Contractual Clauses, or other mechanisms permitted by the GDPR and the Serbian Law on Personal Data Protection. You can request more information at support@clin-quiz.com.

8. How long we keep data

Account, profile, social and purchase-status data: while your account exists.
After you delete your account: we immediately remove your email, password, sign-in links, display name, avatar, specialty, device and push-token records and sign-in sessions, and revoke widget access. We also ask RevenueCat to erase your subscriber record (your user ID and purchase history held there), and we delete your country, the campaign tag saved at sign-up, the text of any feedback comments you wrote, and your colleague connections and requests. Game records (for example case attempts, points and thumbs ratings) are retained only in de-identified form: they stay attached to an internal ID that no longer carries a name, email, country or profile, so we can no longer tell who you are from them. We keep them for statistics and game balancing. Your ranked-duel runs are no longer replayed to other players as ghosts.
Duel matchmaking: the IP address of a request to find an opponent is kept with that search only until it ends (a match starts, you cancel it, or it lapses), and then deleted.
Website visit counts: kept as long as they are useful for statistics. They are not linked to any account, and the daily-changing hash cannot be traced back to you or matched across days.
Purchase and billing records: as long as required by accounting and tax law (in Serbia, generally up to 10 years), in the minimum form needed.
Application and server logs: application logs are rotated by size (about 30 MB per service, oldest discarded first), which in normal traffic is a few days. Web-server access logs (IP address, time, requested address and user agent) are kept for 14 days. Either may be kept longer if needed to investigate an incident.
Push-notification delivery records: 30 days.
Crash and error reports: up to 90 days, on our own server in Germany (we self-host error tracking; these reports are not sent to a third-party service).
Backups: deleted data may remain in backups for up to 30 days until they are rotated out.
Support emails: as long as needed to handle your request, and afterwards as long as legal claims may be brought.

9. Data stored on your device

The App stores some data locally on your device: sign-in tokens (in the device's secure storage/keychain), preferences such as language and theme, cached content and progress, and data for the home-screen widget. We disable Android cloud backup for App data so it does not leave your device's protected storage. Uninstalling the App removes this local data.

10. Notifications and permissions

The App asks for notification permission only when you turn notifications on. You can turn them off at any time in the App (Profile) or in your device settings. On iOS, Face ID may be used by the system to fill in saved passwords; we never receive biometric data.

11. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, hashed session and reset tokens, access controls and rate limiting. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential. If we become aware of a personal-data breach that is likely to result in a risk to you, we will notify you and the competent authority as required by law.

12. Your rights

Depending on where you live (including under the GDPR and the Serbian Law on Personal Data Protection), you have the right to:

access your personal data and receive a copy;
rectify inaccurate data (you can edit most profile data in the App);
erase your data (use Profile → Delete account, or contact us);
restrict or object to processing based on legitimate interest;
data portability for data you provided to us;
withdraw consent at any time (e.g. notifications), without affecting earlier processing;
lodge a complaint with a supervisory authority — in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs), or the authority in your EU country of residence.

California and other US state residents: you have the right to know, access, correct and delete your personal information and not to be discriminated against for exercising these rights. We do not sell or share personal information as defined by the CCPA/CPRA and do not use sensitive personal information to infer characteristics about you.

To exercise your rights, email support@clin-quiz.com from the address linked to your account. We may need to verify your identity. We will respond within the time required by law (normally within one month). We may refuse or limit requests where the law allows, for example if they are manifestly unfounded or excessive.

13. Children

The App is not directed to children and is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact support@clin-quiz.com and we will delete it.

14. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date shows when it last changed. If we make material changes, we will notify you in the App or by email before they take effect where required.

15. Language

This Policy may be available in several languages. If there is any conflict, the English version prevails, except that if you are a consumer in Serbia the Serbian version prevails, and except where other mandatory law requires otherwise.

16. Contact

Uroš Rajčić, Nemanjina 61, 12000 Požarevac, Serbia
Email: support@clin-quiz.com