Privacy Policy

Last updated 2026-11-14

This policy explains what Jibby collects when you use the website jibby.fun and the Jibby app for Android (package fun.jibby.app), why, and the choices you have. Jibby ("we", "us") is a quiz game made in India.

1. The short version

• You can play without an account and without telling us who you are.
• Accounts use passkeys: we never see or store a password, your fingerprint or your face.
• We do not sell your personal data and we do not use analytics trackers.
• Ads come from Google (AdSense on the website, AdMob in the app). Jibby Plus members see no banner or full-screen ads.
• You can download everything we hold about your account, or delete it, at any time.

2. What we collect

We collect only what the game needs:

• Playing as a guest: the name and avatar you choose, your game progress (XP, levels, achievements) and, once you upload a file in Spark Studio, a random guest ID and device token. Publishing a quiz needs a free account. No email, phone number or real name is needed.
• Accounts: your username, display name, avatar and optional bio; your passkey’s public key (the private key never leaves your device or password manager); session tokens, which we store only as one-way hashes.
• What you create: quizzes, the pictures, sounds and videos you upload, ratings, favourites, follows and reports.
• Friends: friend requests, your friends list, invites and challenges, and your privacy choice for who may send you requests.
• Games: your answers and scores in games, rooms and live shows (rooms and shows are deleted when they end), your match history, ranked rating, weekly league and Daily Challenge results.
• Payments: if you buy Jibby Plus on the website, Razorpay processes your card or UPI details; we receive only the subscription ID, its status and dates. Purchases in the Android app will be handled by Google Play.
• Technical data: your IP address is used briefly to protect the service from abuse (rate limits) and is not stored with your account. To count plays of community quizzes fairly we store a salted one-way hash, never your IP address.
• On your device: settings, game progress, drafts and your sign-in token are saved in your browser’s or the app’s local storage.

3. Ads

On the website, Google AdSense may show ads on some screens (results, quiz lists and quiz pages) and may use cookies and similar technology to show and measure them. In the Android app, Google AdMob shows ads and may use your device’s advertising ID. Where the law requires consent (for example in the European Economic Area and the UK), Google’s consent message asks you first.

If you choose to watch a rewarded video (for example to claim a limited-time frame), Google confirms the reward directly to our server with your account ID and which reward it was. Nothing is granted for an unfinished video.

There are no ads during a question, in ranked games, rooms or live shows. You can learn how Google uses data at policies.google.com/technologies/partner-sites, change ad personalisation at adssettings.google.com, and reset or delete your advertising ID in your Android settings.

4. How we use your data

• To run the game: scoring on our servers, rooms, live shows, leaderboards, leagues and your profile.
• To keep Jibby safe and fair: a person reviews every quiz before it goes live, we act on reports, and we stop cheating and abuse.
• To process Jibby Plus subscriptions and event rewards.
• To show ads (see above) and send you in-app messages about your account.

5. What other people can see

Your username, display name, avatar, bio, level, achievements, equipped cosmetics and published quizzes appear on your public profile, on leaderboards and in games you join. Guests’ chosen names appear to the other players in their games.

6. Who we share data with

Only service providers that help us run Jibby, under their own privacy terms, and only as needed:

• Cloudflare: hosting, database and real-time game servers.
• Google: ads (AdSense, AdMob) and the Google Play Store.
• Razorpay: Jibby Plus payments on the website.
• Authorities, when the law requires it.

7. How long we keep it

We keep your account data while your account exists. Sign-in sessions end after 180 days without use. Rooms and live shows are deleted when they end or after 30 minutes without activity. When you delete your account, your personal data is deleted straight away and your published quizzes are hidden; records of payments are kept for as long as tax and accounting laws require.

8. Your choices and rights

In Settings → Account you can download all your data (one JSON file) or delete your account. You can change your name, avatar, bio and friend privacy at any time. You may also ask us to access, correct or delete your data, or raise a concern, under India’s Digital Personal Data Protection Act 2023 and, where it applies, the GDPR. Our Grievance Officer answers at privacy@jibby.fun.

9. Children

Jibby is not directed at children under 13, and we do not knowingly collect personal data from them. Anyone can play as a guest without giving personal information. If you believe a child under 13 has created an account, contact us and we will delete it.

10. Security

Passkeys protect accounts against phishing and password leaks. All connections use HTTPS, session tokens are stored only as hashes, and scores are checked on our servers. No system is perfectly secure, so please keep your devices locked.

11. Changes and contact

We will update this page when our practices change and change the date above; important changes are announced in the app. Email privacy@jibby.fun.