Back to Trivana
Trivana

Privacy Policy

Last updated: September 7, 2026

Who We Are

Trivana's master product and web service are operated by Rerato, Inc. (Delaware, USA), which is the data controller for the processing described in this policy unless a specific service context states otherwise. Our current mobile applications may be published and distributed in app stores by our affiliate Rerato Technologies Private Limited (CIN: U58200HR2025PTC130654, registered at First Floor, Sector-17, Faridabad, Haryana 121002, India). Both entities are referred to as "Rerato," "we," or "us" where appropriate, and the applicable seller or publisher is identified at checkout, on the receipt, or in the relevant app store.

Rerato also operates rerato.ai, our creator platform for AI hosts. If you use the same sign-in email on both products, we may link the two accounts internally so your relationship with us carries across products. The products keep separate databases; any link uses a one-way identifier derived from your email address, and you can ask us to delete either account independently.

Contact: [email protected]

What Data We Collect

We collect the following types of information to provide and improve our services:

  • •
    Account Information: Email address, name, and avatar (if provided through authentication)
  • •
    Authentication Data: Google OAuth identifiers and basic profile information for web login, or a pseudonymous account identifier for a zero-friction mobile player account
  • •
    Sales and Communications Data: Name, work email, organization and workshop details, correspondence, CRM stage, and, when tracking is enabled, email delivery, open, reply, and link-click events
  • •
    Usage Data: Games created and played, Daily Drop entries, answers, scores, streaks, challenges, host preferences, reports, blocks, and gameplay statistics
  • •
    Technical Data: IP address, browser type, app version, device model, operating-system version, installation or push-notification identifiers, crash/diagnostic events, and cookies for security, delivery, and session management
  • •
    User-Generated Content: Trivia prompts, game configurations, and uploaded content (such as PDFs, documents, or text from URLs) used to generate games. For a Personalized Facilitator Setup already purchased, this may also include consented reference photographs and, only if the customer separately chooses voice cloning, a consented voice recording made for that request. A fictional-character path does not accept a real person's photographs or voice.

Why We Collect This Data

We use your information for the following purposes:

  • •To provide login functionality and maintain your account
  • •To enable gameplay features including scores, streaks, and leaderboards
  • •To personalize your experience and remember your preferences
  • •To ensure security and prevent abuse of our platform
  • •To generate and regenerate trivia questions from your uploaded content (PDFs, URLs, or text)
  • •To analyze usage patterns and improve our services
  • •To send notifications you explicitly allow, such as the next Daily Drop or a challenge result
  • •To respond to inquiries, manage pilot and customer relationships, send relevant sales or service communications, and measure outreach engagement

How We Share Data

We do not sell your personal data. We share data only with trusted service providers who help us operate Trivana:

  • •
    Core service delivery: account services, application delivery, and storage for the content and records needed to provide the feature you use
  • •
    Payments and billing: billing contact and transaction information for supported purchases
  • •
    AI and generated media: source content, prompts, prepared scripts, and generated output when you use question, voice, or facilitator-media features. For a personalized facilitator, the default self-based path sends consented reference photographs to the avatar provider and uses a licensed Trivana voice, so it requires no customer voice recording. The optional cloned-voice path separately sends a recording only after explicit v2 voice consent and recording provenance are recorded. The fictional-character path accepts no real-person reference materials. These materials are used only to build and operate that customer's facilitator, not for another customer or Trivana marketing. Voice and facilitator-media providers are not intended to receive Learn participant response records; do not place participant personal data in source material or facilitator scripts unless a written scope permits it.
  • •
    Sign-in and communications: account profile details from the sign-in method you choose, plus email address and message content for transactional communications. If you sign in with Google, Trivana's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Trivana does not receive your sign-in password.
  • •
    Analytics and reliability: pseudonymous operational events and diagnostics needed to run and improve the service, plus optional browser and mobile analytics only where the required consent is provided. Advertising identifiers and ad-personalization signals are disabled in Trivana's mobile analytics setup.
  • •
    Customer relationship management: contact, organization, and workshop details; sales and support messages; deal status; and, where tracking is enabled, email and public-site engagement. HubSpot visitor attribution runs only after you accept optional analytics and only on eligible public pages.

The current provider register identifies the applicable vendors and data categories without describing Trivana's internal architecture. Review the service-provider and sub-processor register.

Trivana Learn & Participant Data

For participant content and response records that Trivana handles under a buyer's instructions, the buyer generally acts as controller and Rerato acts as processor. Rerato separately decides how to process account, billing, service-security, abuse-prevention, legal-compliance, and certain operational records needed to run Trivana. The applicable agreement or DPA controls if it says otherwise.

  • What we store about learners: the name a learner types when they start a quiz (self-asserted, not identity-verified), a pseudonymous participant identifier, their responses, scores, completion time, and play timestamps. The current participant flow does not require an email address or a Trivana account.
  • Link access and identity: access uses an unlisted round link. A learner can use any name; possession of the link and the entered name do not verify who completed the round. A forwarded link may be opened until it expires or is revoked.
  • Reinforcement continuity: an essential, HTTP-only participant cookie may remain on the learner's device for up to 90 days so Day 0, Day 7, and Day 14 activity can be associated with the same pseudonymous learner. The cookie does not keep an expired or revoked participant link authorized; each round is checked separately on our servers.
  • Retention & deletion: learner records are retained while your account is active. You can request deletion of a specific quiz's results, a cohort's data, or all learner data by emailing [email protected]. We target removal from active systems within 30 days after verification, subject to legal retention requirements. Limited residual copies may remain until bounded backup cycles complete. On termination, source content and learner records can be exported or deleted as provided by the applicable agreement.
  • Sub-processors & DPA: the providers we use to process this data are listed on our sub-processors page. Any Data Processing Addendum for a written Trivana Learn or Trivana Studios scope must also be agreed in writing.

