Privacy and your data

Version: 2026-10-29-v1. Contact: purrcent@krestholdings.com for privacy, grievance, correction, access or erasure requests.

Purrcent uses your WhatsApp number to verify sign-in. Sign-in stores a keyed phone hash and masked hint. If you separately opt into WhatsApp reminders and save your verified number, its delivery destination is encrypted in the server database. When live delivery is enabled, Twilio and WhatsApp process your number and verification code. Codes expire after five minutes, permit five verification attempts and can be used once. We store only keyed code hashes. Device sessions expire after 30 days and can be revoked in Your account.

Practice answers, timing, reserved facts, history and mastery are stored on our server. Your device keeps a recoverable practice cache. Guest storage identifies your practice; clearing it can remove access to guest history. Account sessions use platform secure storage; web security depends on this site's browser origin. Public visibility and optional notifications are off by default. Under-18 accounts are excluded from public username search and geographic rankings, regardless of settings. Minor registration requires reviewed guardian consent.

Competitive attempts retain server receipt times, answers, integrity decisions and verified scores. Public rankings mask private profiles and exclude under-18 geographic entries. Adults may supply an optional country, region and city for geographic rankings; no GPS is collected. Room invitations store a keyed phone hash and masked hint and require recipient consent. Active members can see names within their private room. Owner moderation and access use separate password-protected owner credentials and audited decisions. Invitation delivery is currently mocked; no invitation messages are sent.

Achievements, streaks, mascot preferences and the notification inbox use your confirmed history. Notification preferences are optional and off by default. Push registration stores an encrypted device token after permission; optional WhatsApp reminders require separate consent. Delivery records are deduplicated and record provider acceptance or failures. You can remove delivery destinations and withdraw consent in Your Purrcent. Advertising is disabled; future banner integration requires adult eligibility, explicit consent and provider/privacy activation and never appears inside quizzes.

You can view/copy an export and delete your account from Your account. Deletion requires a recent sign-in and removes active profile and practice data, revokes sessions, and withdraws guardian consents. Minimal pseudonymous security/erasure records are retained for recovery and abuse prevention. Private backups expire within seven days; a restoration must reapply the erasure ledger. Signing out removes account caches from that device. Other devices may retain offline copies until reconnected or cleared; revocation prevents further server access.

Guest practice remains available without account registration. No advertising, competitive registration, public ranking or marketing delivery is enabled in this development release. Guardian identity/authority, final legal notices and store compliance require review before those features launch.

Request account deletion without the app. Do not send passwords or OTPs to support.

Advertising setup

Updated 1 November 2026. Live advertising remains disabled while provider approval and testing are pending. The planned integrations are Google AdMob on Android and Google AdSense on the web. When enabled, Google and its advertising partners may process device or browser identifiers, cookies/local storage, IP address and ad interactions for ad delivery, measurement and fraud prevention. See how Google uses information from partner sites and apps.

Purrcent permits ad placements only on the untimed rewards screen for eligible signed-in adult accounts with the advertising preference enabled and the required provider consent. No ads are requested for guests or under-18 accounts, or inside quizzes. You can turn the advertising preference off in Your Purrcent. Where required, use Ad privacy options on Android or Privacy and cookie settings on the web to change the provider's consent choices. Unknown or unavailable consent blocks the placement. Declining optional advertising does not remove practice access.