1. Information we collect
We collect the information you give us directly (name, email, organization details) when you create an account. When you host or play a quiz we collect the responses and performance data tied to that session. Like any modern web service we also collect basic usage data: device, IP address, browser.
2. How we use it
- Run, maintain, and improve the product.
- Process quiz results and generate analytics.
- Send technical notices and support messages.
- Respond to your requests and inquiries.
- Watch for trends, usage patterns, and abuse.
- Detect and prevent fraud or unauthorized access.
3. Sharing and disclosure
We don't sell personal information. We share data only with service providers who help us run the platform — including Dodo Payments for payment processing, plus our hosting and analytics providers. Quiz results are shared with the host or organization that ran the session. That's the point. We'll disclose information if the law requires it, or if we genuinely need to protect people.
4. Storage and security
Data is stored on secure servers with encryption at rest and in transit. We run access controls, regular audits, and active monitoring. No system is perfect, but we take this seriously.
5. Retention
We keep your account data while your account is active. Quiz session data retention depends on your organization's plan. You can delete your account at any time from Settings; when you do, or when your account is closed, we remove your personal data within 30 days. You can also email [email protected].
6. Your rights
- Access a copy of your personal data.
- Correct anything that's wrong.
- Request deletion of your data.
- Object to or restrict processing.
- Export your data in a portable format.
- Withdraw consent at any time.
7. Cookies
We use essential cookies to keep you logged in and remember preferences. No advertising cookies or cross-site tracking. We use privacy-friendly, cookieless analytics (Umami) to understand aggregate usage, and it only loads after you accept the consent banner — decline and it never runs.
8. Children's privacy
Gumbalup is built for organizations and their participants. We don't knowingly collect personal information from children under 13 without parental consent. If you believe that's happened, contact us and we'll fix it.
9. Changes to this policy
We'll update this page when things change. Material changes get a new “Last updated” date at the top and a heads-up via email where appropriate. Continued use of the service means you accept the updated policy.
10. Contact
Gumbalup is the data controller for the personal data described in this policy. Questions? Reach us through the contact page or email [email protected].