Privacy Policy

This policy covers the Gapfyre SWE mobile app and the web version at gapfyre.com.

Effective 7 September 2026. Last updated 7 September 2026.

In short. There are no accounts and no sign-in. Your quiz history, your answers and your settings are stored on your own device and are never sent to us — we have no server that could receive them, and the app makes no network requests of its own. The only personal data collected about you is what our payments provider, RevenueCat, needs to run a subscription, and that only applies if you buy Pro. There is no advertising, no analytics and no tracking of any kind.

1. Who we are

Gapfyre is made by Sam Munro, an individual developer based in the United Kingdom. For the purposes of the UK GDPR and the Data Protection Act 2018, Sam Munro is the data controller for the limited personal data described in this policy.

You can reach us at support@gapfyre.com about anything in this document.

2. What this policy covers

It covers one app and one website, which share the same code and the same approach to data:

Gapfyre SWE — a software engineering quiz app (com.gapfyre.swe) on the App Store and Google Play.
The web version of the app, hosted at gapfyre.com.

Where something is true of only one platform, this policy says so.

3. What stays on your device

The app keeps a record of how you are getting on so it can show your progress and your statistics. That record includes:

the questions you have been asked and the answers you selected, including which were right and wrong;
your quiz rounds and when they took place;
your settings — the topics you have hidden, your preferred AI assistant, your saved filters, your YouTube search keyword, and a cached flag recording whether your Pro subscription is currently active.

All of this is written to your device's own storage and stays there. On iOS it is held in the app's UserDefaults; on Android in SharedPreferences; in the web version in your browser's localStorage. It is not synchronised, not uploaded, not backed up to any service of ours, and not readable by us. We operate no server that receives it and no account it could be attached to.

Deleting the app removes this data from your device. In the web version, clearing your browser's site data for gapfyre.com does the same. Neither action needs to involve us, because there is nothing on our side to delete.

4. What is collected, and by whom

One part of the app is not self-contained: buying and restoring the Pro subscription. That runs through RevenueCat, a subscription infrastructure provider that sits in front of Apple's and Google's billing systems so that the app does not need a server of its own to verify a purchase.

If — and only if — you purchase Pro, start a free trial, or tap Restore purchases, RevenueCat processes the following on our behalf:

Data	Why	Linked to you?
Purchase history — your subscription status, renewal and expiry dates, and the store's receipt or purchase token	To determine whether your device currently holds the Pro entitlement, and to restore it on a new device	Not linked to a name, email or account, because there is no account. See below.
A pseudonymous app user ID generated by RevenueCat	To tie a purchase to the installation that made it, so it can be restored	Randomly generated by RevenueCat. We never set it to anything that identifies you.
Basic device and technical information — device type, operating system version, app version, country and currency, and the IP address inherent in making a network request	To deliver the correct store products and prices, and to operate the service securely	Associated with the pseudonymous ID above, not with your identity

We do not pass RevenueCat your name, your email address, or any identifier of our own — the app calls RevenueCat without supplying a user ID, so RevenueCat generates an anonymous one. We never see your payment card, bank details or billing address: those go to Apple or Google, who process the payment. We receive only an answer to the question "does this device have an active Pro subscription?"

RevenueCat acts as our data processor. Its own privacy policy is at revenuecat.com/privacy.

How this appears in the app stores

For transparency, this is what the two stores are told, and it matches the table above:

Apple App Privacy: Purchases — collected for App Functionality and Analytics, not linked to your identity, and not used for tracking.
Google Play Data safety: Purchase history — collected, not shared, required for the app to function, encrypted in transit, used for App functionality and Analytics.

"Analytics" appears there because RevenueCat aggregates subscription figures — how many subscriptions are active, how many renewed — into a dashboard we can see. Those are counts, not a profile of you, and they are the only numbers we ever receive about anyone's use of the app.

5. What we do not do

These are worth stating plainly, because they are all things a quiz app could easily do and this one does not:

No accounts. There is no sign-in, no registration, no profile and no password. You never tell us who you are.
No analytics. The app contains no analytics SDK. We do not know which questions you answered, which topics you use, how long you spend in the app, or whether you opened it at all.
No advertising. There are no ads and no advertising SDK.
No tracking. We do not track you across apps or websites. The app does not use the Advertising Identifier (IDFA), and for that reason you will never see an App Tracking Transparency prompt.
No user-generated content. There is nothing to post, comment on or upload, so there is nothing of yours for others to see.
No selling or sharing. We do not sell personal data, and we do not share it for cross-context behavioural advertising.
No location, contacts, camera, microphone, photos or health data. The app requests none of these permissions.
No calls home. Apart from RevenueCat, the app makes no network requests of its own. The questions ship inside the app, so it works fully offline.