For a done-for-you workshop reinforcement pilot, we use the supplied workshop material only to produce, review, host, and support the purchased deliverables. We do not publish that material or the resulting private checks as public library content without permission. You can request deletion of the source material and pilot results at any time, subject to legal recordkeeping requirements.

Cookies

We use cookies and similar technologies for essential functions and, where you choose, optional measurement and attribution:

  • •Session Cookies: To keep you logged in during your visit
  • •Authentication Cookies: To securely identify your account
  • •Preference Cookies: To remember your settings and preferences
  • •Learn continuity cookie: To connect a participant's three private reinforcement rounds for up to 90 days without requiring an account; authorization for every round is still validated server-side
  • •Visitor measurement identifier: If you have not yet answered the cookie banner, we store a random first-party identifier on your device so we can tell a returning visit from a new one. It contains no personal information, is never shared with third parties, and expires automatically after 90 days. If you decline optional analytics, it is not stored and every visit is counted as new
  • •HubSpot visitor-attribution cookies: After you accept optional analytics on an eligible public page, HubSpot may set __hstc, hubspotutk, __hssc, and __hssrc to recognize a browser, count visits and sessions, and associate a later identified interaction with a CRM contact. The visitor identifiers currently last up to six months; the session cookies last for 30 minutes or the browser session. Withdrawing consent sends HubSpot do-not-track and cookie-revocation requests; HubSpot may use the __hs_do_not_track cookie to remember that choice.

We show a cookie consent banner on first visit so you can accept or decline optional product analytics cookies, CRM visitor attribution, and advertising pixels. Declining optional analytics does not disable first-party traffic and website performance measurement on public pages. That measurement uses no advertising cookies, is never shared with third parties, and excludes private account, buyer, participant, and capability-link surfaces. Until you answer the banner, it includes the 90-day visitor measurement identifier described above, so that returning visits can be distinguished from new ones; declining removes that identifier and each visit is then counted separately.

Sales Communications & CRM

We use HubSpot to manage prospect and customer records, sales communications, pilot opportunities, and related engagement. A sales or marketing email may include a small tracking image and tracked links that report delivery, opens, and clicks. These signals can be affected by privacy protections, automated scanners, image loading, or forwarding and are not treated as proof that a particular person engaged.

You can opt out of non-essential sales or marketing messages using the unsubscribe or preference link in the message, or by contacting [email protected]. We may still send service, security, billing, or other transactional messages that are necessary for an active account or purchase.

HubSpot generally acts as our processor or service provider for CRM records. If HubSpot Intent data access or enrichment products are enabled, HubSpot's current terms may instead treat tracking-code data as controller data used for its own purposes. See the HubSpot Privacy Policy for those practices.

Trivana ChatGPT Apps

When you create a Trivana game or practice quiz through a Trivana app inside ChatGPT, OpenAI sends Trivana the tool request needed to fulfill it. This may include your requested topic, language, audience, host preference, difficulty, question count, optional title, and any URLs, notes, or source text you choose to include.

  • •
    How we use it: To generate your trivia game, publish a shareable Trivana link (unlisted by default), prevent abuse, and record internal analytics labeled as ChatGPT App traffic.
  • •
    What we do not receive: We do not receive your full ChatGPT conversation history, ChatGPT password, OpenAI account credentials, or data from other ChatGPT apps or threads.
  • •
    Request metadata: Standard request metadata visible to our infrastructure, such as IP address, may be used for security, rate limiting, and fraud prevention.
  • •
    Unlisted by default; public only with your approval: Games created from ChatGPT are unlisted by default (anyone with the link can open and play them). Popularity may make a claimed game eligible for Community consideration, but never makes it public automatically. Public Community and search discovery require you to review the game and explicitly opt in from your creator report. You can withdraw that approval or request deletion anytime at [email protected].
  • •
    Trivana Study material: Notes, links, and other study material you submit are treated as user-provided content and used to create the practice quiz you request. Trivana Study quizzes are unlisted by default and are excluded from public Community featuring. Anyone you give an unlisted play link to can open it.

You can disconnect a Trivana app from your ChatGPT settings. After disconnecting it, Trivana will not receive new requests from that app on your behalf.

Data Retention

We retain your personal data for as long as your account is active. Uploaded source content (PDFs, documents, URLs) is stored to enable game editing and question regeneration, and is deleted when the associated game is deleted. If you submit a verified account-deletion request, we target removal of personal data from active systems within 30 days, except where the law requires us to retain certain information. Limited residual copies may remain until bounded backup cycles complete.

Standard mobile player accounts can be deleted immediately in the app. If you no longer have app access, the public account-deletion resource lets you start an assisted request without reinstalling Trivana, including for a pseudonymous account.

Your Rights

You have the following rights regarding your personal data:

  • •Access: Request a copy of your personal data
  • •Correction: Request correction of inaccurate data
  • •Deletion: Request deletion of your account and data

To exercise any of these rights, please contact us at [email protected].

If you are located in the EU, UK, or California, you may have additional rights under applicable data protection laws.

Request account and data deletion

We process verified deletion requests within 30 days.

Security

We implement reasonable technical and organizational safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Trivana is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at [email protected] so we can promptly remove it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

Service operator and data controller: Rerato, Inc., Delaware, USA

Business mailing address: 815 Superior Ave East, Suite 1618, PMB 228, Cleveland, OH 44114, USA

Affiliated mobile store publisher and distributor: Rerato Technologies Private Limited, First Floor, Sector-17, Faridabad, Haryana 121002, India