6. Links that leave the app

When you are reviewing your answers, the app offers two links that open in your device's browser. Both are things you choose to tap; neither happens on its own, and nothing is sent anywhere unless you tap.

Find videos on YouTube

This opens a YouTube search built from the keywords of the question you were reviewing, plus any search keyword you have set in Settings. YouTube receives that search term and, as with any website you visit, your IP address and whatever your browser and your own YouTube account send it. Your quiz history is not included.

Dig deeper

This opens a new conversation at the AI assistant you chose, pre-filled with the context of the question you were looking at, so you can ask about it properly. The text sent contains up to 6,000 characters and includes: the question, any code shown with it, every answer option, which option you selected, whether you got it right, and the explanation the app gave.

It goes to whichever assistant you picked — Claude (claude.ai), ChatGPT (chatgpt.com), Copilot (copilot.microsoft.com), Grok (grok.com) or Gemini (gemini.google.com). It is carried in the URL that opens in your browser, so it is subject to that provider's own privacy policy and terms, not ours, from the moment the link opens. If you are signed in to that provider, the conversation will appear in your account there. We have no involvement in and no visibility of what happens next.

Turning this off. You are asked to choose an assistant when you first open the app, and you can change or remove that choice at any time in Settings. Choosing None removes the "Dig deeper" links from the app entirely. This is the one control that matters most for your privacy, because this link is the only feature that transmits anything about your quiz activity anywhere.

7. Android backup

On Android, the app allows Android's own backup system (android:allowBackup="true"). If you have device backup enabled in your Google account settings, Android may include the app's stored settings and quiz history in your device backup and restore them when you set up a new device. That backup is between you, your device and Google under Google's privacy policy — we do not operate it, cannot access it and are not sent a copy. You can turn device backup off in your Android settings.

iOS behaves comparably: app data may be included in your iCloud or encrypted local backup according to your own iOS backup settings.

8. Legal bases for processing

Where the UK GDPR or EU GDPR applies to you, our legal bases are:

Performance of a contract (Art. 6(1)(b)) — processing your purchase and subscription status through RevenueCat so that we can provide the Pro features you paid for, and restore them when you ask.
Legitimate interests (Art. 6(1)(f)) — keeping the subscription service secure and working, and understanding aggregate subscription counts in order to run the app sustainably. We consider this proportionate given that the data is pseudonymous and no profile of you is built.

Data that never leaves your device is not processed by us at all, so no legal basis is required for it.

9. How long data is kept

On your device: for as long as you keep the app installed. Deleting the app deletes it. There is no copy elsewhere.
At RevenueCat: subscription records are retained for as long as needed to operate and support the subscription and to meet tax, accounting and legal obligations, in line with RevenueCat's retention practices. You can ask us to delete your RevenueCat record — see below.
At Apple and Google: your purchase and billing records are kept by them under their own policies, and we cannot delete them.

10. Your rights, and how to use them

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to complain to a regulator. Because we hold almost nothing about you, most of these resolve quickly:

To delete everything on your device: delete the app, or clear site data for gapfyre.com in the web version. You do not need to ask us, and we cannot do it for you.
To access or delete your subscription record: email support@gapfyre.com. We can look up and delete your RevenueCat customer record. To find it we will need something that identifies the purchase — usually the store's order or transaction ID from your App Store or Google Play receipt. Deleting the record does not cancel your subscription or refund it: cancel through your store account, as described on our support page.
To stop the one feature that transmits anything: set your AI assistant to None in Settings.

We will respond within one month. There is no charge. If you are in the UK you may complain to the Information Commissioner's Office; if you are in the EEA, to your national supervisory authority.

If you are a California resident: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use personal information for cross-context behavioural advertising. We will not discriminate against you for exercising any privacy right.

11. Children's privacy

The app is educational and general-audience, but it is not directed at children under 13, and we do not knowingly collect personal data from children. There are no accounts, no profiles and no way for a user to contact another user, so there is little for a child to disclose. If you believe a child has provided personal data through a purchase made on your device, contact support@gapfyre.com and we will delete the associated record.

Note that the "Dig deeper" links open third-party AI assistants, most of which set their own minimum age. If you are setting the app up for a child, choosing None as the AI assistant in Settings removes those links.

12. Changes to this policy

If this policy changes we will update the date at the top of this page. If a change is significant — if the app begins collecting something it does not collect today — we will say so clearly here and, where the change requires it, in the app before it takes effect. Previous versions are available on request.

13. Contact

Questions, requests or complaints about privacy: support@gapfyre.com.